Charge Roster
LoginStart free

Legal

Privacy policy

Effective date: 7 September 2026

This Privacy Policy explains how Charge Roster handles personal data when you use the Charge Roster mobile application, website and related services. Charge Roster is operated by Juho Pulkkinen, who acts as the data controller for the personal data described here.

Privacy contact: support@chargeroster.com

1. What data we process

Depending on how you use Charge Roster, we may process:

  • Account data, such as your email address, account identifier and authentication information needed to sign you in.
  • Workplace and membership data, such as the organization or workplace you belong to, your access, invitations and permissions.
  • Charging and reservation data, such as charger, site, reservation, booking-rule and scheduling information connected with your account or workplace.
  • Support communications, including information you choose to send when asking for help, reporting a problem or making a privacy request.
  • Technical and security data that may be processed by our service providers when the service is used, such as IP address, browser or device information, request logs, timestamps and error or security events.
  • Optional analytics data when Analytics consent is granted, such as website or app screen and page usage, selected product interaction and outcome events, and limited technical or device information ordinarily collected by Google Analytics, Firebase Analytics or PostHog. On the website, Google tags may also send limited consent-aware cookieless signals while optional analytics storage is denied; PostHog remains fully off until Analytics consent.
  • Optional advertising-measurement data. When Advertising consent is granted, advertising platforms may process campaign and click identifiers, page, action and conversion events, and browser, device and network information ordinarily processed by those services. Google tags may also send limited consent-aware cookieless measurement signals while advertising storage is denied. OpenAI advertising tags are blocked until Advertising consent is granted. We intentionally exclude account names, email addresses and internal business identifiers from browser advertising events.

Charge Roster does not sell personal data. Charge Roster is not designed to collect special-category personal data such as health information, precise location, contacts, photos, microphone recordings or SMS data. Please do not enter unnecessary sensitive personal information into free-text fields.

2. Why we use personal data

We process personal data to:

  • create and authenticate accounts;
  • provide workplace charger scheduling and reservation features;
  • manage workplace memberships, access and invitations;
  • operate, secure, troubleshoot and improve the service;
  • respond to support, privacy and deletion requests;
  • prevent misuse, fraud and security incidents; and
  • with consent where required, measure whether campaigns result in visits, sign-ups and meaningful Charge Roster actions and evaluate marketing-channel effectiveness; and
  • comply with legal obligations.

3. Legal bases

Where the EU General Data Protection Regulation (GDPR) applies, our legal bases are generally:

  • Performance of a contract when processing is needed to provide the Charge Roster service you request.
  • Legitimate interests in operating, securing and improving Charge Roster, provided those interests are not overridden by your rights and interests.
  • Legal obligations where we must retain or disclose information to comply with applicable law.
  • Consent where applicable law specifically requires it, including for optional website analytics storage and optional advertising measurement/storage. You may withdraw consent through Cookie settings at any time without affecting processing that occurred before withdrawal.

4. Service providers and data sharing

We use service providers to operate Charge Roster. They may process personal data only as necessary to provide their services to us or as otherwise permitted by their own legal obligations. Current core providers include:

  • Supabase for database, authentication and backend infrastructure;
  • Vercel for hosting and delivery of the Charge Roster website and web application; and
  • Google Tag Manager as the website tag-management and orchestration layer used to control and load approved measurement integrations according to consent;
  • PostHog, after Analytics consent, for product analytics and privacy-configured session replay in its EU-hosted environment. We use it to understand navigation, selected feature outcomes, activation funnels, usability friction and product defects;
  • Google Analytics through Google Consent Mode for website usage analytics, and Firebase Analytics for native iOS and Android app analytics where enabled;
  • Google Ads through Google Consent Mode for campaign and conversion measurement; advertising storage and user-data consent are enabled only when the Advertising choice is granted;
  • OpenAI / ChatGPT Ads, only when Advertising consent is granted, as an advertising-measurement provider; and
  • Google Play / Android platform services andApple App Store / iOS platform serviceswhen you obtain or use the native mobile application, subject to those platforms' own terms and privacy practices.

We may also disclose information when reasonably necessary to comply with law, protect users or the service, investigate abuse, or establish or defend legal claims. We do not share personal data with third parties for their independent advertising purposes.

Cookies, local storage, analytics and advertising choices

Charge Roster uses necessary first-party storage for core functions such as authentication, security and locale handling. This storage is not controlled by optional choices. We also store a small first-party, versioned preference containing independent analytics and advertising measurement choices. Both categories are off by default and can be granted or rejected separately.

