This Privacy Policy explains how iAUTO ENERGY Pty Ltd, ABN 86 619 766 004 ("iAUTO ENERGY", "we", "us", "our") collects, holds, uses, and discloses personal information through the iAUTO ENERGY mobile application and web portal (together, the "Platform"), consistent with our End User Licence Agreement ("EULA"). We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").

By registering for or using the Platform, you acknowledge this Privacy Policy and, where required, consent to the handling of your information as described below.

1. Information We Collect
We may collect the following categories of personal information, generally directly from you when you register or use the Platform:
Account and identity information: name, email address, phone number and account login credentials.
Vehicle information: make, model, year, and charging port/connector type of your registered Vehicle(s).
Payment information: card type and last four digits, billing address, and transaction history. Full card numbers and CVVs are collected and stored by our third-party payment processor STRIPE, not by iAUTO ENERGY directly.
Charging session and location data: EVSE location used, session start/end time, energy delivered (kWh), duration, cost, and, where enabled, your device's real-time or approximate location to help you find nearby EVSE.
Device and technical information: IP address, device identifiers, operating system, app version, and diagnostic/crash data.
Usage data: pages viewed, features used, and interactions with the Platform, including cookies and similar technologies on the web portal (see clause 7).
Communications: records of correspondence when you contact customer support.

2. How We Collect Information
We collect personal information directly from you (registration forms, in-app inputs, support enquiries), automatically through your use of the Platform (session logs, location services, cookies), and from third parties, including our payment processor, Network Partners operating EVSE you connect to, and, where applicable, your Vehicle manufacturer via integrated APIs, and app stores or analytics providers.

3. Why We Collect, Use, and Hold Your Information
We use your personal information to: create and administer your account; verify your identity and eligibility to use the Platform; process payments and bill you for charging sessions and fees as authorised under the EULA; enable you to locate, reserve, and connect to EVSE; provide customer support and respond to enquiries; send you service communications, receipts, and, where you have opted in, marketing communications; detect, investigate, and prevent fraud, misuse, or breaches of the EULA; improve, test, and develop the Platform and our services; and comply with our legal and regulatory obligations, including tax and financial record-keeping requirements.

We do not sell your personal information to third parties.

4. Disclosure of Information
We may disclose your personal information to: our third-party payment processor, to process transactions on our behalf; Network Partners who own or operate the EVSE you use, to the extent necessary to facilitate and bill your charging session; IT service providers, cloud hosting providers, and analytics providers who support the Platform; professional advisers, insurers, and regulators, where required by law or to protect our legal rights; and a buyer or prospective buyer if we undergo a business transition such as a merger, acquisition, or asset sale.

We require third parties who handle personal information on our behalf to protect it consistently with this Privacy Policy and applicable law.

5. Overseas Disclosure
Some of our service providers, including cloud hosting and payment processing infrastructure, may store or process personal information outside Australia. Where we disclose personal information overseas, we take reasonable steps to ensure the overseas recipient handles it consistently with the APPs, including through contractual protections, except where an APP exception applies.

6. Payment Security
Payment card data is processed by STRIPE under PCI-DSS compliant systems. iAUTO ENERGY does not store full card numbers on its own servers. Access to payment metadata within the Platform is restricted to personnel who need it to provide support or process billing.

7. Cookies and Tracking Technologies
The web portal uses cookies and similar technologies to keep you logged in, remember preferences, understand how the Platform is used, and, where you consent, deliver relevant marketing. You can manage or disable cookies through your browser settings, though some Platform features may not function correctly if you do so.

8. Direct Marketing
With your consent, we may send you offers, promotions, or updates about the Platform. You can opt out at any time via the unsubscribe link in our communications, your account settings, or by contacting us at communications@iautoenergy.au.

9. Data Security
We implement reasonable technical and organisational measures, including encryption in transit, access controls, and regular security reviews, to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Data Retention
We retain personal information for as long as your account is active and for a reasonable period afterward to meet legal, accounting, dispute resolution, and fraud prevention obligations, after which it is securely deleted or de-identified, unless a longer retention period is required by law (for example, tax and financial record-keeping obligations).

11. Access, Correction, and Complaints
11.1 You may request access to, or correction of, the personal information we hold about you by contacting communications@iautoenergy.au.  We will respond within a reasonable timeframe and may need to verify your identity first.
11.2 If you believe we have breached the APPs or mishandled your personal information, you may lodge a complaint with us at communications@iautoenergy.au. We will investigate and respond within a reasonable time.
11.3 If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

12. Children's Information
The Platform is not directed at, and we do not knowingly collect personal information from, individuals under the age of 18, consistent with the eligibility requirements in the EULA.

13. Third-Party Links and Network Partner Terms
The Platform may link to third-party sites or services, including those of Network Partners. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy practices separately.

14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be notified via the Platform or email, and the "Last updated" date will be revised. Continued use of the Platform after changes take effect constitutes acceptance.

15. Contact Us
For questions about this Privacy Policy or to exercise your privacy rights, contact:
iAUTO ENERGY
Email: communications@iautoenergy.au

‍ Phone: 1800 225 063

‍ ‍
This Privacy Policy forms part of, and should be read together with, the iAUTO ENERGY End User Licence Agreement.

‍ ‍