Security & Data Privacy | MyTeslaMate
Your TeslaMate instance holds a detailed record of where you drive, when you charge and how your car behaves. We host it accordingly: every instance is private to you, reachable only after authentication, encrypted in transit and at rest, and backed up daily.
TeslaMate authentication
Your instance is never left open to the public. Authelia sits in front of it as an authentication middleware, so your TeslaMate and its Grafana dashboards can only be opened with your MyTeslaMate password.
Tesla account linking
We connect your car through Tesla’s own OAuth sign-in and the Tesla Fleet API. You authenticate on Tesla’s domain, so your Tesla password is never sent to us. What we hold is an access token you can revoke at any time from your Tesla account.
Password storage
Only you know the password to your MyTeslaMate account. We follow the OWASP Password Storage recommendations, so what we store cannot be turned back into your password — by an attacker or by us.
Access controls
You stay in control of the connection. Disconnecting your Tesla account, or changing your Tesla account password, withdraws our access to the vehicle immediately.
Encryption
All network communications are secured with SSL/TLS 1.2 encryption. Data at rest is safeguarded through AES-256 encryption.
Backups
We keep 30 days of rolling secure backups on remote storage, so a mistake on your side stays recoverable and a failure on ours does not become your problem. You can access these backups from your account at any time.
Your data, and your rights over it
MyTeslaMate is operated by TESFLOW, a company registered in France, and the service complies with the General Data Protection Regulation (GDPR). You have the right to access, export and erase your data. Your TeslaMate instance data is kept only for the duration of your subscription and is deleted within 30 days of termination. The full detail — what we collect, why, and who processes it — is in our Privacy and Cookie Policy.
Service status and reporting a problem
Live availability is published on our status page. If you believe you have found a security issue, write to contact@myteslamate.com — we read every report.