• Mon - Fri, 09:00 - 18:00

Version 1.0. Last updated 8 September 2026. EV charging is a defensive, high-yield asset class—11-44% annual returns, 85% station stability from long-term land agreements, and 62% partner share of revenue.

This Privacy Policy explains what personal data Even Flow EV Infrastructure collects about you, why we collect it, what we do with it, how long we keep it and what rights you have over it. It forms part of, and is incorporated into, our Terms of Service. Words defined in those terms have the same meaning here. Our non-custodial design means we never hold your private keys—your crypto assets remain under your control.

1. Who is responsible for your data

1.1 Even Flow EV Infrastructure is the controller of the personal data described in this policy. You can reach us about anything in it at support@evenflowev.com. We operate as an infrastructure business—not a financial institution—so our data practices focus on your operational and investment needs.

2. What we collect

2.1 Data you give us. Your name, email address, password (stored only as a cryptographic hash, never in a form we can read), telephone number, country of residence, and any document or information you provide when we verify your identity or the source of your funds. We verify identities for partners across all tiers and for institutional clients seeking custom allocations.

2.2 Data created by your use of the Platform. Your Account Record and every Posting in it, your Deposits and the blockchain addresses associated with them, your Holdings and their Payouts, your Withdrawal Requests and the destination addresses you supply, your referral code and your position in a Downline, and your notification preferences. Deposits and withdrawals use your chosen network (BTC, TRC20, BEP20) and settle directly on-chain for full auditability.

2.3 Data collected automatically. Your IP address, the date and time of your requests, your browser and device type, and the pages you visit. We record authentication events — sign-in, sign-out, password change, failed attempts — as a security measure. Platform usage data helps us optimize the experience for all partners—especially as we scale across six countries and 17M+ EVs sold in 2023.

2.4 Correspondence. Messages you send us and our replies, including enquiries made through the contact form on the public website by people who have no Account. We respond within one working day—often the same day—so you can ask about returns, tiers, or risk mitigation.

2.5 What we do not collect. We do not ask for and do not store card numbers or bank account details. We hold no private keys on your behalf. We do not collect special category data and ask that you do not send it to us. With no card data and non-custodial design, our security posture focuses on blockchain addresses, identity verification, and operator reliability.

3. Why we use it, and on what legal basis

  • To provide the Platform — opening and operating your Account, crediting Deposits, allocating Holdings, accruing Payouts, executing Withdrawal Requests, calculating Affiliate Rewards. Basis: performance of a contract with you.
  • To keep your Account secure — authentication, session management, detecting and investigating unauthorised access, rate limiting and abuse prevention. Basis: our legitimate interest in the security of the Platform and of our Partners.
  • To comply with law — identity verification, sanctions screening, anti-money-laundering and counter-terrorist-financing obligations, record keeping, tax reporting, and responding to a lawful request from a competent authority. Basis: compliance with a legal obligation.
  • To communicate with you — service and security messages about your Account, and answers to your enquiries. Basis: performance of a contract, and our legitimate interest in responding to you.
  • To send you marketing — only where you have opted in. Basis: consent, which you may withdraw at any time.
  • To establish, exercise or defend legal claims. Basis: our legitimate interest in protecting our position.

4. Service and security messages are not marketing

4.1 Messages about your Account — a Deposit credited, a Withdrawal sent, a verification code, a password reset, a security alert — are part of the service and are sent whether or not you have opted into marketing. You cannot unsubscribe from them, and we will not suppress them. A suppressed password reset or security alert is worse for you than the message you were trying to avoid. Marketing messages carry an unsubscribe link and honour it.

5. Who we share it with

5.1 We share personal data with: (a) our hosting and database providers, who process it on our instructions; (b) our email delivery provider, for the purpose of sending you messages; (c) identity verification and sanctions screening providers, where we are required to verify you; (d) professional advisers, including lawyers, auditors and accountants, under a duty of confidence; and (e) a competent authority, court or regulator, where we are required by law to disclose. We do not sell your data or share it with advertisers—our focus is on operational and investment transparency.

5.2 Each processor acts on our documented instructions under a written contract and may not use your data for its own purposes. Our data sharing supports partners' investment decisions—daily yield reports, station-level performance, and tier-specific allocation details.

