1. Data controller
The data controller for personal data processed via the Service is Codestripes LLC, 63 N. Burritt Ave, Room 100 East PMB1323, Buffalo, WY 82834, USA. For privacy questions or rights requests, use our contact form.
2. What we collect and why
Account and billing data
When you create an account or complete checkout we collect your name, email address, billing country, billing address, city, and postal code. We use this data to provide the Service, calculate applicable sales tax, and issue invoices.
Legal basis (EU/UK): performance of a contract (Art. 6(1)(b) GDPR) and compliance with tax and accounting obligations (Art. 6(1)(c)).
Payment data
We do not store card details. Card data is collected and processed directly by Stripe Payments Europe Limited. Stripe retains a token that we use to charge subsequent renewals.
Legal basis: performance of a contract (Art. 6(1)(b)) and our legitimate interest in fraud prevention (Art. 6(1)(f)).
Vehicle and diagnostic data
When you connect a vehicle, we store the vehicle identification number (VIN), software part numbers, fault codes (DTCs), routine outcomes, and an audit log of write operations. Live data streams (HV cell voltages, temperatures) are processed in your browser and are not sent to our servers unless you explicitly save a scan report.
We use this data to provide the Service, debug issues you report, and improve product quality (in aggregate / de-identified form).
Legal basis: performance of a contract (Art. 6(1)(b)) and our legitimate interest in operating and improving the Service (Art. 6(1)(f)).
Usage and device data
When you use the Service we automatically collect log data such as IP address, user agent, pages visited, and timestamps. We use this to operate, secure, and improve the Service.
Legal basis: legitimate interest (Art. 6(1)(f)) and, where required, consent (Art. 6(1)(a)).
Cookies
We use a minimal set of strictly necessary cookies (session, authentication, fraud prevention). We do not use advertising cookies or sell personal data. If we later introduce analytics or marketing cookies we will request your consent first.
3. Who we share data with
We share personal data only with the processors and parties listed below:
- Stripe Payments Europe, Ltd. — card processing. Privacy policy: stripe.com/privacy.
- AI providers — when you ask wavestripe to explain a DTC or ECU response, the relevant fault code text, part number, and vehicle context are sent to our AI provider (currently DeepSeek and Anthropic) for inference. No personally identifying information is included in the prompt.
- Hosting and infrastructure providers — used to run the Service. They process data only on our instructions and under confidentiality obligations.
- Authorities — where we are required by law to disclose data (e.g. tax authorities, courts).
We do not sell personal data and we do not share it for cross-context behavioural advertising.
4. International transfers
Codestripes LLC is established in the United States. When personal data is transferred from the EEA or the UK to the United States or another country outside those regions, we rely on the European Commission’s Standard Contractual Clauses or equivalent safeguards required by the GDPR.
5. How long we keep data
- Account data: for as long as your account is active.
- Billing and invoice data: for up to 10 years to comply with tax law.
- Vehicle / diagnostic data: for the lifetime of your account, or until you delete it.
- Server logs: typically up to 30 days, longer if needed for security investigations.
When data is no longer needed we delete or anonymise it.
6. Your rights
If you are in the EU, UK, EEA, Switzerland, or a jurisdiction with similar laws, you have the following rights:
- access to a copy of the personal data we hold about you;
- rectification of inaccurate or incomplete data;
- erasure of data (“right to be forgotten”) subject to legal retention;
- restriction of processing;
- data portability in a structured, machine-readable format;
- objection to processing based on legitimate interest;
- withdrawal of consent at any time, where processing is based on consent.
To exercise any of these rights, use our contact form. We will respond within 30 days. You also have the right to lodge a complaint with your national data-protection authority — for example, your country’s supervisory authority listed at edpb.europa.eu (EU) or the ICO at ico.org.uk (UK).
7. Security
We use industry-standard technical and organisational measures including TLS encryption in transit, encryption at rest where applicable, role-based access controls, and audit logging. No system can be made 100% secure; if a personal-data breach occurs we will notify affected users and supervisory authorities as required.
8. Changes to this policy
We may update this policy from time to time. The “Effective date” at the top of this page indicates when it was last revised. Material changes will be announced by email or via in-product notice.
9. Contact
Privacy questions or requests:
our contact form.
Postal address: Codestripes LLC, 63 N. Burritt Ave, Room 100 East
PMB1323, Buffalo, WY 82834, USA.