This Privacy Policy describes how MapleV ("MapleV", "we", "our") collects, uses, and shares information when you visit our website, apply for a trade account, or place an order. MapleV, based in Greater Vancouver, sells aftermarket Tesla Model 3 and Model Y collision parts online to Tesla owners and body shops across Canada. This page is maintained by MapleV to answer common privacy questions about the MapleV website and account system.
Information we collect
Account information — name, email address, password, and (for trade accounts) shop name, business contact details, PST registration number, and approval status.
Order information — billing and shipping address, contact phone number, line items, totals, and any notes you include with an order.
Collision-photo information — photos you upload through our Find by photo (/find) tool. Depending on what is in the image, a photo may include a vehicle identification number (VIN) or licence plate.
Payment information — handled directly by our payment processor; MapleV does not store full credit card numbers on its servers.
Site usage information — pages viewed, approximate location derived from IP address, device and browser type, and session-replay interactions, collected through the analytics providers listed under Service providers below.
How we use this information
To create and manage your account, including the trade-account approval process.
To process, fulfill, and ship your orders, and to provide customer support.
To analyse collision photos submitted through Find by photo (/find) and suggest potentially relevant replacement parts.
To send transactional emails (order confirmations, fulfillment updates, and account notices).
To send text messages about your order (payment received and order shipped) to the phone number you give at checkout — only if you tick the box to receive them, which is optional — and to reply to questions you send through the site chat or message form, where a phone number is required and email is optional. We do not send marketing text messages.
To comply with tax, accounting, and other legal obligations.
To prevent fraud and protect the security of our site and customers.
Service providers (processors)
The following providers process data on MapleV's behalf:
Supabase — hosts our database, authentication system, and serverless functions. Account, order, and product data are stored here.
Stripe — processes credit-card payments. Payment card details are submitted directly to Stripe and are not stored by MapleV.
Resend — delivers order confirmations, shipping notifications and contact-form emails. Recipient name, email address and order details are shared for that purpose.
Twilio — sends order text messages (payment received and order shipped, with the tracking number) to the phone number you give at checkout, only if you ticked the box to receive them. Your phone number and those order details are shared for that purpose only. Reply STOP to any message to stop receiving them.
Lovable AI Gateway — processes collision photos submitted through Find by photo (/find) to provide the requested photo analysis. These photos may contain a VIN or licence plate. When you submit photos for analysis, they are sent for that analysis whether or not you select the optional photo-storage consent; unchecking that consent prevents MapleV's subsequent storage of the photos, not the analysis request. It also translates messages exchanged through the site chat bubble (customer messages into Chinese for our team, and our replies into your language); part numbers are masked before translation and the original text is always kept.
Google Analytics 4 — website traffic measurement. Sets analytics cookies and records pages viewed, approximate location derived from IP address, and device and browser type.
Microsoft Clarity — usability analytics. Clarity builds session replays from page content and interactions: pages viewed, mouse movement, scrolling, clicks, and the fact that an input took place. The contents of standard input fields and drop-down menus are masked in every Clarity masking mode and are not uploaded to Clarity. Clarity is not loaded on our cart, account, orders, trade-application and quote pages, and the content of those pages is additionally masked.
Rollbar — front-end error monitoring. Receives the error message, the page it occurred on, and browser type when something on the site fails. If a server function fails and a server-side Rollbar token is configured, our server also sends technical error details, including the failing component, error message, and a limited stack trace. If a website form's Resend delivery fails, that report also includes the form subject (including a user-supplied subject, truncated to 80 characters). It does not include full form submissions, payment-card data, or a full request body.
Google Customer Reviews — optional post-purchase survey. On the order-confirmation page, Google shows a prompt asking whether you would like to receive a one-time survey email about your experience. Only if you accept, we pass your order number, email address, delivery country and estimated delivery date to Google so it can send that survey after delivery; Google may set cookies or use similar technologies in connection with this program, and Google therefore receives information about transactions completed on this site. Declining the prompt sends nothing. Google's handling of this data is governed by the Google Privacy Policy.
