Privacy

• Account. Your name, email address, and a hashed password. We keep a session cookie so you stay signed in.
• Home ZIP code. Used to look up the forecast and weather alerts for your home. We don't ask for a street address.
• Tesla connection. When you connect Tesla, Tesla gives us access and refresh tokens for the permissions you approve on Tesla's own sign-in page. We store those tokens encrypted, along with the number of vehicles on the account. We never see your Tesla password.
• Vehicle and energy data. Through that connection we read what a rule needs: each vehicle's battery level, charge limit, and charging state, and your Powerwall's charge, backup reserve, solar, and grid status. We use it to decide when to change a limit or the reserve.
• Plan and billing. Your plan, trial dates, and the Stripe customer and subscription IDs. Stripe collects and stores your card. We never see or store the card number.
• Bot API keys. Keys are created on our servers and shown to you once. We store only a one-way hash of each key, plus its name, last four characters, creation date, and when it was last used, so you can recognize and revoke it.
• Rules and preferences. Your rules, outage settings, bot settings and inbox, and email preferences are stored with your account on our servers, so they're the same on every device.
• Terms acceptance. When you accept our Terms, we record which version you accepted, when, and the IP address and browser that accepted them, as a record of the agreement.
• Activity records. What StormControl changed on your vehicles and Powerwall, the Tesla requests it made and their cost, and when it last checked your home. We use these to run and troubleshoot the Service and to enforce spending caps.

Only to run StormControl: read the forecast for your ZIP code, evaluate your rules, change charge limits and the Powerwall reserve when a rule switches on or off, bill your plan, and contact you about your account. We don't sell your data, and we don't use it for advertising.

Checking the forecast never wakes your car. We only contact the vehicle when a rule switches on or off and a charge limit actually needs to change.

• Tesla, to read vehicle and Powerwall status and to change charge limits and the backup reserve, only with the permissions you approved.
• Stripe, to run your subscription and 7-day free trial. Stripe receives your email address and plan.
• The National Weather Service, which receives the location for your ZIP code when we request a forecast and alerts. They don't receive your name or email.
• Our hosting provider, which runs the servers and database that store the data above.
• Our email provider, which delivers password resets, account alerts, and the change emails you choose to receive. It receives your email address and the message.

We'll also disclose data if the law requires it.

The Off-Grid Challenge is invite-only and separate from StormControl accounts. If you join with an invite code, we keep the name you give your home, your Tesla energy access (read-only, encrypted at rest), which energy site is competing, and a reading every minute: solar output, home use, battery power and charge, grid power, and whether the grid is up. We don't ask Tesla for your vehicles, their location, or any commands.

The leaderboard is public. It shows your home's name, those readings, and your time off grid. It never shows your address, email, or Tesla account. Readings are kept as the competition's history. To leave, remove StormControl from your Tesla account; your home drops off the board at the next reading. To have your home and readings deleted, email [email protected].

We keep your data while your account is open. You can revoke StormControl's Tesla access at any time from your Tesla account, and revoke bot keys from the console. To delete your account and everything tied to it, email [email protected] from the address on the account.

Connections use HTTPS. Passwords are hashed and Tesla tokens are encrypted at rest. No system is perfectly secure, so tell us right away if you think your account has been misused.

StormControl is for vehicle and home owners. It isn't meant for anyone under 18.

If this policy changes, we'll update the date at the top and, for significant changes, email you. Questions: [email protected].

StormControl is operated by Mann Holdings D, LLC and is not affiliated with Tesla, Inc. or the National Weather Service.