Privacy Policy

1. Data we collect

Account: your name (if given), e-mail address and/or mobile number, language and the time you accepted our terms.

Vehicle: make, model, plate number, connector type and battery size you enter.

Sessions: dock and site used, start/stop times, energy delivered, battery level, parking and overstay times, bay sensor events, fees, receipts, disputes and messages we send you.

Payments: payment method type, amounts and the reference from our payment partner. Full card numbers are handled by the payment partner, not stored by us.

Device and location: basic technical logs (IP address, browser, error logs). If you tap "Near me", your location is used in your browser to sort stations and is not stored by us. The scanner uses your camera only to read the dock QR code; no images are saved.

Site sensors: docks may use bay occupancy sensors and, at some sites, plate recognition cameras to detect when a bay is occupied or vacated, as evidence for parking billing.

2. Why we use it

To sign you in and keep your account secure (one-time codes by e-mail or SMS); to start, monitor and bill your sessions; to send session alerts (charging complete, grace ending, overstay); to handle payments, receipts, refunds and disputes; to run, secure and improve the network; and to meet legal, tax and regulatory duties.

We do not sell your personal data, and we do not send marketing messages without your consent.

3. Who we share it with

Service providers acting for us: cloud hosting and database (Supabase, servers in Singapore; Vercel), e-mail delivery (Resend), SMS delivery (BulkSMS2U), and our payment partner. Site operators and landlords see session and bay data needed to run their site, but not your contact details unless needed to resolve an incident.

Authorities, when required by law or to protect safety, and professional advisers under confidentiality.

Some of these providers store data outside Malaysia (for example in Singapore). We use providers that protect data to a standard comparable to the PDPA.

4. How long we keep it

Account data while your account is active. Session, payment and receipt records for 7 years for accounting and tax purposes. Sign-in codes expire within minutes and are deleted afterwards. Plate-recognition images, where used, are kept only as long as needed as billing evidence or to resolve a dispute.

5. Security

Data is encrypted in transit, access is limited by role and every staff action on a session is logged. Payments and sensitive credentials are kept in protected storage. No system is perfectly secure; tell us at once if you think your account has been misused.

6. Your rights

Under the PDPA you may ask to access or correct your personal data, withdraw consent, or limit how it is processed. You can update your name and vehicles in the app. For other requests, e-mail us; we will reply within 21 days. If you withdraw consent needed to run sessions, we may not be able to provide the service.

7. Changes and contact

We may update this policy; the date at the top shows the latest version. Significant changes will be shown in the app.

Data protection contact: AE Setia Sdn Bhd, info@aesetia.com.