Privacy Policy
Last updated: 17 June 2026
This Privacy Policy explains what NEXSTREAM CORP. ("we", "us") collects when you use MyTBox ("the Service"), and how we handle it. We designed MyTBox to collect as little as possible.
1. The short version
- Your vehicle data never leaves your browser. We do not upload, store, or transmit your vehicle's diagnostic/vitals data to our servers.
- We collect only what's needed for accounts and billing: your email, a subscription identifier, and cookieless analytics.
- We use no advertising cookies and no Google tracking.
2. What we collect
| Data | Why | Where |
|---|---|---|
| Account email | Passwordless sign-in and account contact | Supabase |
| Subscription status / identifier | To know whether your subscription is active | Supabase; Paddle |
| Hashed vehicle identifier | A one-way salted hash of your VIN, used only to associate a subscription with a vehicle. We never store the actual VIN. | Supabase |
| Anonymous usage analytics | Aggregate, cookieless metrics to improve the product | Plausible |
| Feedback you send us | If you use the in-app feedback form: your message, your email (so we can reply), basic technical context (app version, language, device type), your approximate country (we do not store your IP address), and an optional screenshot if you attach one. If signed in, your account is linked so we can follow up. No vehicle data or VIN is included. | Supabase |
| Payment details | Handled entirely by Paddle — we never see or store your card data | Paddle |
3. What we do NOT collect
Your vehicle's data (battery, charging, thermal, body, alerts, build options, VIN, etc.) is processed in your browser only and is never sent to or stored by us. We do not use advertising cookies, cross-site trackers, or Google Analytics.
4. Sub-processors
- Cloudflare — hosting, CDN, DNS, DDoS protection.
- Supabase — account authentication and subscription records.
- Paddle — payment processing and Merchant of Record.
- Plausible — cookieless, privacy-friendly analytics.
5. Your rights
Depending on where you live (e.g. GDPR/UK GDPR, CCPA), you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. Email hello@mytbox.io to exercise any of these. You can delete your account at any time, which removes your account email and subscription association from our systems (payment records are retained by Paddle per their own policy and legal obligations).
6. Data retention
We keep account data until you request deletion or close your account. Payment and tax records are retained by Paddle as required by law. Analytics data is aggregate and not tied to your identity.
7. Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
8. Changes
We may update this Policy; the "Last updated" date reflects the latest version.
9. Contact
NEXSTREAM CORP.
Email: hello@mytbox.io