Privacy Policy

VideoEV Inc. ("VideoEV," "we," "us," or "our") operates the Vehicle Media Network — a programmatic video advertising platform delivered across EV charging station kiosks, in-car tablets, and mobile applications. Our registered address is in the United States. For privacy enquiries, contact us at privacy@videoev.com.

VideoEV receives data through two channels: the OCPP (Open Charge Point Protocol) layer of EV charging sessions, and advertiser/CPO interactions with our dashboard and API.

Session-layer signals (from OCPP)

When a driver connects to a partner charging station, the OCPP stream provides:

• EVCCID — an encrypted hardware identifier for the vehicle (never a VIN, name, or plate number)
• State of Charge (SoC) at session start and end
• Charging rate (kW) and estimated session duration
• Station identifier, geo-coordinates, and venue type
• Session timestamp and daypart

The EVCCID is resolved against our Vehicle Identity Graph to infer make, model, year, trim, and MSRP tier. This inference is deterministic (not modeled) and produces a vehicle profile — not a personal profile. No name, email, phone number, payment data, or government identifier is ever collected or stored.

Advertising data

• Ad impression logs (timestamp, station, vehicle tier, creative ID, CPM)
• Completion rates and viewability signals
• QR scan events (if a driver scans an ad QR code)
• Bid request and response logs

Dashboard and API users (advertisers and CPO partners)

• Name, email address, and company name provided at registration
• Login activity and session logs
• Campaign configuration, creative assets, and billing information

Website visitors (videoev.com)

• Standard server logs (IP address, browser, referrer, pages visited)
• Contact form submissions
• No third-party advertising trackers or cross-site tracking pixels are used on this site

• Delivering and optimising targeted video ads during EV charging sessions
• Running bid auctions and computing CPM floors via PredictBid
• Generating aggregated performance reports for advertisers and CPO partners
• Fraud detection, invalid traffic filtering, and platform security
• Billing and invoicing for advertising spend
• Responding to enquiries, providing support, and improving the platform

We do not sell personal data. We do not use session-layer vehicle data to build persistent individual profiles that follow drivers across the internet.

Where EU/EEA data protection law applies, we rely on the following legal bases:

• Legitimate interests — delivering advertising to drivers who are present at partner charging stations (Article 6(1)(f))
• Contract performance — processing data to execute advertiser and CPO agreements (Article 6(1)(b))
• Legal obligation — retaining records required by applicable law (Article 6(1)(c))
• Consent — for any optional communications such as newsletters (Article 6(1)(a))

We share data only in these circumstances:

• CPO partners — aggregated session and yield reports; no raw EVCCID data is shared
• Advertisers — aggregated campaign performance reports; no driver-identifiable data is shared
• Demand-side platforms (DSPs) — bid requests containing vehicle tier, dwell estimate, location context, and daypart signals; no EVCCID or PII is included
• Service providers — cloud infrastructure (AWS), analytics, and security tooling, under data processing agreements
• Legal requirements — where required by law, court order, or to protect our legal rights

VideoEV's bid requests are OpenRTB-compliant and do not include device IDs, cookies, or browser fingerprints.

• Session-layer EVCCID records: 90 days, then anonymised to vehicle tier + MSRP band only
• Ad impression and bid logs: 13 months (required for advertiser reporting and fraud audits)
• Dashboard account data: retained for the life of the account, plus 30 days after closure
• Anonymised aggregate statistics: retained indefinitely for platform analytics

Depending on where you are located, you may have the following rights regarding your personal data:

EU / EEA residents (GDPR)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local supervisory authority

California residents (CCPA / CPRA)

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

To exercise any of these rights, contact us at privacy@videoev.com. We will respond within 30 days (GDPR) or 45 days (CCPA).

videoev.com uses session cookies required for the contact form and authentication on data.videoev.com. We do not use advertising cookies, cross-site tracking pixels, or third-party behavioural targeting on our marketing site.

The EV charging kiosk, in-car tablet, and mobile app surfaces do not use browser cookies. Audience signals are derived entirely from the OCPP session layer.

VideoEV is pursuing SOC 2 Type II certification. Current controls include encryption in transit (TLS 1.3), encryption at rest (AES-256), access controls with MFA on all production systems, and annual third-party penetration testing. EVCCID resolution is performed within isolated compute environments with no external egress.

VideoEV operates infrastructure in the United States (AWS us-east-1). Where personal data of EU/EEA residents is transferred to the US, we rely on Standard Contractual Clauses (SCCs) as the transfer mechanism. Copies of our SCCs are available on request.

Our platform is not directed at individuals under 18. We do not knowingly collect personal data from minors. EV charging sessions are associated with vehicle operators who hold a valid driving licence.

We may update this policy as our platform evolves. Material changes will be notified to dashboard account holders by email at least 30 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy questions, data subject requests, or to request a copy of our Data Processing Agreement: