Legal information

Privacy Policy

Last updated: June 27, 2026

2. Data collected and purposes

Category Data Purpose Legal basis
Account Email, full name (optional), password (hashed) Account creation and management Contract performance
Google authentication Email, name (if signing in via Google) User identification Contract performance
Payments Stripe reference, invoice history (type, amount, date) Billing, fraud prevention Contract performance / Legal obligation
Trips Origin and destination (label + GPS coordinates), vehicle parameters, selected networks, number of stops, distance, duration Providing the trip planning service Contract performance
Vehicle Range, battery capacity, charge curve (if provided) Route calculation Contract performance
Geolocation Real-time GPS coordinates (SOS Charger only) Finding nearby charging stations Consent (requested by browser, not stored)
Session JWT httpOnly technical cookie (access_token) Maintaining authenticated session Legitimate interest (security)
Usage counters Monthly calculation count, trip credits Quota and billing management Contract performance
Technical logs Server error logs (without personally identifying data) Service stability and security Legitimate interest / Legal obligation (LCEN)

Data not collected: VoltNavigator does not collect identifying IP addresses, browsing data, advertising cookies, or data for advertising targeting purposes.

3. Retention periods

Data Retention period
Account data Duration of account + 3 years after deletion
Planned trips Rolling 12 months
Invoices and payment data 10 years (accounting obligation, Art. L123-22 French Commercial Code)
Session cookie (JWT) Session duration (maximum 13 months, CNIL recommendation)
Technical logs 12 months (Art. 6-II LCEN)

4. Recipients and sub-processors

Your data is hosted and processed by the following providers, bound to VoltNavigator by data processing agreements compliant with Article 28 GDPR:

Provider Role Country Safeguards
OVH SAS Server and database hosting France 🇫🇷 Data stored in France
Stripe Payments Europe Ltd Payment processing Ireland 🇮🇪 Data Processing Agreement (DPA)
TomTom N.V. Real-time charger availability Netherlands 🇳🇱 DPA — EU data
Google LLC OAuth authentication (optional) USA 🇺🇸 EU-US Data Privacy Framework (adequacy decision 2023/1795)
OVH SAS (SMTP) Transactional emails (password reset) France 🇫🇷 Data stored in France

VoltNavigator does not sell your data to third parties and does not use it for advertising purposes.

5. International transfers

Almost all of your data remains within the European Union. The only transfer outside the EU concerns authentication via Google (if you choose this option): Google LLC is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023), ensuring a level of protection equivalent to the GDPR.

6. Cookies

VoltNavigator uses a single technical cookie:

Cookie Name Duration Purpose
Session access_token Session duration (max 13 months) Maintaining authentication. httpOnly cookie: inaccessible from JavaScript, protected against session hijacking (XSS).

This cookie is strictly necessary for the Service to function. Under CNIL guidelines (deliberation n°2020-091), it is exempt from consent requirements.

VoltNavigator does not use any advertising, third-party analytics, or tracking cookies.

7. Your rights

Under the GDPR, you have the following rights over your personal data:

  • Right of access (Art. 15 GDPR): obtain a copy of your data
  • Right to rectification (Art. 16 GDPR): correct inaccurate data
  • Right to erasure (Art. 17 GDPR): request deletion of your account and data
  • Right to data portability (Art. 20 GDPR): receive your data in a structured format
  • Right to object (Art. 21 GDPR): object to processing based on legitimate interest
  • Right to restriction (Art. 18 GDPR): temporarily limit processing

To exercise your rights, contact us at: support@voltnavigator.com

We will respond within a maximum of one month. If you are unsatisfied with our response, you may lodge a complaint with the CNIL (French Data Protection Authority) — www.cnil.fr — or with the supervisory authority of your EU country of residence.

8. Security

VoltNavigator implements appropriate technical and organisational measures to protect your data: encrypted communications (HTTPS/TLS), hashed passwords, httpOnly session cookie, database access restricted to the application server.

9. Minors

The Service is intended for individuals aged 16 or over. VoltNavigator does not knowingly collect data from children under 16.

10. Updates

This policy may be updated. In the event of a material change, you will be notified by email or in-app notification. The date of the last update is shown at the top of this document.