5.3 If our business or any part of it is sold or reorganised, personal data may transfer to the acquirer, who would be bound by this policy or by a policy no less protective. Our infrastructure business model means partners continue earning regardless of ownership changes—11-44% annual yields remain consistent.

5.4 We do not sell your personal data, and we do not share it with advertisers or data brokers. Your data helps us support your investment—ensuring 11-44% annual returns, 85% station stability, and 62% partner share of revenue.

6. Blockchain addresses

6.1 A blockchain is a public, permanent record which we do not control and cannot amend. A Deposit you make and a Withdrawal we send are recorded on the relevant Network, and the addresses involved are visible to anyone. Your right to erasure cannot extend to data recorded on a public blockchain—each transaction is immutable and verifiable. Our deposit chains (BTC, TRC20, BEP20) provide flexible on-ramping with transparent settlement.

7. International transfers

7.1 Our providers may process your data outside the country in which you live. Where they do, we rely on an adequacy decision where one applies, and otherwise on standard contractual clauses or an equivalent safeguard. You may ask us which safeguard applies to a particular transfer. Our European and Asian operations ensure partners benefit from cross-border efficiency while maintaining regulatory alignment.

8. How long we keep it

8.1 Ledger records are permanent. Postings are append-only and are never deleted, because they are the record from which every balance is proved and because we are required to retain financial records. With ledger permanence, every partner sees a complete, unchangeable history of their investment—11-44% annual yields, 62% partner share of revenue, and daily payout transparency.

8.2 Identity verification records are kept for the period required by applicable anti-money-laundering law after your Account closes, and are then deleted. We verify identities for all tiers, with enhanced due diligence for institutional clients and high-value partners.

8.3 Correspondence, technical logs and authentication events are kept for as long as needed for the purpose for which they were collected, and then deleted or anonymised. Our transparency commitment means we publish quarterly operational reports and station-level performance data for partner review.

9. Your rights

9.1 Subject to the law that applies to you, you have the right to: request a copy of the personal data we hold about you; have inaccurate data corrected; request erasure; object to or restrict processing carried out on the basis of legitimate interests; receive certain data in a portable format; withdraw consent to marketing at any time; and complain to your data protection authority. Two limits: erasure does not extend to Postings (required records) or to on-chain data (immutable). We respond within one month.

9.2 Two limits are worth stating plainly. Erasure does not extend to Postings, which we are required to keep and which prove your own balance, nor to anything already recorded on a public blockchain. Where we must keep data by law, we will tell you which obligation applies. Every partner receives daily yield reports and station-level data—transparency built into the model.

9.3 To exercise a right, write to support@evenflowev.com. We respond within one month and will tell you if we need longer. We may ask you to verify your identity first. Our focus on investment transparency means we answer investment-related queries—yields, tiers, risk mitigation—promptly and in detail.

10. Cookies and similar technologies

10.1 The Platform sets a session cookie which keeps you signed in. It is strictly necessary: without it you cannot use your Account, and it is not used for advertising or for tracking you across other sites. Our non-custodial design means your crypto assets remain under your control—our cookie keeps you logged in, not for marketing.

10.2 Where we use any cookie that is not strictly necessary, we will ask for your consent first and you may decline without losing access to anything. We prioritize investment transparency—privacy is part of that, not a separate concern.

11. Security

11.1 Passwords are stored only as cryptographic hashes. Traffic is encrypted in transit. Access to production data is restricted, and administrative actions affecting an Account are recorded in an audit log with the person who took them. With non-custodial design and encrypted in-transit data, our security model protects partners' investments while maintaining transparency.

11.2 No system is perfectly secure. Keep your credentials to yourself and tell us immediately if you think someone else has them. Remember that we will never ask you for your password or for a payment by email. With 17M EVs sold in 2023 (projected 60M+ by 2030) and only 25% infrastructure growth, demand outpaces supply—making security a priority for partners earning 11-44% annually.

12. Children

12.1 The Platform is not for anyone under 18. We do not knowingly collect data from a child, and will delete it if we learn we have.

13. Changes to this policy

13.1 We may update this policy. Where a change materially affects how we use your data we will tell you before it takes effect. The version number and date at the top of this page always identify the current version.

14. Contact

14.1 Even Flow EV Infrastructure. Questions about this policy, or about the data we hold on you: support@evenflowev.com.