POLICY DRAFT · OWNER REVIEW REQUIRED
Privacy policy — draft for review
Status and operator
ParcelPlug EV operates an EV installation introduction marketplace. The operating identity and monitored support address appear in the site footer once approved by the owner. Do not submit sensitive tenant information.
Information collected
Hosted sign-in supplies account identity and email. Installer profiles include business, license, insurance and service information. Project intake includes location, contacts, scope, authority and sharing consent. The service stores purchase references, consent records, operational audit events and support requests. Stripe handles card entry when checkout is enabled; ParcelPlug EV does not store card numbers.
Use and sharing
The operator uses information to qualify submissions, review contractors, match projects, administer access and resolve support requests. An anonymized project brief may be shown to approved installers. After an authorized paid introduction, the purchasing installer can export the contact brief as CSV or vCard for that project only. Export requests are permission-checked and logged. Downloaded copies cannot be recalled by the platform. New projects require affirmative upfront consent to share the contact brief with up to three qualified, matched installers. Release follows provider-verified payment without a further property login. Older projects retain named-recipient approval unless the decision-maker explicitly switches. Consent wording, scope, time and actor are recorded. Previously declined installers remain blocked after a switch. No purchased contact may be resold or used for unrelated marketing.
Tracking and providers
The application saves campaign URL tags in session storage and with submitted projects. No advertising pixels or third-party analytics are active. Sites supplies hosting, identity, D1 data storage and private R2 files. Stripe handles hosted payments when connected; Resend handles enabled transactional email and Twilio Verify handles enabled phone verification. Cloudflare Turnstile screens submissions for automated abuse. Provider availability and service activation are controlled separately.
Your choices
Keep a guest tracking link private: possession grants project access. You can pause, close or remove personal project fields from the workspace. Revocation stops future access in the service but cannot erase information already received by an installer. Use Contact for account-wide access, correction or deletion requests; identity verification and transaction-retention obligations may apply.
Retention and security
Private uploads are quarantined and only downloadable by the uploader and operator. No malware scanner is connected. Rate limits, server permissions and audit logs reduce risk. A backup/restore drill and final retention schedule are launch prerequisites. Deleting project personal fields does not erase the minimal purchase or audit ledger. No system guarantees absolute security.
Submit a support or privacy request →
Policy release lead-policy-v3. Service terms · Privacy · Installer terms · Lead policy
Anonymous discovery and paid introductions
Pre-purchase project briefs are generated from constrained categories. Property and company identities, exact addresses, free-text notes, files, logos, license numbers and links are withheld from the other party until a verified, authorized introduction. Older individual requests show a private reference and credential-review status. Your own records remain visible to you. Historical details already disclosed cannot be recalled.