Effective from: [TBD: effective date]
What this policy covers
This policy explains how EVSense collects and uses personal data when you use the EVSense box, the EV Guardian membership, report emails and the evsense.app website, under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (PDPA).
Who is responsible for your data
The data controller is [TBD: company name]
- Address: [TBD: company address]
- Email: [email protected]
What we collect
We only collect what we need for alerts, reports and running your membership, as listed below.
| Data | Examples | Source | Why | Legal basis (draft) | Kept for |
|---|---|---|---|---|---|
| Battery data from the car | Voltage, current, temperature, SOC, SOH, per-cell voltages, insulation resistance, charging events, distance — logged once per second while in use | Your car, via the Vgate OBD adapter | On-screen alerts, history, SOH trend and reports | Contract (membership service) · consent (given in the first-time setup) | Raw data 90 days · reports and daily summaries for the length of the membership plus 1 year |
| Report email addresses | Up to 3 per box | You enter them in the car-screen settings, or on your phone via QR | Sending reports and alert emails · email confirmation | Contract · consent (confirmation link) | Until you remove it or unsubscribe · [TBD] |
| Box code and software version | Box identifier, software version | The EVSense box | Membership checks, updates, support | Contract · legitimate interest (box security and updates) | [TBD] |
| Box settings | Language, selected car model | You choose them on the car screen | Showing and reading data correctly for your car | Contract | [TBD] |
| What you send when contacting us or paying | Name or chat handle, email, car model, messages, screenshots, payment slips | You send it by email or another contact channel | Answering you, activating membership, checking payment | Contract · legal obligation (accounting records) | [TBD] |
What we do not collect
- No location or GPS data from the car.
- No VIN (vehicle identification number).
- No contacts or messages from your phone.
- We never sell personal data to anyone.
In the box or on our server?
Every box logs battery data locally so danger alerts work without internet. Battery data is uploaded to our server only for boxes with an active membership or free trial.
For boxes without membership, battery data stays in the box. When online, the box still sends its box code and software version to check membership and get updates.
How we use data
- Showing on-screen alerts when something looks wrong with the battery.
- Building history, SOH trend, cell map and weekly reports for members.
- Sending report and alert emails — only to addresses you have confirmed.
- Checking and activating membership, and checking payments.
- Delivering software updates and helping you when you contact us.
Service providers
We use a few outside providers who process data on our behalf, under contracts that only let them use it as we instruct (draft).
- Cloudflare — network and website delivery
- Email delivery provider — [TBD]
- Server location — [TBD]
Transfers outside Thailand
Some providers may process or store data outside Thailand. Where that happens, we only send what is needed and follow the PDPA rules on cross-border transfers (draft — pending confirmation of server location and providers).
How long we keep data
- Raw battery data on our server: 90 days.
- Reports and daily summaries: for the length of the membership plus 1 year.
- If membership ends, we keep your history for the periods above so it is all back if you renew.
- Other data: [TBD]
Security
Data between the box, our server and the website is encrypted in transit (HTTPS), and only team members who need it can access it. No system is 100% secure; if a breach puts you at risk, we will notify the regulator and you as the law requires.
Your rights under PDPA
Under PDPA you have the right to:
- access and get a copy of your data;
- have it corrected;
- have it deleted or destroyed;
- restrict its use;
- object to its collection or use;
- withdraw consent at any time (some features, such as email reports, may then stop working);
- receive or move your data in a machine-readable format;
- complain to the Office of the Personal Data Protection Committee (PDPC).
To use these rights, email [email protected] with your box code. We may ask you to confirm your identity first, and will reply within the time the law requires.
Report emails
- Confirmed first: we only send reports to addresses that clicked the confirmation link.
- Unsubscribe from any email: every report and alert email has an unsubscribe link that works without logging in.
- Stopped means stopped: we keep unsubscribed addresses on a do-not-send list for that box, so nothing is sent again even if someone re-enters the address on the screen. To start again, contact us.
- Reports are sent from [email protected]. Replies go to [email protected].
This website and cookies
The evsense.app website uses no cookies and has no website accounts. If we turn on Cloudflare Web Analytics, it counts visits in aggregate, uses no cookies and does not track you across other sites.
To deliver pages and block attacks, Cloudflare and our server may process technical data such as IP address and browser type.
Changes to this policy
We may update this policy when the service changes. The effective date will be shown on this page, and for significant changes we will also notify confirmed email addresses.
Privacy contact
Email [email protected] or see other channels on Support. See also: Terms of use.