Privacy Policy

Last updated: 15.01.2026

ქართული English

This Privacy Policy explains how LLC "Chargebox" (Identification Code 402365178, 16 Vaja Pshavela Ave, Tbilisi 0186, Georgia — hereinafter "ChargeBox.GE", "the Company", "we") collects, uses, and protects personal data when you use the ChargeBox.GE mobile application and website (chargebox.ge).

By downloading and using the ChargeBox.GE application you confirm that you have read and agree to this Privacy Policy.

1. Data Controller

LLC "Chargebox"
Identification Code: 402365178
Address: 16 Vaja Pshavela Ave, Tbilisi 0186, Georgia
Email: info@chargebox.ge

2. Information We Collect

We collect the following categories of personal data:

Account data: first name, last name, email address, phone number, password (stored as a secure hash).
Location data: your device location, collected only when you use the map to find nearby chargers or get directions to a charger. Location is never collected in the background.
Charging session data: charger ID, session start/stop time, energy consumed (kWh), session cost.
Payment data: top-up amounts, transaction status. Card details are processed exclusively by the Flitt payment gateway and are never stored by ChargeBox.GE.
Vehicle data (optional): car make, model, registration number — provided voluntarily by the user.
Taxi license data (optional): an image of your taxi driver licence, used solely to verify eligibility for the taxi discount.
Usage data: app interaction logs used to improve application performance and reliability.

3. How We Use Your Data

To create and manage your user account.
To enable EV charging session start/stop via the app.
To process balance top-ups and record transaction history.
To show your location and nearby charging stations on the in-app map.
To calculate and display session costs.
To send account-related notifications (SMS, in-app messages).
To verify taxi driver discount eligibility.
To improve the application and charging network.
For direct marketing (only with your consent, which can be withdrawn at any time).

4. Legal Basis for Processing

Contract performance: processing is necessary to provide the EV charging service.
Consent: for location access, marketing communications, and optional data fields.
Legitimate interest: improving service quality, fraud prevention.
Legal obligation: compliance with Georgian law.

5. Third-Party Services

We share data with the following third parties only to the extent necessary to operate the service:

Flitt — payment processing. When you top up your balance, you are redirected to Flitt's secure checkout. Flitt processes card data under their own privacy policy.

We do not sell personal data to third parties.

6. Information Collection by the Application and Profile Deletion

The parties acknowledge and confirm that, for the purpose of the User's full use of the Service, the Company determines the User's location through the Application only in the following cases:

For the purpose of determining the User's location and the location of nearby electric vehicle chargers on the relevant map.
When using the direction function from the User's location to the charger on the Application map, for the purpose of identifying the route to the electric vehicle charger.

The User is entitled at any time to request the deletion of their profile (protected/stored information) from the Company through the Application's settings page. The User's profile will be deleted within 7 working days from the request.

The Company is not responsible for restoring the data of a deleted profile upon such a request from the User.

7. Data Retention

Account data: retained while your account is active and for up to 1 year after deletion request.
Session and transaction history: retained for 5 years for accounting and legal purposes.
Taxi licence image: deleted within 30 days of verification decision.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

Encrypted data transmission (HTTPS / TLS).
Password hashing — passwords are never stored in plain text.
Access control — employee access to personal data is limited to those who need it for their duties.
Regular security reviews of our infrastructure.

9. Your Rights (Georgian Personal Data Protection Law)

Under the Law of Georgia "On Personal Data Protection" you have the right to:

Obtain information about what data we hold about you.
Request correction, updating, or supplementation of inaccurate data.
Request deletion or destruction of your data.
Request blocking of data processing.
Withdraw consent at any time (without affecting lawfulness of prior processing).
Lodge a complaint with the Personal Data Protection Service of Georgia.

To exercise these rights, contact us at info@chargebox.ge. We will respond within 10 business days.

10. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has registered, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be notified via the application or email. Continued use of the application after notification constitutes acceptance of the updated policy.

12. Contact

LLC "Chargebox"
Email: info@chargebox.ge
Address: 16 Vaja Pshavela Ave, Tbilisi 0186, Georgia
Identification Code: 402365178