Privacy Policy

1. Scope

This Privacy Policy applies to personal information processed through RioNadi websites, EV charging software, charging-session interfaces, payment flows, customer and operator dashboards, support channels, and related services (collectively, the “Services”).

For certain enterprise, utility, fleet, municipality, white-label, or site-host deployments, RioNadi may process personal information on behalf of a business customer. In those cases, that customer may be the controller or responsible party for some data, and its own privacy notice may also apply.

2. Information We Collect

The information we collect depends on how you interact with the Services.

3. Sources of Information

We may collect information:

• directly from you when you use a website, account, charging station, payment flow, or support channel;
• automatically from browsers, devices, charging stations, network systems, logs, and cookies;
• from EV charging station owners, utilities, fleets, municipalities, employers, site hosts, or other RioNadi business customers;
• from payment processors, banks, fraud-prevention providers, and transaction partners;
• from hardware, communications, roaming, or integration partners; and
• from other sources where permitted by applicable law.

4. How We Use Personal Information

We use personal information as reasonably necessary to:

• provide, operate, maintain, and improve the Services;
• initiate, manage, monitor, and complete charging sessions;
• process payments, refunds, invoices, and transaction records;
• authenticate users and manage account access and permissions;
• monitor chargers and networks, diagnose faults, and provide customer support;
• provide reports, analytics, dashboards, alerts, and operational insights;
• detect fraud, misuse, security incidents, and unauthorized activity;
• communicate about transactions, support, service notices, and relevant account matters;
• comply with legal, tax, accounting, regulatory, and contractual obligations;
• protect the rights, safety, property, and integrity of RioNadi, our customers, users, and systems; and
• support other purposes disclosed at the time of collection or authorized by you.

5. Payment Information

Payment transactions may be handled by third-party payment processors. Depending on the country and payment method, those providers may include dLocal Go or other payment service providers.

Full payment-card details may be collected directly by a payment processor rather than stored by RioNadi. RioNadi may receive transaction status, processor references, limited payment-method metadata, and other information needed for billing, reconciliation, support, fraud prevention, and recordkeeping.

Payment processors process information under their own privacy notices and legal obligations.

6. Cookies and Technical Information

Our websites and web applications may use cookies, local storage, session technologies, and similar tools to maintain sessions, remember preferences, support authentication, measure performance, improve reliability, and protect against abuse.

You may be able to control cookies through your browser settings. Disabling essential cookies may prevent parts of the Services from functioning correctly.

Our websites do not currently respond to “Do Not Track” browser signals, because no uniform standard for recognizing them has been adopted. Third parties, such as analytics providers, may collect information about your online activities over time and across different websites when you use our websites.

7. How We Disclose Information

We may disclose personal information to the following categories of recipients where reasonably necessary:

• Service providers: cloud hosting, communications, cybersecurity, analytics, customer support, and other vendors supporting our operations.
• Payment providers: payment processors, financial institutions, fraud-prevention providers, and related transaction partners.
• Business customers and site operators: utilities, fleets, municipalities, site hosts, employers, charger owners, or other organizations responsible for the applicable charging deployment.
• Integration partners: charging-hardware providers, roaming networks, telecommunications providers, and other connected systems.
• Authorities and legal recipients: government agencies, regulators, courts, or other parties where required by law or necessary to protect legal rights and safety.
• Corporate transactions: parties involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to appropriate safeguards.

We do not disclose personal information to third parties for purposes unrelated to the Services except as authorized by you or permitted or required by law.

8. International Data Transfers

RioNadi operates in more than one country and uses service providers that may process information in different jurisdictions. As a result, personal information may be transferred to or accessed from the United States, Colombia, or other countries where RioNadi or its service providers operate.

Where applicable law requires safeguards for international transfers or transmissions of personal information, RioNadi will use appropriate contractual, organizational, or legal measures.

