Privacy Policy

This Policy describes how PHVolt processes personal data across the website, app and services, in accordance with Brazil's General Data Protection Law (Law No. 13.709/2018 — LGPD), the Brazilian Internet Framework Act and the Consumer Protection Code.

The controller of the personal data processed on the Platform is Aether Tech LTDA, CNPJ 68.026.381/0001-11, based in Brasília/DF, Brazil, operator of the PHVolt product.

We collect personal data in the following situations:

• Contact form: name, email, company, message and the profile you select (for example, driver or operator).
• Technical logs: IP address and browser identification (User-Agent), recorded when you send a message, for security and abuse prevention.
• Analytics cookies: usage data collected by Google Analytics 4, only after your consent.
• Payment data: card details are processed directly by the payment provider (Stripe); PHVolt does not store the full card number.

We process personal data to respond to contact requests, enable charging discovery and payment, ensure the security of the Platform and comply with legal obligations. The applicable legal bases, under Article 7 of the LGPD, include consent, performance of a contract, compliance with a legal obligation and legitimate interest, depending on the purpose of each processing activity.

We share data only with providers necessary to operate the service, to the extent of each purpose:

• Resend — email delivery (United States).
• Stripe — payment processing (United States).
• Google / GA4 — website usage analytics.
• Zoho — inbox for the contato@ address.

Some of our providers (Stripe, Resend, Google and Zoho) are located outside Brazil, which involves the international transfer of data. These transfers rely on the providers' Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs), subject to legal review.

Personal data is kept for as long as necessary to fulfil the purposes for which it was collected and to meet applicable legal obligations (for example, tax and consumer-protection minimum periods) — as a rule, for the duration of the relationship and the subsequent legal minimums. Specific retention periods by purpose will be defined with legal guidance.

Under the LGPD, you may exercise the following rights by writing to privacy@phvolt.com.br:

• Confirmation that processing exists and access to your data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary or excessive data.
• Portability of your data to another provider.
• Deletion of data processed on the basis of consent.
• Information about the parties with whom we share data.
• Withdrawal of consent at any time.

Requests relating to personal data may be sent to our data protection officer at privacy@phvolt.com.br. The name of the responsible officer will be published after formal appointment.

We apply technical and organizational measures to protect personal data, such as encrypted connections (HTTPS), access control and the processing of card data directly by the payment provider. No system is fully immune to incidents, but we work continuously to mitigate risks.

We use strictly necessary cookies and, with your consent, analytics cookies. Details are in the Cookie Policy.

The Platform is not intended for use by children and adolescents without the supervision of a guardian. We do not knowingly collect data from minors; if we identify such collection, we will take appropriate steps to delete it.

In the event of a security incident that may create a relevant risk to data subjects, we will take appropriate measures and make the notifications to the National Data Protection Authority (ANPD) and to data subjects, as required by the LGPD.

To the extent the European Union's General Data Protection Regulation (GDPR) applies to you, we honor the rights of access, rectification, erasure, restriction, portability and objection, which may be exercised at privacy@phvolt.com.br. Whether the GDPR applies to PHVolt's audience is under assessment; this addendum describes rights honored on request and is not a statement of full GDPR compliance.

To the extent California law (CCPA/CPRA) applies to you, we honor the rights to know, access, delete and correct personal data, as well as the right not to be discriminated against for exercising them. PHVolt does not sell personal data. Requests may be made at privacy@phvolt.com.br. This addendum describes rights honored on request and is not a statement of full CCPA/CPRA compliance.

This Policy may be updated from time to time. The current version and its effective date will be published on this page.

For questions about this Policy or about the processing of personal data, please contact us at privacy@phvolt.com.br.