Privacy Policy

Last updated: October 13, 2026. Applies to the ChargeTeam website and apps (Android, iPhone).

This English text is a courtesy translation of the French privacy policy. In case of any discrepancy, the French version prevails.

1. Data controller

SCCALE, publisher of ChargeTeam · 37 rue des Coteaux du Lyonnais, 69520 Grigny, France · SIRET 929 871 416 00012. Contact, including to exercise your rights: contact@chargeteam.pro · +33 1 83 75 57 06.

2. Data collected

Depending on how you use the service: identity (last name, first name, optional profile photo), contact details (email, phone), professional information and supporting documents (technicians: certifications, insurance, company registration extract, identity document), bank details (technician’s IBAN, stored encrypted, to pay your fees by transfer), information about your company (SIREN/SIRET, VAT number, head office address, public qualifications, see section 7), addresses and locations (see section 8), job data (reports, photos, measurements, signatures, messages exchanged with the team), questions asked to the Aixo assistant, calendars you connect yourself, and connection data (date, IP address, device type).

3. Purposes

Account management and authentication; offering missions to technicians according to their area, skills and availability; organizing, tracking and proving jobs; reports delivered to ordering parties; payment of jobs by ordering parties and payment of technicians’ fees; technical assistance (Aixo); service security; legal and accounting obligations. If you provide an email address when requesting a job, it is used to send you the confirmation containing your tracking link. No automated marketing: apart from messages related to your account and your jobs (login codes, confirmations, links, mission offers, reminders), no commercial communication is sent automatically.

4. Legal basis

Performance of the contract (account, missions, jobs, reports, payments and fee payouts); legal obligations (accounting, verification of the right to work on site); consent (push notifications, notification text messages, access to the phone’s location, profile photo, connected calendar, voice dictation); legitimate interest (service security, proof of presence on site, improvement of technical assistance).

5. Authentication and account security

Login uses a secure session cookie. You can also sign in with a one-time code sent by email or text message. Password reset links are valid for 1 hour and can be used once. Passwords are stored only in hashed form (bcrypt), never in clear text. Ordering-party accounts can enable two-factor authentication in “Account security”.

6. Payments (ordering parties)

Payment of jobs by ordering parties is processed by Stripe, on a payment page hosted by Stripe. We send it the amount and the job reference; we do not collect or store any bank card number.

7. Public sources and third-party APIs (server calls)

For sign-up by company name and for profile verification, our server queries public services: the Company Search API (recherche-entreprises.api.gouv.fr), the European Commission’s VIES service (intra-EU VAT), the Base Adresse Nationale (api-adresse.data.gouv.fr, geocoding of addresses and locations), the ADEME RGE API and the public holidays calendar (api.gouv.fr). The Qualifelec directory is consulted from a local copy. The day’s weather shown on a mission comes from Open-Meteo (coordinates of the mission site, with no identity). These calls are made by our server, without any cookie or session identifier.

Base maps. The maps in your space use OpenStreetMap tiles, loaded by your browser: their servers see your IP address and the area you view. The directions buttons (Google Maps, Waze, Apple Maps) open the app you choose with the site address, only when you tap them.

8. Location and saved positions

ChargeTeam performs no continuous or background location tracking. The phone’s location is read only after your permission, at the moment of an action you take. What is recorded:
• Technician’s base: the starting address you enter (geocoded) or the position read by the “My position” button in your profile. It is used to offer nearby missions and to calculate the distance to each mission (shown in the offers and used by the team to assign missions). Kept as long as the account exists.
• Travel plans: the places and dates of travel that you declare (entered or read by the phone), so that you can receive missions along your route. Kept as long as the account exists; you can delete them at any time.
• Departure for the site: when you tap “I’m leaving”, only the time is recorded,no position. An estimated arrival time is calculated from the distance between the technician’s base and the site (the technician can correct it); it is shown, with the technician’s first name, to the customer company of the mission and to the ChargeTeam team, until arrival. Legal basis: performance of the contract. Kept with the job.
• Arrival on site: when you tap “I’ve arrived”, the phone’s position and its distance to the site are recorded with the arrival time, as proof of presence that the team can consult. Optional: refusing does not prevent you from reporting your arrival. Kept with the job.
• The position shown on the “around me” map stays on your phone and is not sent to the server.
Legal basis: consent for access to the phone’s location; performance of the contract and legitimate interest (proof of the job) for recording it. All these positions are erased when the account is deleted (section 12).

