01
Who we are
Tslabase (“Tslabase”, “we”, “us”) operates the Tslabase platform — an AI-driven Tesla stock investment product. When we talk about “your data” in this policy, we mean the personal information you give us when you open and use your Tslabase account.
02
What we collect
- Account data: name, email, phone, password hash, referral code.
- Identity data (KYC): government ID, selfie, date of birth, address, occupation — collected only when required to verify you.
- Financial data: wallet balance, deposits, withdrawals, bank account details, investment history.
- Technical data: IP address, device, browser, session logs, timestamps of key actions.
- Support data: messages, screenshots, and attachments you send us through in-app support.
03
Why we collect it
To run your account, process deposits and withdrawals, verify identity, prevent fraud, meet legal obligations, and improve the product. We do not sell your data. We do not use your investment history to target you with third-party ads.
04
Legal bases
Depending on your jurisdiction, we rely on: performance of contract (to operate your account), legal obligation (KYC, AML, tax), legitimate interest (fraud prevention, product improvement), and consent (marketing emails, optional cookies).
05
Who we share it with
- Payment and payout providers (e.g. NOWPayments) — to move funds in and out.
- KYC verification providers (e.g. Didit) — to verify identity documents.
- Infrastructure providers (hosting, database, email) — bound by data-processing agreements.
- Regulators and law enforcement — only where legally required.
06
Storage & security
Data is encrypted in transit (TLS 1.3) and at rest. Passwords are hashed and checked against known-breach corpora. Access to production data is scoped by role, logged, and reviewed. Sensitive KYC media is stored in private buckets and only served through short-lived signed URLs.
07
Retention
Account and transaction records are retained for as long as your account is active and for a period afterwards where required by law (typically 5–7 years). KYC documents are retained for the minimum period required by regulation and then deleted or anonymised.
08
Your rights
Depending on where you live, you may have the right to: access the data we hold on you, correct it, delete it, restrict processing, port it, or object to processing. Email privacy@tslabase.app and we will respond within 30 days.
09
International transfers
Some of our providers are located outside your country. Where that happens, we rely on standard contractual clauses or equivalent safeguards to protect your data.
10
Changes to this policy
If we make a material change, we'll notify you by email or an in-app banner before it takes effect. Continued use of Tslabase after that constitutes acceptance of the updated policy.
11
Contact
Privacy questions: privacy@tslabase.app. Data protection requests: same address, subject line “DSR”.