حریم خصوصی

Aala Energy respects the privacy of its users, customers, and partners. This document is drafted with transparency and legal awareness, so you know exactly what information we collect, how we use it, how long we keep it, and what rights you have regarding your data. Please read this page carefully.

1. Information We Collect

Depending on how you interact with our systems, we may collect and process the following categories of data:

• Identity & Contact Information: Full name, phone number, email address, national ID (if officially registered), and details you provide in contact forms, registrations, partnership requests, or purchases.
• EV Charging Data: Start and end time of charging sessions, energy consumed (kWh), station and charger identifiers, vehicle type, and connector type.
• RFID Card Data: Card identifier, issue date, validity period, charging transactions, balance, and usage reports.
• Payment Information: Transaction amounts, reference numbers, dates and times of payments. (Bank card details such as card number or CVV2 are never stored on our servers.)
• Technical & Behavioral Data: IP address, browser type, operating system, pages visited, time spent, referral sources, and actions performed within the user panel.
• Cookies: Used to store preferences, improve user experience, and analyze visitor behavior.
• Security Logs: Login timestamps, failed login attempts, account setting changes, and administrative activities to detect and prevent security threats.

2. How We Use Your Information

• Responding to inquiries, processing requests, and providing technical support to customers and partners.
• Managing charging sessions, calculating fees, settlement, and invoicing.
• Continuously improving services, fixing bugs, and updating website, app, and management panels.
• Sending service-related announcements, system updates, tariff changes, and educational content (if you opt in).
• Analyzing consumption data and user behavior to optimize the charging network and enhance service quality.
• Preventing misuse, detecting unauthorized activities, fraud prevention, and improving overall system security.

3. Data Retention Period

• Contact & Identity Information: Retained while your account is active or for up to 3 years after your last interaction, whichever is later.
• Transaction & Charging Data: Minimum of 5 years (in compliance with Iranian tax and accounting regulations).
• Security & Technical Logs: 6 to 12 months for security audits and system improvements.
• Cookies & Behavioral Data: Maximum of 1 year (can be deleted by users via browser settings).

After the retention period expires, your data will be securely deleted or anonymized.

4. Information Sharing with Third Parties

We do not sell or transfer your personal data to any third party without your explicit consent. However, we may share your data with trusted entities in the following cases:

• Technical Service Providers: Hosting, cloud services, payment gateways (e.g., ZarinPal), SMS providers, and analytics tools (e.g., Google Analytics) – all of whom are contractually bound to respect your privacy.
• Business Partners & Charging Operators: In case of network collaboration, limited data (excluding sensitive identity details) may be shared for settlement and reporting purposes.
• Legal Obligations: If required by law enforcement or judicial authorities in accordance with the laws of the Islamic Republic of Iran.

5. Data Transfers

Your data may be transferred to servers located inside or outside Iran for processing and storage. In all cases, we are committed to maintaining security and privacy standards in compliance with Iranian laws and international best practices.

6. Data Security

We take data security seriously. We use TLS/SSL encryption for secure data transmission. Our servers are under constant security monitoring, and access to sensitive data is restricted to authorized personnel only. However, no method of data transmission over the internet is 100% risk-free, and while we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

• Access: You can request a copy of the data we hold about you.
• Correction: If any data is inaccurate, you can request corrections.
• Deletion: You can request deletion of your personal data (unless we are legally required to retain it).
• Processing Restriction: You can request a restriction on the processing of your data.
• Unsubscribe: You can opt out of promotional emails or SMS at any time.
• Data Portability: You can request your data in a reusable format (JSON/CSV).

To exercise any of these rights, simply contact us at info@aalaenergy.com. We will respond to your request within 30 days.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date at the top. We recommend reviewing it periodically. In case of significant changes, we will notify you via email or SMS.