Privacy Policy

Last updated June 2026

CuePilot, owned and operated by Recherche Solutions LLC ("we", "us"), runs the CuePilot platform and the Tesla cabin-climate automation at cuepilotai.com. This policy explains what we collect, why, and how we protect it. We collect only what we need to run the automations you set up, and we do not sell your data.

What we collect

• Account: your email address (via our sign-in provider) and your plan.
• Connected accounts: when you link Tesla, we store the access/refresh tokens Tesla issues, encrypted at rest. We never see your Tesla password.
• Vehicle data: to decide whether to act, we read vehicle state such as battery level, cabin (inside) temperature, and climate status. We use the cabin temperature — not your location — to decide when to cool or heat.
• Your settings: the schedules, temperatures, and preferences you configure.
• Location (optional) — used in the moment, never stored: we do not request your vehicle's location by default. It is used only if you both turn on “Stop Errand mode when I get home” in your settings and grant Tesla's Vehicle Location permission. When enabled, your car's location is read live and only while an Errand session is actively running, for the single purpose of checking whether your car has parked near your saved home address. It is never stored: we use the coordinates the instant we read them to make that one comparison, then discard them. We do not log, retain, profile, track, or share your location, and we never use it for advertising. When Errand mode is off, we don't read your location at all.

How we use it

Primarily to operate the features you enable — reading vehicle state and sending the climate commands you authorize (turn HVAC on/off, set temperature, Pet Mode). We do not sell or rent your personal data. On the free plan we may show our own ads and promotions (see below); Pro and Plus are ad-free.

We never sell or share your data

We never sell or rent your data, and we never share it with third parties for their own advertising or marketing. The only parties we share data with are the service providers we rely on to run CuePilot — Tesla (to send the vehicle commands you authorize), Stripe (payments), Supabase and Cloudflare (storage and hosting), and your calendar provider (Google or Microsoft) if you enable calendar sync. Each processes your data solely to provide its service to us. We share your data with no one else.

On the free plan we may show our own promotions and ads — for example prompts to upgrade, or offers from sponsors we work with directly. These are served by us: we do not hand your data to outside ad networks and we don't use cross-site ad-tracking cookies to profile you. Pro and Plus plans are ad-free.

Tesla data

We access the Tesla Fleet API on your behalf with the scopes you approve — vehicle information, vehicle commands, and (optionally) vehicle location, which is used solely for the home-arrival feature described above and never stored. We never unlock, drive, or manage charging. You can disconnect your Tesla at any time, which revokes our access and deletes the stored tokens.

Google user data

Connecting a Google Account is optional and powers one feature: pre-conditioning your car ahead of appointments on your calendar. With your consent we request your email address and read-only access to your Google Calendar (calendar.readonly). We read the start time and location of upcoming events only to decide when your car needs to be ready, and we schedule the climate accordingly. We never create, edit, or delete calendar events. We do not use Google user data for advertising, we never sell or transfer it, and we do not allow humans to read it except where you ask us to for support, where it is required by law, or where it is necessary for security purposes. You can disconnect Google at any time from your CuePilot profile or at myaccount.google.com/permissions, which revokes our access and deletes the stored tokens.

CuePilot's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Where it's stored

Account data and encrypted tokens are stored in our database provider (Supabase); the application runs on Cloudflare. Command signing runs through a dedicated proxy using a key pair you authorize with your vehicle.

Your choices

You can disconnect Tesla, remove schedules, or delete your account at any time. To request deletion of your data, contact us (see the Contact page).

Changes

We may update this policy; material changes will be reflected by the date above.

This document is a starting template and not legal advice; please have it reviewed before commercial launch.