Security Policy for Netzero

Last Updated: October 28, 2025

1. Introduction

Netzero Labs, Inc. is committed to ensuring the security and privacy of its users when interacting with the Netzero app. This security policy outlines the measures implemented to safeguard user data and maintain the integrity of the application.

2. Access Control

User Credentials: Netzero Labs, Inc. does not store or handle user credentials (username and password) for Tesla or other service provider accounts. These credentials are exclusively managed by the respective service providers. Netzero only receives API tokens generated by Tesla or other service providers, which are associated with limited permissions determined by the user's settings on the provider's platform.

Least Privilege: the Netzero app only requests and utilizes permissions necessary for its functionality. Access to user data is strictly limited to the requirements of the application's features, ensuring the principle of least privilege.

3. Data Encryption

API Tokens: User API tokens obtained from Tesla or other service providers are encrypted in transit and at rest. Encryption protocols are implemented to protect the confidentiality and integrity of API tokens during transmission and storage.

Storage: API tokens stored on user devices use platform-specific mechanisms:

iOS: Stored in Keychain, encrypted using iOS encryption standards.
Android: Stored in EncryptedSharedPreferences, encrypted using Android encryption standards.
Web: Stored in localStorage.

4. API Security

APIs: Netzero utilizes APIs provided by Tesla or other service providers. These APIs adhere to industry-standard security practices and protocols.

Token Management: Users have the ability to revoke API tokens issued to Netzero app at any time through the respective Tesla or other service provider platforms. Netzero app does not retain the capability to access user data once API tokens are revoked.

5. Incident Response

Incident Reporting: Users are encouraged to report any security incidents or concerns related to the Netzero app promptly to security@netzero.energy.

Response Protocol: In the event of a security incident, Netzero Labs, Inc. will promptly investigate, mitigate, and respond to the incident according to established incident response protocols.

6. Conclusion

Netzero Labs, Inc. is dedicated to ensuring the security and privacy of its users' data. By adhering to stringent security measures, employing encryption protocols, and maintaining compliance with relevant regulations, Netzero Labs, Inc. strives to provide a safe and reliable experience for its users.

This security policy is subject to periodic review and updates to reflect evolving security requirements and best practices.