Privacy Policy

What we collect

• Account: email, name, password hash, phone (optional), profile photo (optional).
• Identity verification: government ID and selfie, processed by Stripe Identity; Repleo stores only the verification status, not the document.
• Payment: card tokenized by Stripe; Repleo never sees full card numbers.
• Hosts: exact driveway address (shown to Drivers only after the Host confirms the booking), charging-equipment metadata, the list of accepted payment methods (Venmo, Zelle, Cash App, PayPal, Apple Pay, Google Pay), the actual payment handles/usernames for those methods (released to a Driver only once that Driver's booking is confirmed), a required driveway photo, and a required real profile photo.
• Drivers: a required real profile photo and a required photo of the vehicle that will be charged. The profile photo is concealed behind a generic silhouette to the Host while a booking request is pending and is revealed only after the Host accepts the booking.
• Bookings: timestamps, fees charged, messages exchanged in-app.
• Device & usage: IP, browser, approximate location (used to show nearby driveways), and basic analytics.
• Device location for scheduling: Repleo requires device location services to be enabled in order to request or schedule a connection. Your device's current location is used to (a) display nearby driveways, and (b) determine the local time zone so every booking time is shown in a single, unambiguous time zone synchronized with you. If location is unavailable, the scheduler is disabled. Coarse location for this purpose is not used for advertising and is not shared with third parties for marketing.
• Live location during an active booking: while a confirmed booking is in progress, the Driver's device may share precise GPS with Repleo so that the Host sees an accurate ETA and so Repleo can verify the Driver is physically at the property before allowing the session to begin. This precise-location data is tied to the booking, is not used for advertising or shared with third parties for marketing, and is retained only as long as needed to operate the booking and any related dispute window.
• Check-in photos: short photos uploaded by the Driver and/or Host at plug-in and at session end (for example, the connected cable and the disconnected state). They are stored in a private bucket and are accessible only to the two participants of that booking, and only while the Driver holds an active Driver Pass.
• Reviews: when you leave a review of a Host, other Drivers may see your first name and last initial (e.g., "Mark S."), your profile photo or initials avatar, the star rating, the written note, the date, and the make/model of the EV you brought to that session. Full last names and contact information are never displayed publicly.

How we use it

• Run the directory, match Drivers with Hosts, and schedule sessions.
• Charge Driver Pass subscriptions.
• Send transactional notifications (booking requests, confirmations, renewal reminders, receipts).
• Detect fraud and abuse; enforce the Terms.
• Improve the product (aggregated, non-identifying analytics only).

Who we share with

• Stripe (payments and identity verification).
• Email delivery providers for transactional mail.
• Map, geocoding, and address-search providers — CARTO (map tiles), OpenStreetMap / Nominatim, and Google Places — to display listings and let you search addresses.
• An automated image-review provider (a Google Gemini model accessed through Lovable's AI gateway) that screens uploaded driveway, profile, and vehicle photos for policy compliance. Photos are sent for screening only; they are not used to train third-party models by us.
• Push-notification delivery services (Apple and Google) when you enable push notifications.
• Law enforcement when legally required.

We do not sell your personal information.

What other users see

Drivers see a Host's first name and last initial, blurred address, charger details, allowed hours (any hours the Host has not allowed or has marked as a blackout are hidden from the time picker; if no schedule is set, the driveway is treated as available 24/7, and same-day slots stay selectable until 11:59 PM local time), reviews — but never the exact address or the Host's payment handles/usernames until the Host confirms the booking. The list of payment methods a Host accepts (Venmo, Zelle, Cash App, PayPal, Apple Pay, Google Pay) is visible up front so Drivers can decide whether the Host is a good fit before requesting a connection. Hosts see a Driver's first name and identity-verified status when a booking request arrives; the Driver's real profile photo, vehicle photo, and vehicle details are concealed behind a generic silhouette until the Host taps Accept Booking, at which point they are revealed so the Host knows exactly who and what vehicle to expect on their driveway. Photos uploaded once are stored on your profile and are not requested again unless you delete them.

Your rights

• Access, export, correct, or delete your data — email support@repleoev.com.
• Account deletion: You may request deletion of your Repleo account and personal data at any time by emailing support@repleoev.com, or delete it yourself in the app at any time from Menu → Account → Settings → Delete account. The in-app option runs immediately: it cancels any active subscription, deletes your profile, listings, and notifications, and removes your login. Deletion cannot be undone. Some records are retained where legal, tax, and fraud-prevention obligations require it (see Retention).
• U.S. state privacy laws give residents of certain states additional rights to know, access, correct, delete, port, and opt out of "sale" or "sharing" of personal information (Repleo does not sell or share for cross-context behavioral advertising). These laws include the California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, Oregon OCPA, Montana MCDPA, Iowa ICDPA, Tennessee TIPA, Delaware DPDPA, New Jersey NJDPA, New Hampshire NHDPA, Maryland MODPA, Minnesota MCDPA, Rhode Island RIDTPPA, and other state laws as they take effect. Submit any request to support@repleoev.com.
• EU/UK residents have rights under GDPR, including the right to object, restrict, and port their data.

Retention

We keep your account data while your account is active and for a reasonable period after deletion to satisfy legal, tax, and fraud-prevention obligations. Booking records (and the subscription charges associated with them) are retained for at least 4 years. In-app messages between a Driver and Host, reviews, and booking history are retained for the life of the Service for safety, dispute-resolution, and abuse-prevention purposes; messages cannot be deleted by either participant once sent. Transactional email delivery logs (recipient address, template, and status) are kept for deliverability and abuse monitoring. Residual copies may persist in encrypted backups for a limited period after deletion.

Security

We use industry-standard encryption in transit and at rest. No system is perfectly secure; report vulnerabilities to support@repleoev.com.

Changes

We will notify you in-app or by email before material changes take effect.