← Back

Privacy Policy

Last updated: March 11, 2026

This Privacy Policy explains how Whale Laboratories, Inc. (“Tesla Controller Bridge,” “we,” “us,” or “our”) collects, uses, and shares your personal information when you use our website at https://teslacb.com and related services (collectively, the “Services”).

1. Scope and Updates

This Privacy Policy applies to personal information processed by us through our website and Services. We may revise this policy from time to time. If there are material changes, we will notify you as required by applicable law. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.

2. Personal Information We Collect

2.1 Information You Provide

  • Account Information. When you create an account, we collect your email address for authentication purposes. We use magic link (passwordless) authentication via Supabase.
  • Purchase Information. When you purchase the full firmware license, payment is processed by Stripe. We do not directly collect or store payment card information. We receive confirmation of your purchase, billing details, and transaction identifiers from Stripe.
  • Communications. If you contact us at [email protected], we collect the information you provide in your message.
  • Device Name (Full tier). If you purchase the full license, you may provide a custom Bluetooth device name that is embedded into the firmware during the flashing process.

2.2 Information Collected Automatically

  • Usage Analytics. We use PostHog to collect analytics about how you interact with our website, including pages visited, features used, and firmware install events. This helps us understand usage patterns and improve the Service.
  • Error Tracking. We use Sentry to automatically collect error and performance data when issues occur on our website. This may include browser information, device type, and technical details about the error.
  • Device and Browser Information. We may automatically collect your IP address, browser type, operating system, and device information when you visit our website.
  • Cookies and Similar Technologies. We use cookies and similar technologies for authentication, analytics, and to maintain your session. These include:
    • Essential cookies for authentication and session management (Supabase)
    • Analytics cookies for understanding site usage (PostHog)

3. How We Use Your Information

We use your personal information to:

  • Provide, maintain, and improve the Services
  • Process purchases and manage your account
  • Authenticate your identity and authorize access to paid features
  • Flash firmware with your custom device name (Full tier)
  • Respond to support requests and communications
  • Analyze usage patterns and diagnose technical issues
  • Detect and prevent fraud, abuse, or unauthorized use of the Services
  • Comply with legal obligations

4. How We Share Your Information

4.1 Service Providers

We share information with third-party services that help us operate the Service:

  • Supabase — authentication and database
  • Stripe — payment processing
  • PostHog — product analytics
  • Sentry — error monitoring
  • Vercel — website hosting

4.2 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

If Whale Laboratories, Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 No Sale of Personal Information

We do not sell your personal information to third parties.

5. Your Privacy Choices

  • Email. If you receive unwanted emails from us, you can unsubscribe using the link in the email.
  • Cookies. When you first visit our website, we ask for your consent before enabling non-essential cookies (analytics). You can change your choice at any time using the “Your Privacy Choices” link in the website footer. Disabling essential cookies may prevent authentication and use of the Service.
  • Account Deletion. You may request deletion of your account and associated data by contacting us at [email protected].
  • Do Not Track. We do not currently respond to Do Not Track signals.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Purchase records are retained for accounting and tax purposes as required by law.

7. Security

We implement reasonable technical and organizational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Children's Information

The Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it.

9. Your Rights Under GDPR (EEA/UK Residents)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under applicable data protection law:

  • Access. Request a copy of the personal data we hold about you.
  • Rectification. Request correction of inaccurate or incomplete personal data.
  • Erasure. Request deletion of your personal data, subject to legal retention obligations.
  • Restriction. Request that we limit processing of your personal data in certain circumstances.
  • Portability. Request a machine-readable copy of your personal data to transfer to another service.
  • Objection. Object to processing of your personal data for direct marketing or based on legitimate interests.
  • Withdraw Consent. Where processing is based on consent (such as analytics cookies), you may withdraw consent at any time using the cookie consent controls on our website or by contacting us.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Legal Basis for Processing. We process personal data based on: (a) your consent (analytics cookies), (b) performance of a contract (account and purchase management), (c) our legitimate interests (security, fraud prevention, service improvement), and (d) legal obligations.

International Transfers. Your data may be transferred to and processed in the United States. We rely on appropriate safeguards, including Standard Contractual Clauses, to protect data transferred outside the EEA/UK.

10. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights:

  • Right to Know. You may request the categories and specific pieces of personal information we have collected about you.
  • Right to Delete. You may request deletion of personal information we have collected, subject to certain exceptions.
  • Right to Opt Out. We do not sell or share your personal information for cross-context behavioral advertising. You may manage analytics cookies using the “Your Privacy Choices” link in our website footer.
  • Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.

To submit a request, contact us at [email protected]. We will verify your identity and respond within 45 days.

11. Nevada Residents

If you are a resident of Nevada, you have the right to opt out of the sale of certain personal information. We do not currently sell personal information as defined in Nevada Revised Statutes Chapter 603A.

12. Third-Party Links

The Services may contain links to third-party websites, including hardware retailers and driver download pages. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies.

Contact

Whale Laboratories, Inc. is the controller of personal information processed under this Privacy Policy. If you have questions or wish to exercise your privacy rights, contact us at:

Whale Laboratories, Inc.
Los Angeles, CA
[email protected]