Privacy Policy

Last updated: September 13, 2026

This Privacy Policy explains how Frost Wave Technologies ("we," "us," or "our") collects, uses, and protects information in connection with CordLedger (the "Service"). By using the Service, you agree to the practices described here.

1. Information We Collect

We collect information in a few different ways:

• Account and company information you provide when registering - name, email, company name, and role.
• Vehicle and charging session data pulled from the Tesla Fleet API on your behalf once you connect a Tesla account - vehicle identifiers, charging timestamps, energy delivered (kWh), and location of charging where Tesla provides it.
• Accounting data we sync to and from QuickBooks Online or Xero once you connect one of those accounts, such as chart-of-accounts categories and posted expense entries.
• Billing information handled by our payment processor, Stripe. We receive limited billing details (such as plan, subscription status, and a masked card summary) but never your full card number.
• Usage data such as pages visited and general engagement, collected on our marketing site through Google Analytics (see our Cookie Policy).

2. How We Use Information

We use the information above to: operate and improve the Service; sync charging costs into your accounting software as you've configured; process payments and manage subscriptions; authenticate your account; communicate with you about the Service (including waitlist and product updates); and understand how our marketing site is used so we can improve it.

3. Third-Party Service Providers

We rely on trusted third parties to provide parts of the Service, each of which processes data under its own privacy policy:

• Auth0 - authentication and login.
• Stripe - subscription billing and payment processing.
• Tesla Fleet API - vehicle and charging session data, only for vehicles you connect.
• QuickBooks Online / Xero - accounting sync, only for accounts you connect.
• Google Analytics - aggregate, anonymized usage analytics on our marketing site.

We don't sell your personal information to third parties.

4. Data Sharing and Disclosure

Beyond the service providers above, we may share information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).

5. Data Retention

We retain account, vehicle, and accounting data for as long as your account is active, plus a reasonable period afterward for legal, tax, and accounting record-keeping purposes. You can request deletion of your data as described below.

6. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at [email protected] and we'll respond within a reasonable time.

7. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and access controls on our systems. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Children's Privacy

CordLedger is a business tool and isn't directed to, or intended for use by, children. We don't knowingly collect personal information from children.

9. International Data Transfers

Our service providers may process data in countries other than your own. Where required, we take steps intended to ensure such transfers comply with applicable data protection law.

10. Changes to This Policy

We may update this Privacy Policy as the Service evolves. We'll update the "Last updated" date above when we do, and material changes will be communicated to registered users.

11. Contact Us

Questions about this Privacy Policy, or a request regarding your data? Reach us at [email protected].