Optional analytics cookies and storage remain off until you grant the website Analytics choice. Google tags may send limited, cookieless Consent Mode signals while storage is denied; PostHog remains fully off until Analytics consent. When enabled, Google Analytics and PostHog help us measure website page navigation and selected product interactions and outcomes. PostHog also provides privacy-configured session replay for diagnosing usability friction and product defects and measuring activation and feature usage. In the native iOS and Android app, the separate persistent mobile Analytics preference controls Firebase Analytics where it is enabled. We use analytics for measurement and product improvement. Advertising measurement, when separately enabled, helps attribute visits and meaningful actions to campaigns. The current implementation is for measurement and attribution, not creating Charge Roster user profiles for personalized ads; personalized advertising remains disabled. We do not claim that analytics data is anonymous, and measurement providers may receive device-level technical identifiers and information ordinarily collected by their services.

We intentionally restrict analytics and advertising-measurement events and properties. Charge Roster does not intentionally send email addresses or names; organization, customer or workplace names or IDs; Charge Roster account IDs; charger, reservation or waitlist IDs; invitation addresses, tokens or codes; one-time passwords (OTPs); free-text feedback or reservation notes; or billing-provider identifiers. PostHog replay is configured to mask displayed text and all form inputs; console and broad network-body or header recording are not enabled. Replay is pseudonymous, not anonymous.

Google click attribution is handled by Google auto-tagging, the Google tag, conversion linking and URL passthrough rather than a Charge Roster campaign-identifier store. Advertising storage and Google advertising user-data consent are enabled only after the Advertising choice is granted. OpenAI advertising tags are hard-blocked by consent until that choice is granted. Personalized advertising remains disabled.

On the website, you can grant or deny either optional category and later change your choices through Cookie settings in the footer. In the native mobile app, you can grant or deny consent and later change the persistent Analyticspreference in Profile. Optional cookies/storage and PostHog collection remain off until the relevant consent is granted; Google's Consent Mode may still send limited cookieless measurement signals while storage is denied. Changing settings affects future collection. Withdrawal does not automatically erase data already processed by third-party providers. Account deletion likewise does not automatically delete historical aggregate analytics, and Charge Roster does not add account IDs to analytics to link the two. Google and OpenAI may process measurement data internationally under safeguards applicable to their services. We do not state a specific analytics retention period here because it must be confirmed in the production analytics properties.

5. International transfers

Some service providers may process data in countries outside your home country or outside the European Economic Area. Where required, we rely on lawful transfer mechanisms and contractual safeguards provided by the relevant service provider, such as adequacy decisions or standard contractual clauses.

6. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy. Account and service data is normally retained while the account or relevant workplace relationship remains active. Security and operational logs may be retained for a limited period needed to maintain reliability, investigate incidents and prevent abuse.

When an account deletion request is verified, we aim to complete the deletion within 30 days. Some information may be retained for longer where required by law or reasonably necessary for security, fraud prevention, dispute resolution or legal claims. Where workplace records must remain for legitimate organizational purposes, we will remove or anonymize the deleted user's personal identifiers where reasonably possible.

7. Account and data deletion

You can request deletion of your Charge Roster account and associated personal data at any time. You can make this request in the Charge Roster native mobile app or through the public Charge Roster deletion page.

Deletion removes the active account identity, personal access relationships, push tokens and notifications, and personal product feedback. Historical reservations and invitation or audit actor references may be anonymized. Shared organization, site and commercial records remain with the organization, along with records required for legitimate legal, billing or security obligations. A sole organization owner must transfer ownership before deletion can proceed.

8. Product feedback

Authenticated product feedback may store your account identity, optional organization context, category, message and submission timestamp. We use this information to improve Charge Roster.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete or restrict processing of your personal data, object to certain processing, obtain a portable copy of data you provided, and withdraw consent where processing is based on consent.

To exercise these rights, contact support@chargeroster.com. We may need to verify your identity before acting on a request. If the GDPR applies, you also have the right to lodge a complaint with the data protection authority in your country of residence, work or the place of the alleged infringement.

10. Security

We use reasonable technical and organizational measures designed to protect personal data, including authenticated access, database access controls and encrypted network transport provided by our infrastructure services. No internet service can guarantee absolute security, so please protect access to your email account and report suspected misuse to us.

11. Children

Charge Roster is a workplace service and is not directed to children. We do not knowingly invite children to create Charge Roster workplace accounts. If you believe a child has provided personal data to us, contact us so we can review and delete it where appropriate.

12. Changes to this policy

We may update this Privacy Policy as Charge Roster develops or legal requirements change. We will publish the updated policy on this page and change the effective date when material updates are made.

13. Contact

Data controller and operator: Juho Pulkkinen
Service: Charge Roster
Website: https://www.chargeroster.com
Email: support@chargeroster.com

This English version is the authoritative legal text. Localized site routes may display the same English legal text until reviewed translations are published.