Privacy Policy

---

Effective Date:  01/08/2025

This Privacy Policy explains how ZAPP Electric Inc., doing business as ZAPP and ZappFast (“ZAPP,” “we,” “us,” or “our”), collects, uses, discloses, and protects information when you visit our website, use our mobile or web applications, interact with our DC fast charging stations, create an account, make a payment, contact customer support, or otherwise use our products and services (collectively, the “Services”).

By using the Services, you agree to the collection, use, and disclosure of information as described in this Privacy Policy. Your use of the Services is also subject to our Terms of Use.

This Privacy Policy applies to information collected through:

• the ZAPP and ZappFast websites;
   
• mobile applications and web portals;
   
• charging stations, payment terminals, and related software;
   
• customer support channels;
   
• email, SMS, and other communications with us; and
   
• any other digital or physical touchpoints through which we provide the Services.
   

We may update this Privacy Policy from time to time. If we make changes, we will post the revised version with an updated Effective Date. Your continued use of the Services after the revised Privacy Policy is posted means you accept the updated policy to the extent permitted by law.

EVgo’s public policy also states that updates may be posted and that continued use after changes may be treated as acceptance. 

We may collect the following categories of information.

We may collect information you provide when you:

• create an account;
   
• start or pay for a charging session;
   
• contact customer support;
   
• subscribe to updates;
   
• fill out a form on our website;
   
• request a demo, quote, or partnership discussion;
   
• participate in surveys, promotions, or events; or
   
• otherwise communicate with us.
   

This information may include:

• full name;
   
• email address;
   
• phone number;
   
• billing address;
   
• company name;
   
• vehicle information;
   
• account credentials;
   
• payment-related information;
   
• support request details;
   
• correspondence records; and
   
• any other information you choose to provide.
   

EVgo’s public policy similarly lists form submissions, correspondence, surveys, account information, and purchase/service interactions as direct collection points. 

When you use our charging Services, we may collect information such as:

• charger ID and location;
   
• charging session date and time;
   
• session duration;
   
• energy dispensed;
   
• payment amount;
   
• transaction status;
   
• account or guest session identifier; and
   
• related service or support records.
   

When you use our website, app, or other digital Services, we may automatically collect:

• IP address;
   
• browser type;
   
• device type;
   
• device identifiers;
   
• operating system;
   
• language settings;
   
• referral URLs;
   
• pages viewed;
   
• clickstream data;
   
• session timing;
   
• date and time of access; and
   
• other usage and diagnostics information.
   

EVgo’s public policy includes these same general types of technical and internet activity data, such as IP address, browser type, device identifiers, operating system, pages viewed, session data, and time/date of access. 

We may collect location information from:

• the charger location where a session occurs;
   
• your device, if you permit location access in an app or browser; or
   
• your approximate location inferred from your IP address.
   

EVgo’s policy expressly includes geolocation and app-based location collection. 

We may receive information from third parties, including:

• payment processors;
   
• analytics providers;
   
• advertising and marketing partners;
   
• fraud prevention or identity verification vendors;
   
• hosting, network, and software vendors;
   
• business partners;
   
• property hosts; and
   
• public or commercial sources where permitted by law.
   

EVgo’s public policy also states it may receive information from service providers, partners, ad networks, fraud-related sources, and other third-party sources. 

Our Services are not directed to children under 18, and we do not knowingly collect personal information directly from anyone under 18 without appropriate legal authorization. If we learn that we collected personal information from a child in a manner not permitted by law, we will take steps to delete it.

EVgo’s public policy also states it does not knowingly collect or maintain personal information from individuals under 18. 

We may use information we collect to:

• provide, operate, maintain, and improve the Services;
   
• authenticate users and manage accounts;
   
• process charging sessions and payments;
   
• provide receipts, confirmations, and service notices;
   
• respond to questions, support requests, and complaints;
   
• monitor charger health, availability, uptime, and fault conditions;
   
• detect, prevent, and investigate fraud, misuse, security incidents, and other unlawful activity;
   
• analyze usage trends and performance;
   
• personalize user experience;
   
• communicate about products, services, updates, promotions, and events where permitted by law;
   
• enforce our Terms of Use and other policies;
   
• comply with legal obligations; and
   
• protect the rights, safety, and property of ZAPP, users, hosts, and others.
   

EVgo’s public policy includes using personal information to respond to inquiries, process transactions, improve services, recognize users, analyze usage, and support marketing and operational functions. 

We may use cookies, pixels, tags, log files, local storage, and similar technologies on our website and digital Services to:

• keep you signed in;
   
• remember preferences;
   
• understand traffic and usage patterns;
   
• improve performance and functionality;
   
• measure advertising effectiveness;
   
• support analytics; and
   
• help deliver relevant content.
   

These technologies may be set by us or by third-party providers acting on our behalf.

EVgo’s public policy specifically describes cookies, local storage, web beacons, pixel tracking, GIFs, and IP-based logging, and divides cookies into essential, performance, and functionality uses. 

Most browsers allow you to control cookies through browser settings. Blocking cookies may affect how certain parts of the Services function.

EVgo’s public policy also notes that users can refuse browser cookies but that certain site functions may then be unavailable or impaired. 

We use PCI-compliant hardware and software, and payment-related data transmitted to our servers is encrypted. Payment processing may be handled by third-party processors that collect, store, and process payment information on our behalf subject to their own policies and contractual obligations.

To the extent permitted by law and operationally necessary, we may retain transaction identifiers, billing records, partial card metadata, charge status, and fraud-screening results, but we do not intend this Privacy Policy to imply that ZAPP stores full payment card numbers unless specifically disclosed elsewhere.

We may disclose information in the following circumstances:

We may share information with vendors and service providers that help us operate the Services, including providers of:

• payment processing;
   
• cloud hosting;
   
• software infrastructure;
   
• customer support;
   
• data analytics;
   
• communications delivery;
   
• cybersecurity;
   
• fraud prevention;
   
• mapping and geolocation tools; and
   
• charger/network maintenance.
   

Where relevant, we may share limited information with charger site hosts, property partners, fleet partners, or commercial counterparties to operate the charging network, manage site performance, support billing, investigate disputes, or maintain equipment.

We may disclose information if we believe in good faith that doing so is necessary to:

• comply with law, subpoena, court order, or legal process;
   
• respond to lawful requests from regulators or law enforcement;
   
• enforce our agreements;
   
• protect our rights, property, systems, and security;
   
• investigate fraud or misconduct; or
   
• protect the safety of users or the public.
   

We may disclose information in connection with an actual or proposed merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or transfer of all or part of our business.

We may disclose information with your consent or at your direction.

EVgo’s public policy similarly contemplates sharing and disclosure frameworks through service providers, partners, and legal/compliance mechanisms, and includes California disclosure categories and third-party tracking/provider discussions. 

We may de-identify, anonymize, aggregate, or otherwise process information so that it can no longer reasonably identify an individual. We may use and disclose such information for analytics, operational improvement, product development, reporting, benchmarking, and other lawful purposes.

EVgo’s public policy expressly distinguishes de-identified personal information and states it may use de-identified or aggregated data for operational and analytical purposes. 

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• maintain your account;
   
• provide the Services;
   
• process and document transactions;
   
• resolve disputes;
   
• comply with tax, accounting, legal, regulatory, and recordkeeping obligations;
   
• enforce agreements; and
   
• maintain internal reporting, reconciliation, and security controls.
   

We may retain different categories of information for different periods depending on the type of data, the sensitivity of the data, the business purpose, and legal requirements.

EVgo’s public policy similarly states that retention depends on the purpose of use, that data may be kept while an account is active or while the person remains a customer, and longer where needed for business, tax, legal, reporting, or reconciliation purposes. 

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

Your payment-related transmission statement about encrypted data and PCI-compliant systems can be stated affirmatively, but broader absolute security promises should be avoided.

Depending on your relationship with us and applicable law, you may have choices regarding:

• whether to provide certain information;
   
• updating account information;
   
• opting out of marketing emails by using the unsubscribe link;
   
• adjusting cookie settings in your browser;
   
• disabling location permissions in your device or browser; and
   
• contacting us to request access, correction, deletion, or other privacy-related action where applicable.
   

Depending on where you live, you may have rights under state privacy laws, including rights to request:

• access to personal information;
   
• correction of inaccurate personal information;
   
• deletion of personal information;
   
• information about categories of data collected, used, disclosed, or sold/shared;
   
• portability, where applicable; and
   
• opt-out rights where required by law.
   

We will process verified requests as required by applicable law and may deny requests where an exemption or exception applies.

EVgo’s public policy includes a California Consumer Privacy Notice, rights to request disclosure of categories and specific pieces of information, deletion rights subject to exceptions, and California-specific privacy contact processes. 

For California residents, we may be required to provide additional notices regarding categories of personal information collected, sources, business purposes, disclosures, retention, and rights under California law.

EVgo’s public policy includes both a California Consumer Privacy Notice and CalOPPA/“Shine the Light” references. 

At this time, our website may not respond to browser “Do Not Track” signals unless and until there is a widely accepted legal or technical standard requiring a different response.

EVgo’s public policy states it does not respond to DNT signals because there is not yet an industry or legal standard for doing so. 

Our website, app, or communications may contain links to third-party websites, tools, or services. We are not responsible for the privacy practices of third parties, and their collection and use of information are governed by their own privacy policies.

EVgo’s public policy likewise notes that third-party cookies, ads, and tracking technologies may be present and are outside its control. 

If you access the Services from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States or other jurisdictions where our service providers operate, subject to applicable law.

If you have questions about this Privacy Policy or want to submit a privacy-related request, contact:

ZAPP Electric Inc. d/b/a ZAPP and ZappFast

101 Hudson St, 21st floor, 

Jersey City, NJ 07302

support@Zappfast.com