Google Maps Platform — powers address autocomplete at checkout and on trade-account registration. Text typed into an address field is sent to Google to return suggestions.
Cloudflare — hosts and serves this website. Processes request metadata, including IP address, for delivery and security.
These providers are bound by their own privacy and security commitments. MapleV shares only the information each provider needs to perform its role.
All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.
Taxes — GST and PST
We collect tax-related information (such as your shipping province and, where applicable, your PST registration number and reseller declaration) to charge GST/HST — and BC PST where required — correctly based on the delivery province. Registered resellers who provide a valid PST number may be exempt from PST on qualifying purchases.
Data retention
We retain account and order records for as long as your account is active and as required by Canadian commercial, tax, and accounting laws. You may request deletion of your account at any time, subject to retention obligations for completed transactions.
Your choices
Access — request a copy of the personal information we hold about you.
Correction — ask us to update inaccurate or incomplete information.
Deletion — request closure of your account and deletion of personal information that is not subject to legal retention.
Marketing — opt out of any non-essential email at any time. Transactional emails (such as order confirmations) will continue while you have active orders.
Public catalogue API (MCP endpoint)
MapleV publishes a public, read-only Model Context Protocol (MCP) endpoint so AI assistants and agents can look up our catalogue without scraping the website. It exposes four read-only tools — search_parts, get_part, list_categories and get_delivery_options — backed by the same published catalogue as our sitemap and product pages.
This endpoint requires no account, no API key and no sign-in, and we do not collect personal information through it. It does not set cookies, does not authenticate or identify callers, does not rate-limit by IP address, and does not write anything to our database — no request logs, no IP addresses, no query history are retained by MapleV. Our hosting provider may keep short-lived infrastructure logs as described under “Service providers (processors)”.
The endpoint returns only information that is already public on maplev.ca: part names, Tesla OE cross-references, categories, CAD list prices and delivery terms. It deliberately exposes no cart, checkout or payment tool, no per-SKU stock quantities, no trade or wholesale net pricing, and no supplier information. Full documentation is at maplev.ca/agents.md.
Cookies
We use essential cookies to keep you signed in, remember language preferences, and run the cart. We also use analytics cookies set by Google Analytics 4 and Microsoft Clarity, which measure how the site is used and record session replays of page views, scrolling and clicks. If you accept the Google Customer Reviews prompt after an order, Google may set cookies or use similar technologies for that survey program. We do not use cookies for cross-site advertising and we do not sell personal information.
Analytics cookies are off by default for visitors in Québec, and for visitors whose browser uses French or an Eastern Canadian time zone: Google Analytics and Microsoft Clarity do not load until you press Accept in the cookie banner. For other visitors they are on by default. If your browser sends a Do Not Track or Global Privacy Control signal, we treat it as a refusal unless you accept in the banner. Anyone can accept or refuse at any time from Cookie settings at the bottom of every page, and you can also install Google's official Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). Refusing does not affect ordering, delivery or account access.
Security
We use industry-standard safeguards, including encrypted connections (HTTPS), authenticated database access, and role-based permissions. No system is perfectly secure; please use a strong, unique password and contact us immediately if you suspect unauthorized access to your account.
Children
The MapleV site and accounts are intended for use by businesses and adults. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page.
Processing outside Canada
Several of the providers listed above are located outside Canada, or may process and store data outside Canada. While information is being processed in another country it is subject to that country's laws, and may be accessible to that country's courts, law enforcement and national-security authorities under those laws. MapleV remains accountable for personal information transferred to a provider for processing, and shares only what each provider needs to perform its role.
Contact and privacy officer
MapleV has designated a privacy officer responsible for compliance with British Columbia's Personal Information Protection Act. Privacy questions, access or correction requests, requests to withdraw consent, and complaints can be sent to grant@maplev.ca, or by mail to MapleV (1580476 B.C. Ltd.), 10691 Shellbridge Way, Unit 180, Richmond, BC V6X 2W8, Canada. We respond to privacy requests within 30 days. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia.
Questions? If anything in this policy is unclear, contact grant@maplev.ca.