9. Data Retention and Database Validity

We retain personal information for as long as reasonably necessary to provide the Services and fulfill the purposes described in this Policy, including transaction reconciliation, customer support, security, accounting, tax, legal, contractual, and regulatory requirements.

Retention periods vary by data type and context. Information may be deleted, anonymized, or archived when it is no longer reasonably necessary, subject to legal or contractual retention requirements.

For purposes of Colombian data-protection requirements, databases containing personal information remain in effect for the duration of RioNadi's business operations and for any additional period required or permitted by applicable legal, contractual, accounting, tax, security, or evidentiary obligations.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse. These measures may include access controls, authentication, monitoring, encryption or secure transport where appropriate, logging, and security procedures.

No internet-connected system can be guaranteed to be completely secure. You are responsible for protecting your account credentials and promptly notifying us if you believe your account or information has been compromised.

11. Your Privacy Rights

Depending on your location and applicable law, you may have rights to access, know about, correct, update, delete or suppress, restrict, object to, or obtain information about our processing of your personal information. You may also have rights relating to consent, portability, or certain disclosures.

To submit a privacy request, email support@rionadi.com with the subject line “Privacy Request”. We may need to verify your identity before completing a request.

12. Colombia — Personal Data Treatment Rights

For personal information subject to Colombian law, including Law 1581 of 2012 and applicable implementing regulations, RioNadi Colombia SAS recognizes the rights of data subjects (“Titulares”).

RioNadi Colombia SAS obtains prior, express, and informed authorization from data subjects at the time their personal information is collected — for example, when you create an account, start a charging session, or submit a form — except where Colombian law does not require authorization.

Your rights in Colombia

• to know, update, and rectify your personal information;
• to request evidence of the authorization granted for processing, where applicable;
• to be informed, upon request, about the use made of your personal information;
• to submit complaints to the Superintendencia de Industria y Comercio after completing the applicable direct-claim process where required;
• to revoke authorization and/or request deletion where legally permitted and where there is no legal or contractual duty requiring continued processing; and
• to access your personal information free of charge as provided by applicable law.

How to submit a consultation or claim

Send your request to support@rionadi.com with the subject “Data Protection Request – Colombia.” Please include:

• your full name and sufficient information to verify your identity;
• your contact information;
• a clear description of the information or right involved;
• the correction, update, deletion, revocation, or other action requested, if applicable; and
• supporting documents where relevant.

Response periods

Consultations concerning personal information will be handled within the periods established by applicable Colombian law. Under Law 1581 of 2012, consultations are generally answered within ten (10) business days of receipt, subject to the legally permitted extension. Claims are generally answered within fifteen (15) business days beginning on the day after receipt, subject to the legally permitted extension.

13. United States Privacy Rights

Residents of certain U.S. states may have privacy rights under applicable state law, including rights to request access, correction, deletion, or information about certain disclosures or processing activities.

RioNadi does not sell personal information.

If applicable law grants you an opt-out right relating to a “sale,” “sharing,” targeted advertising, or certain profiling, RioNadi will honor legally valid requests using the mechanisms required by that law. RioNadi will not discriminate against you for exercising a privacy right protected by applicable law.

You may submit a request through support@rionadi.com. We may verify your identity and, where permitted, accept requests from an authorized agent.

14. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly seek to collect personal information from children under 13 through the Services. Payment and account features are intended for adults or other persons legally authorized to use them.

For personal information subject to Colombian law, a minor is any person under 18; RioNadi Colombia SAS processes minors' personal data only as permitted by Law 1581 of 2012 and its regulations, respecting their best interests and fundamental rights, and with authorization from their legal representative.

15. Changes to this Privacy Policy

We may update this Policy to reflect changes to our Services, data practices, legal requirements, or business operations. The “Last updated” date at the top identifies the current version.

Where applicable law requires notice or renewed authorization for a material change in processing purpose, we will provide the required notice or request authorization before implementing that change.

16. Contact Us

For privacy questions, requests, or concerns: