This Privacy Policy explains how Vehiclescope, LLC, which manages teslads.com, our dashboards, APIs, advertising scripts, ad serving technology, documentation, campaign tools, publisher tools, billing and payout features, and related services (collectively, the "Services"), collects, uses, discloses, and protects personal information. Vehiclescope, LLC is referred to in this Privacy Policy as "Vehiclescope," "we," "us," or "our." This Privacy Policy also explains how we process information when approved publishers place Vehiclescope ad technology on third-party websites, web apps, mobile apps, or other digital properties.

This policy applies to advertisers, publishers, partners, account users, visitors to our website, and end users who interact with Vehiclescope ads or ad placements on third-party publisher properties. Publisher properties may have their own privacy policies and consent flows. Publishers are responsible for telling their users that Vehiclescope technology may be used and for obtaining legally required consent before sending personal information or device information to us.

1. Personal Information We Collect

We collect the following categories of personal information depending on how the Services are used.

• Account information: name, email address, password hash, verification status, role, timezone, account preferences, registration data, password reset data, and login records such as last login IP address.
• Business profile information: company name, company description, website, phone number, address, city, state, country, postal code, suspension status, and related account status information.
• Advertiser information: campaign names, descriptions, images, landing page URLs, budgets, schedules, spend limits, target Tesla models and years, geographic targets, approval status, rejection reasons, campaign analytics, and exported reports.
• Publisher information: platform names, platform URLs, submitted privacy policies and terms, API keys, intelligent advertising status, approved platforms, revenue share data, payout status, and platform analytics.
• Billing and payout information: Stripe customer identifiers, Stripe Connect account identifiers, payment method identifiers, card brand and last four digits, payment status, payment intent identifiers, charge metadata, payout amounts, payout dates, tax or identity information handled by our payment providers, and related transaction records.
• Ad event and measurement information: campaign ID, platform ID, event type such as view or click, IP address, server-generated visitor hash, user agent, device type, browser, operating system, country, state, city, timestamp, cost, billable status, billable window, validity status, invalidation reason, auction rank score, clearing price, and auction metadata.
• Publisher-provided contextual or user-specific attributes: Tesla model, Tesla year, coarse geographic attributes, page or app context, placement attributes, and other attributes that a publisher is approved to transmit for ad matching, measurement, fraud prevention, billing, or reporting.
• Communications and support information: messages, feedback, requests, disputes, abuse reports, and records of our responses.
• Technical information: log data, request headers, error data, API usage, security events, session data, cookies, similar technologies, and information needed to operate, secure, debug, and improve the Services.

We do not want publishers or advertisers to send us sensitive personal information unless we have expressly agreed in writing. Do not send health data, biometric data, precise GPS location, government identifiers, payment card numbers, account passwords, children's data, protected-class attributes, or other sensitive data through ad placement attributes, APIs, campaign metadata, or support requests.

2. How We Collect Information

• Directly from you: when you register, set up a business profile, create campaigns, submit platforms, configure billing or payouts, contact us, or use dashboards.
• From publisher integrations: when a publisher includes our script, API, or ad link on a third-party property and an ad is requested, viewed, or clicked.
• Automatically: through server logs, cookies, sessions, API calls, request headers, fraud checks, and event tracking.
• From service providers: including payment processors, payout providers, hosting providers, email providers, location tools, fraud prevention providers, and support tools.
• From advertisers and publishers: including information about campaigns, landing pages, platforms, placement context, user attributes they are permitted to provide, exclusions, disputes, and compliance requests.

3. Embedded Advertising Technology on Third-Party Sites and Apps

Approved publishers may place Vehiclescope scripts, links, or API calls on external websites, web apps, mobile apps, or other digital properties. When this happens, the publisher's property may request an eligible ad from Vehiclescope and may send approved attributes such as Tesla model, Tesla year, country, state, city, or other approved contextual or user-specific information. Our current browser loader makes ad requests without browser credentials and does not require the publisher to send names, emails, phone numbers, or other direct identifiers.

Even when direct identifiers are not sent, IP addresses, user agents, device information, precise timestamps, coarse location attributes, vehicle attributes, and publisher-provided user attributes may be personal information under some laws. We use this information to select ads, track views and clicks, redirect ad clicks, bill advertisers, calculate publisher payouts, detect invalid activity, generate analytics, enforce our Terms, and protect the Services.

Publishers must provide legally required notices and obtain legally required consent before using Vehiclescope technology or sending personal information to us, including where required for cookies, pixels, SDKs, local storage, device access, personalized advertising, targeted advertising, or electronic communications technologies. Publishers must also honor user choices and must not send us data for users who have opted out where applicable.

4. Cookies and Similar Technologies

On teslads.com, we may use cookies and similar technologies for authentication, session management, security, CSRF protection, remembering preferences, account functionality, analytics, and service operation. When our ad technology is used on publisher properties, ad requests and click redirects may transmit request data such as IP address, user agent, and approved placement attributes. We may use cookies, pixels, scripts, SDKs, local storage, or similar technologies if needed for approved ad serving, measurement, security, fraud prevention, or compliance features.

You can control cookies through your browser settings, but disabling cookies may affect account login, dashboard functionality, fraud prevention, billing, or measurement. Publishers are responsible for cookie banners, consent management platforms, app notices, and similar controls on their own properties where required.

5. How We Use Personal Information

• Provide, operate, maintain, debug, secure, and improve the Services.
• Create and manage advertiser, publisher, partner, administrator, and user accounts.
• Serve ads, select eligible campaigns, run ad auctions, pace campaigns, and match ads to approved contextual, vehicle, location, and platform attributes.
• Track views, clicks, billable windows, invalid activity, costs, advertiser spend, and publisher revenue share.
• Process payments, charges, invoices, disputes, refunds, payouts, tax records, reserves, and accounting records.
• Review, approve, reject, flag, pause, or remove campaigns and platforms.
• Generate dashboards, reports, exports, forecasting, network quality metrics, and campaign analytics.
• Detect, investigate, prevent, and respond to fraud, security incidents, abuse, invalid traffic, policy violations, and legal risk.
• Communicate with you about the Services, support, updates, disputes, policy changes, billing, payouts, and administrative notices.
• Comply with law, enforce agreements, protect rights, and resolve disputes.
• Develop new features, improve ad relevance, improve fraud controls, and maintain network quality.

6. Legal Bases for EEA, UK, and Swiss Users

Where GDPR, UK GDPR, or similar laws apply, our legal bases may include:

• Contract: to provide accounts, dashboards, campaigns, integrations, billing, payouts, support, and other requested Services.
• Legitimate interests: to operate, secure, improve, measure, debug, prevent fraud, enforce terms, protect the network, and provide non-sensitive analytics, balanced against individual rights and expectations.
• Consent: where required for cookies, similar technologies, personalized advertising, targeted advertising, publisher-provided user attributes, marketing communications, or other processing that requires consent.
• Legal obligations: to comply with tax, accounting, payment, sanctions, consumer protection, privacy, security, and other legal duties.
• Legal claims and vital interests: where necessary to establish, exercise, or defend legal claims, prevent harm, or protect people, systems, and rights.

Publishers are responsible for selecting and documenting the appropriate legal basis for their own collection and transmission of personal information from publisher properties to Vehiclescope, including obtaining consent where required.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

• Advertisers: campaign dashboards and exports may include event-level and aggregated information such as dates, times, event types, platform names, IP addresses, location attributes, costs, and validity status for campaigns they own.
• Publishers and partners: publisher dashboards may include platform-level and aggregated ad activity, clicks, views, revenue share, payout status, and platform performance.
• Service providers: hosting, infrastructure, database, queue, logging, security, email, support, analytics, payment, payout, location, fraud prevention, and professional service providers who process information for us.
• Payment providers: Stripe and related payment or payout providers process advertiser payment methods, charges, customer records, Connect accounts, transfers, and compliance information under their own terms and policies.
• Administrators and business users: authorized personnel and account users who need access to operate, review, support, approve, bill, pay, investigate, or secure the Services.
• Legal, safety, and compliance recipients: courts, regulators, law enforcement, tax authorities, payment networks, auditors, advisors, counterparties, or others when we believe disclosure is required or appropriate.
• Business transaction recipients: parties involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, due diligence, or similar transaction.

We do not sell account contact information in the ordinary sense of exchanging it for money. Some advertising, measurement, or data sharing activities may be considered "selling," "sharing," or "targeted advertising" under certain U.S. state privacy laws, especially if publisher-provided data is used for cross-context ad selection or measurement. See "Your Privacy Choices" below.

8. Advertiser Reports and IP Addresses

Advertiser exports may include IP addresses and other event-level data for valid campaign events. Advertisers may use this information only for campaign measurement, billing review, fraud investigation, compliance, and internal business analysis. Advertisers may not use Vehiclescope reports to identify, contact, profile, or re-identify individual end users unless they have an independent lawful basis and all legally required notices and consents.

9. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide the Services, maintain accounts, operate campaigns and platforms, process billing and payouts, detect fraud, resolve disputes, comply with legal obligations, enforce agreements, and maintain security. Retention periods may vary by category.

• Account, business, billing, payout, campaign, platform, and transaction records may be retained for the life of the account and for a reasonable period afterward for legal, tax, accounting, audit, fraud, and dispute purposes.
• Ad event records may be retained as needed for analytics, billing, payout calculations, invalid activity review, fraud prevention, network quality, and legal compliance.
• Security logs, request logs, and support records may be retained as needed to protect the Services, investigate issues, and comply with law.

We may retain aggregated, de-identified, or anonymized information for longer periods where it no longer reasonably identifies an individual.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication, encryption in transit where supported, service provider controls, logging, fraud checks, and operational security practices. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials, API keys, devices, publisher integrations, and authorized users.

11. International Transfers

Vehiclescope is operated from the United States, and personal information may be processed in the United States and other countries that may have privacy laws different from those in your location. Where required, we use appropriate transfer mechanisms, which may include Standard Contractual Clauses, adequacy decisions, data processing addenda, or other lawful transfer mechanisms.

12. Your Privacy Rights

Depending on your location, you may have rights to request access, confirmation, portability, correction, deletion, restriction, objection, withdrawal of consent, opt out of targeted advertising, opt out of sale or sharing, limit certain uses of sensitive personal information, and appeal a privacy decision. These rights may be subject to limits and exceptions under applicable law.

To exercise rights, email [email protected]. We may need to verify your identity and authority before responding. If your request relates to data collected on a publisher property, we may direct you to the publisher or work with the publisher because the publisher controls the original relationship with you and the context of collection.

13. Your Privacy Choices

• Account information: you may update certain account or business profile information in your dashboard or by contacting us.
• Marketing: you may opt out of promotional emails by using unsubscribe instructions or contacting us. We may still send transactional or administrative messages.
• Cookies: you may control cookies through your browser or device settings. Publishers may provide their own consent tools on publisher properties.
• Targeted advertising, sale, or sharing opt-outs: where applicable, contact us at [email protected] with "Privacy Opt-Out" in the subject line. If your request concerns a publisher property, also use the publisher's opt-out or consent tools.
• Consent withdrawal: where processing is based on consent, you may withdraw consent through the relevant consent tool or by contacting the party that collected the consent.

Our current ad integration is designed for contextual and approved attribute-based ad delivery and does not require publishers to send direct identifiers. If we introduce additional cross-context behavioral advertising features, we will provide appropriate notices and controls where required.

14. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. Publishers must not use Vehiclescope technology on child-directed properties or send children's personal information to us unless we have expressly agreed in writing and all legal requirements are satisfied. If you believe a child has provided personal information to us, contact us so we can review and delete it where required.

15. Automated Processing

We use automated systems to select eligible campaigns, rank ads, pace budgets, calculate billable events, detect invalid activity, flag campaigns or events for review, and protect the Services. These systems support ad delivery, billing, payout, safety, and fraud prevention. We do not intend these automated systems to make decisions about individuals that produce legal or similarly significant effects under GDPR without appropriate human involvement or another lawful basis.

16. U.S. State Privacy Notice

For residents of California and other U.S. states with comprehensive privacy laws, the categories of personal information we collect, use, and disclose are described above. During the preceding 12 months, we may have collected identifiers, commercial information, internet or electronic network activity information, geolocation information at a coarse level, professional or business information, inferences related to ad performance or fraud prevention, and sensitive personal information only where voluntarily provided or needed for account security, payment, or compliance.

We disclose these categories to the recipient categories described in this policy. We do not use sensitive personal information to infer characteristics about individuals. We will not discriminate against you for exercising privacy rights, though certain choices may affect our ability to provide the Services.

17. Publisher and Advertiser Compliance

Publishers and advertisers must comply with our Terms and all applicable privacy and advertising laws. Publishers must disclose Vehiclescope as an advertising, measurement, fraud prevention, and billing partner where required. Publishers must not transmit data to Vehiclescope unless they have provided required notices, obtained required consents, honored opt-outs, and confirmed that the data is accurate, lawful, relevant, and limited to approved purposes. Advertisers must use campaign reports only for permitted purposes and must not use event data to re-identify users in violation of law or our Terms.

18. Changes to This Policy

We may update this Privacy Policy from time to time. The updated policy will be effective when posted unless a later effective date is stated. Your continued use of the Services after the updated policy becomes effective means you acknowledge the updated policy.

19. Contact

Questions, requests, or complaints about privacy may be sent to [email protected].