9. Notifications

If you enable notifications, the identifier provided by your browser or phone is stored so that we can notify you (mission offers, follow-up of your jobs). In the Android or iPhone app, they go through Google Firebase Cloud Messaging (and Apple Push Notification service on iPhone), which receive the title and text of the notification. In a browser, they go through the browser’s service (Google, Mozilla, Apple or Microsoft) in encrypted form. You can turn them off at any time in your phone or browser settings. Text messages (login codes, mission offers if you have accepted them, account alerts) and WhatsApp messages exchanged with the team go through Twilio. No commercial text messages.

iPhone app. If you turn on sign-in with Face ID, recognition happens only on your phone: no biometric data is sent to us. The app keeps a sign-in token tied to this device in the iPhone keychain; we keep only a hash of it, valid for 30 days (90 days at most), revoked when you sign out or delete your account. If the app crashes or hits an error, a technical report (error type, screen, app and iOS version) is sent to us without being linked to your account and without anything you typed; it is kept for 90 days at most.

10. Aixo technical assistant and artificial intelligence

Your agreement. The assistant, dictation, voice playback, report-writing help and the analysis of the attachments (photos, PDFs, voice notes) that you send by WhatsApp for a report do not send anything to an artificial intelligence service without your explicit agreement, requested in the app before the first submission: an “AI assistant” sheet names the providers and the data concerned. The agreement is recorded on your account with its date and the version of the text, is asked again if the text changes, and you can withdraw it at any time in Profile, AI assistant section. Without agreement, these features are disabled and your WhatsApp attachments remain readable by the team only; the rest of the app works normally. Over WhatsApp, Aixo answers on the substance only for accounts that have given this agreement.

Without your AI agreement, two internal processing operations take place, on the basis of the legitimate interest of SCCALE (quality of reports and assistance): the team’s preparation, with OpenAI, of a draft report from text messages (SMS, WhatsApp) and call summaries that cite a mission reference, a draft that is always reviewed by a person; and the training of the assistant from validated reports, after removal of known contact details (emails, phone numbers, addresses, license plates, site and customer names), whose text, once anonymised, is formatted by the open DeepSeek model at the hosting providers named below. You can object by writing to contact@chargeteam.pro.

SCCALE management tool. The team also uses internal artificial intelligence assistants in its management tool (tracking of missions and of the network, preparation of messages and reports, always reviewed by a person). For their task, they may send to the same provider, OpenAI, mission information and identity and contact data of technicians and customers (names, companies, areas, sometimes emails or phone numbers). Legal basis: legitimate interest of SCCALE (organization of the service). You can object at the same address.

Aixo, ChargeTeam’s technical assistant, is hosted on our server. To write its answers, it sends to an artificial intelligence model: your question (typed or dictated text) with the latest messages of the conversation, and the technical context of the mission (type of job, make, model and serial number of the charging station, city, reason for the job stripped of emails, phone numbers, addresses and company names, previous visits to the station). Your name, email and phone number are not sent. However, the text you type, your photos and your voice are sent as they are: they may contain personal data (a name, a face, a license plate, an address), so please avoid them. For photo analysis and for searching manufacturers’ documentation, a hashed account identifier, which gives neither your name nor your contact details, is sent to OpenAI for abuse prevention.

