Privacy Policy
CyberDeduct helps self-employed drivers keep an IRS-compliant mileage log. This policy explains what we collect, why, who we share it with, and your choices.
1. Information we collect
You provide / your account
- Email, name, and a password (stored only as a scrypt hash with a per-user salt — we never store your actual password).
- Subscription status; payments are processed by Stripe (we never see or store your full card number).
- Business/tax profile you enter (business type, entity, business address) and a vehicle's purchase price / in-service date for deduction estimates.
From your Tesla (only after you connect it)
- Via the Tesla Fleet API/Telemetry: vehicle location, odometer, battery, charging sessions and cost, and navigation destination — used to assemble your trips.
- Trips we build from this: start/end places + coordinates, miles, category, purpose, notes.
- To fetch this on your behalf, we store your Tesla authorization — an encrypted refresh token — on our servers. Disconnect Tesla deletes that token. Unlink one vehicle stops tracking that VIN only; your Tesla login stays. Delete account stops Tesla tracking immediately and keeps the token with the rest of the account for 30 days.
On your device only — NOT sent to our servers
- SSN/EIN are encrypted on your device (Android Keystore or the iOS Secure Enclave, via secure storage) and never transmitted to us.
- Contacts and Calendar are read on your device to match a trip to a client/meeting; the matched name/title may be saved to that trip, but we do not upload your contact list or calendar.
- Location (phone) is used only to help fill a trip's place.
Automatically
- Device identifier, app version, platform; product events (e.g. signup, export) and crash/error reports (message, stack, version), associated with your account — used to operate and improve the app.
Connected services (optional, you initiate)
- Zoho Mail — if you connect it, we store an OAuth refresh token so the app can send follow-up emails from your address (only when you tap to send).
- Square — appointment matching, if you connect it.
- QuickBooks Online — if you connect it, we store an OAuth refresh token so you can post a vehicle-deduction journal entry to your books (only when you tap to send).
2. How we use it
To provide the mileage log and tax estimates; classify trips; sync across your devices; process your subscription; send service emails; provide support; secure the service and prevent abuse; and comply with law. We do not sell your data and do not use it for third-party advertising.
3. Who we share it with (service providers / sub-processors)
- Microsoft Azure — hosting and storage.
- Stripe — payments/subscriptions.
- Tesla — vehicle data you authorize.
- Zoho — email delivery (our notifications; and your mailbox if you connect it).
- Intuit (QuickBooks Online) — accounting export, if you connect it.
- Geoapify / OpenStreetMap — nearby-place lookups (we send coordinates, not your identity).
- xAI (Grok) — AI features (trip purpose, contact enrichment); we send the minimum context needed and no SSN/EIN.
We share only what's needed for these functions, and require them to protect it.
4. Data retention & deletion
We keep your data while your account is active. You can delete your account and data in the app (Settings → Delete my account) or by emailing info@initial-energy.com — see our Account & Data Deletion page. A delete request schedules removal: Tesla tracking stops immediately, and we keep the account for 30 days so you can sign in and cancel. After 30 days we permanently remove your account, trips, connected-service tokens, events, and error logs (some records may persist briefly in backups, then expire). Stripe retains billing records as required by law.
5. Your rights
Depending on where you live (e.g. GDPR/CCPA), you may request access, correction, deletion, or export of your data, and may object to certain processing. Use the in-app delete, or email info@initial-energy.com. We don't discriminate for exercising these rights.
6. Security
Encryption in transit (TLS); passwords hashed (scrypt); tax IDs encrypted on-device and never sent to us; secrets stored server-side in managed configuration/Key Vault. No system is perfectly secure, but we work to protect your data.
7. Children
CyberDeduct is for adults running a business; it is not directed to children under 18, and we do not knowingly collect their data.
8. International
Data is processed in the United States. By using the app you consent to processing in the US.
9. Changes
We'll post changes here with a new effective date and, for material changes, notify you in the app or by email.
10. Contact
LIKE LLC — info@initial-energy.com
8401 Mayland Dr, Ste A, Richmond, VA 23294, USA