Privacy Policy
Data controller
The controller for the personal data collected through this website is ODYSSEE (see the contact details in the legal notice). For any question regarding your data, contact us at hello@odoproof.com.
Data we collect
When you subscribe, we collect your account details (name, email address, company, country) and the billing details needed for your subscription, which are processed by our payment provider, Stripe. Once your Tesla is connected, the service receives the data your mileage log needs: vehicle identification (VIN, model), drive state, odometer readings and the vehicle's position during trips, from which we derive the start and end addresses. Tesla access tokens are stored encrypted. When you type an address in the application, the text you type is used to suggest matching addresses. The website uses an analytics tool (Google Analytics). A live chat (Crisp) is available on the website and in the application. On odoproof.com, the chat script loads only when you open the chat or when a chat session already exists in your browser. The application loads the chat script on every page, so the chat receives technical data (IP address, page address, browser and language) even before you open it; its cookies are set only once you open the chat. When you use the chat, we process your messages, your name and email address if you provide them, and technical data (IP address, browser, pages viewed during the conversation). In the application, the chat also automatically receives your name and email address as a signed-in user, and the country and plan of your workspace. No data about your vehicles, trips or positions is sent to the chat. Minimal technical data (server logs) is processed for security purposes. We collect only what we need.
Purposes and legal basis
Your data is used to create and manage your account, provide the service (including address suggestions as you type), process your subscription payments and answer the support requests you send through the live chat. The legal basis is the performance of our contract with you and, for analytics, your consent, which you may withdraw at any time. Live chat processing is based on the provision of the support service you request and on our legitimate interest in answering the requests sent to us.
Recipients and processors
The application is hosted by Hetzner Online GmbH in Germany, and this website by Netlify, Inc. Our other providers are Stripe (payments and billing), Mailtrap (service emails), the OpenStreetMap Foundation (conversion of positions into addresses, address search when suggestions are unavailable, and maps), Crisp IM SAS (live chat on the website and in the application) and Google (Google Analytics, website audience measurement). Crisp IM SAS, a company established in France, acts as our processor under a data processing agreement. To suggest addresses as you type in the application, our server sends the text you type, without your IP address, to the Géoplateforme of the French National Institute of Geographic and Forest Information (IGN) for French addresses, or to Photon, operated by komoot (Germany), for other countries. The results are cached on our server. Tesla, Inc. provides, through its Fleet API, the vehicle data you authorise. We do not sell or rent your data to third parties.
Retention period
We keep your data for as long as your account is active. Raw data received from your vehicle is deleted after 30 days; your trips stay in your logbook. After your subscription ends, we delete your personal data and trip history within 30 days, unless the law requires us to retain it for longer. Live chat conversations are kept for as long as necessary to handle your request and to manage our customer relationship.
Transfers outside the European Union
The application and its database are hosted in Germany. Some providers (Netlify, Stripe, Mailtrap and Google) may process data outside the European Union, notably in the United States, under appropriate safeguards (standard contractual clauses or an equivalent mechanism). Crisp hosts live chat data in the European Union (Netherlands and Germany). Its relay servers located outside the European Union (United States, United Kingdom and Singapore) keep connection logs only. The address suggestion services are operated by IGN, in France, and by komoot, in Germany.
Your rights
You have the right to access, rectify, erase, object to, restrict and port your data. You may exercise these rights at hello@odoproof.com and, in the event of difficulty, lodge a complaint with the competent data protection authority (in France, the CNIL).
Security
We implement reasonable technical and organizational measures to protect your data against any unauthorized access, alteration or disclosure.