Provider of the answers: OpenAI (OpenAI Ireland Ltd for the European Economic Area, and its affiliates), called directly: written answers, photo analysis, search in manufacturers’ public documentation, reading of WhatsApp attachments and draft reports. OpenAI acts as a processor under its data processing addendum (Article 28 GDPR), which is part of its terms of service. Data residency in Europe has been requested from OpenAI and has not yet been granted: your data may therefore be processed in the United States. This transfer outside the European Union is governed by the European Commission’s standard contractual clauses provided for in that addendum. OpenAI keeps its abuse-monitoring logs for 30 days at most, unless required by law.

Anonymised training texts: they are formatted by the open DeepSeek model, run, through OpenRouter (OpenRouter, Inc., United States), by hosting providers established outside China, chosen from a closed list: DeepInfra, Inc., Together Computer, Inc., Fireworks AI, Inc., Parasail, Inc., Crusoe Energy Systems LLC, CoreWeave, Inc., BaseTen Labs, Inc., DigitalOcean, LLC and Microsoft Corporation (Azure), in the United States, and Nebius B.V., in the Netherlands. OpenRouter requires them, on every request, to keep nothing and to use nothing for training; these transfers outside the European Union are covered by the European Commission’s standard contractual clauses provided for in OpenRouter’s data processing agreement. DeepSeek, the Chinese company that designed the model, receives no data. History: until October 3, 2026, the assistant’s requests went through OpenRouter (United States) to DeepSeek and MiniMax models (China); from October 3 to 12, 2026, OpenAI alone processed the portal’s requests; since October 12, 2026, the organisation described above applies. Aixo keeps neither the question nor the answer; ChargeTeam keeps the history of your exchanges with the assistant in your space, until the account is deleted. Technical errors of the assistant are tracked by Sentry (servers in Germany). The assistant’s suggestions must be checked before any intervention.

Dictation and voice playback (optional): after your action, the server sends to ElevenLabs (United States, outside the European Union) either your recording, to transcribe it, or the text of the answer, to read it aloud. This transfer outside the European Union is covered by the European Commission’s standard contractual clauses provided for in ElevenLabs’ data processing agreement. ChargeTeam does not keep the audio files. See ElevenLabs’ privacy policy.

10 bis. Ranking and evaluation of technicians

To choose to whom a mission is offered, the team relies on a ranking of the certified technicians, calculated from five weighted criteria: proximity to the declared base (30%), experience assessed on this type of mission (25%), job success (20%), punctuality (15%) and autonomy (10%). The last three come from internal evaluations recorded by the team after each mission, based on facts, for the last twelve months; below five evaluations, a neutral value applies. Declining an offer does not enter the calculation. The ranking is an aid: a person checks the route and the time slot and chooses to whom the mission is offered; no decision is taken solely by automated processing. Purpose: assigning missions; legal basis: performance of the contract. You can ask for your evaluations and contest an evaluation at contact@chargeteam.pro.

10 ter. Help assistant (ChargeTeam AI Assistant)

In your space, the ChargeTeam AI Assistant (Help page) answers your questions about how to use ChargeTeam from our help articles. It is an artificial intelligence: it says so as soon as it opens, it takes no action on your account or your missions, and its answers may contain errors. It is separate from the Aixo technical assistant and does not use the “AI assistant” agreement of section 10: nothing is sent until you submit a question.

What is sent, with each question submitted, to OpenAI (same provider, same safeguards and same possible transfer to the United States as in section 10): the text of your question and of the latest exchanges of the conversation, after automatic masking of recognized email addresses and phone numbers, the language of the screen, and whether you are a technician or not (for the tone of the answer). Your name, email, phone number and account identifier are not sent: do not write personal data in your questions. OpenAI keeps its abuse-monitoring logs for 30 days at most, unless required by law.

What ChargeTeam keeps. The text of the conversation is not saved: it disappears when you leave the page. We only keep a log with no text and no account identifier (date, account role, language, topic of the question, whether an answer was found, whether it was rated useful, model cost), for 90 days, to improve the help and limit spending. Legal basis: legitimate interest of SCCALE (support for users of the service).

Talking to the team. If you choose to, a pre-filled message with your questions is displayed: you read and edit it, and it is sent by email to the ChargeTeam team only if you tick the agreement box. The email address of your account is attached so that the team can reply to you. This message is handled like any message sent to the team. Your rights: section 13.

