Privacy Policy

PRIVACY POLICY Voltrix - Powerbank Rental System Last updated: 13.10.2025 1. GENERAL PROVISIONS The present Privacy Policy (hereinafter — "Policy") defines the procedure for processing personal data of Voltrix service users (hereinafter — "Service", "we", "us", "our"). By using our Service, you agree to the terms of this Privacy Policy. 2. WHAT DATA WE COLLECT 2.1 Personal user data: • Phone number — for registration, authentication and communication with user • Username (optional) — for service personalization • FCM tokens — for sending push notifications • Authentication data — JWT tokens, refresh tokens for security 2.2 Financial data: • Bank card data — masked card numbers, card types, last 4 digits • Card tokens (rectoken) — for secure payments through Flitt • Payment history — amounts, statuses, transaction descriptions • Deposit data — frozen and debited amounts 2.3 Service usage data: • Rental history — start/end times, pickup/return stations, cost • Station data — coordinates, addresses, online/offline status • Return attempts — information about powerbank return attempts • Debt and penalty system — debt amounts, penalties 2.4 Technical data: • IP addresses — for security and analytics • User-Agent — browser/application information • System logs — for monitoring and debugging • WebSocket connections — for real-time notifications 3. DATA PROCESSING PURPOSES We process your personal data for the following purposes: 3.1 Core service functions: • User registration and authentication • Powerbank rental system operation • Payment processing and deposit management • Rental status notifications • Fraud prevention and security 3.2 Service improvement: • Usage analysis for functionality improvement • System performance monitoring • User technical support 4. LEGAL BASIS FOR DATA PROCESSING Personal data processing is carried out on the basis of: • User consent — for registration and service use • Contract performance — for rental service provision • Legitimate interests — for security and fraud prevention • Legal obligations — for compliance with legislation 5. DATA TRANSFER TO THIRD PARTIES 5.1 Payment systems: • Flitt — for payment processing and card management • Data is transferred encrypted with PCI DSS compliance 5.2 SMS providers: • Twilio — for SMS verification code delivery • Only phone numbers and message texts are transferred 5.3 Technical services: • PostgreSQL — for data storage (encrypted connection) • Redis — for caching and sessions • Winston — for logging (without personal data) 6. DATA SECURITY 6.1 Technical measures: • Data encryption during transmission (HTTPS/TLS) • Password and token hashing • Data access restrictions • Regular security updates 6.2 Organizational measures: • Staff training on data protection • Access and audit policies • Regular security checks 7. DATA RETENTION PERIODS • Active users — data stored until account deletion • SMS codes — 5 minutes after creation • Logs — up to 30 days • Financial data — according to legal requirements (up to 5 years) • Inactive accounts — up to 3 years after last activity 8. USER RIGHTS You have the right to: • Receive information about your data processing • Correct inaccurate data • Delete your data (right to be forgotten) • Restrict data processing • Transfer data to another service • Withdraw consent for data processing • File complaints with supervisory authorities 9. COOKIES AND ANALYTICS We use: • Session cookies — for authentication • Technical cookies — for WebSocket connections • Analytical data — aggregated usage statistics 10. INTERNATIONAL TRANSFERS Data may be transferred to countries providing adequate personal data protection or with appropriate safeguards. 11. POLICY CHANGES We may update this Policy. We will notify of significant changes through: • App updates 12. CONTACT INFORMATION For personal data processing questions, contact: Voltrix LLC • Firm Name: VOLTRIX LLC • Legal Form: Limited Liability Company • Identification Number: 404972115 • Registration Number and Date: 09/01/2013 • Registering Authority: LEPL National Agency of Public Registry • Legal Address: Georgia, Tbilisi, Bochorma street, 18 • Phone: +995 533 332 125 • Email: privacy@voltrix.ge • Website: www.voltrix.ge