11. Recipients, hosting and processors

The data is accessible to authorized teams of SCCALE, whose internal management tool is hosted on the same server. The ordering party of a mission sees the technician’s first name, last name and photo after the mission is accepted, then the report; if they have connected their own tools (webhook, API), this mission information is sent to them. No resale of data.

Processors:
• OVH SAS (Roubaix, France): hosting of the website, the apps, the database and the files (photos, supporting documents, reports).
• Cloudflare: domain names; for the chargeteam.pro showcase site and the pages opened by some links received by text message or email, also network relay and protection (it then sees the IP address and the content of the pages).
• Google (Google Workspace): sending of transactional emails from contact@chargeteam.pro; Google Firebase Cloud Messaging: app notifications.
• Apple: iPhone app notifications (Apple Push Notification service).
• Twilio (United States): text messages and WhatsApp messages (WhatsApp being provided by Meta).
• Stripe: payment by ordering parties.
• OpenAI (OpenAI Ireland Ltd; possible processing in the United States, under standard contractual clauses): artificial intelligence models of the assistant (sections 10 and 10 ter).
• OpenRouter (OpenRouter, Inc., United States; transfer outside the European Union under standard contractual clauses) and the hosting providers of the DeepSeek model, established outside China, chosen from a closed list (section 10): formatting of the anonymised training texts, without retention or training.
• ElevenLabs (United States; transfer outside the European Union under standard contractual clauses): dictation and voice playback (section 10).
• Sentry (Germany): tracking of the assistant’s technical errors.
• Telegram: internal alerts sent to the team (for example a technician file awaiting validation, with the technician’s name); outside the European Union.
• Lemlist (France, European Union): email sending tool, processor for the people met at the Flotauto 2026 trade show (section 15 bis), from whom it receives only the contact details needed to respond to their need.
• Calendars: if you connect a Google or Microsoft calendar, or an iCal link, we read its time slots and titles so as not to offer you a mission when you are busy; they remain private.
The public services in section 7 receive only the information needed for the request.

12. Retention periods and account deletion

• Account, profile, supporting documents and positions: as long as the account is used. An account with no activity (login, mission received or requested) for 24 months is anonymized as in a deletion.
• Technician’s identity document: file deleted 30 days after its verification; only the date and author of the verification are kept.
• Technician applications that were rejected or left without follow-up: anonymized 12 months after the last decision.
• Account deletion: from the app (Profile or My company, “Delete my account”) or from the Delete my account page. The account is deactivated immediately; name, email, phone number, photo, IBAN, addresses, positions, supporting documents, assistant history and notification tokens are erased within 30 days. Missions and job reports are kept without your name (“Anonymized technician” or “Anonymized member”), because they are part of the customers’ charging-station history; accounting records (payments, payouts) are kept for 10 years (Article L.123-22 of the French Commercial Code). Electronic signatures are an exception (below).
• Electronic signatures and acceptance reports: kept for 5 years after signing, including after account deletion, as proof (name and capacity of the signatory, signature image, document fingerprint). The IP address and browser recorded with the signature are anonymized 12 months after signing.
• Job requests (public form, handled in the SCCALE management tool): IP address anonymized after 30 days; closed requests deleted 12 months after closing.
• Outreach (section 15): register of refusals 3 years after the refusal; contact details of a professional from the directory with no follow-up 3 years after the last contact.
• People met at the trade show (section 15 bis): 36 months from the meeting.
• Help assistant (section 10 ter): conversation text not kept; log with no text and no account identifier 90 days.
• Application technical logs: 14 days.
• Login history (IP address, browser type): 12 months; only the date is kept afterwards.

13. Your rights

Under the GDPR, you have the right of access, rectification, erasure, restriction, objection, portability and withdrawal of your consent. To exercise them: contact@chargeteam.pro. Auxence is the data protection contact: he receives and follows up these requests at this same address. To delete your account: Delete my account. You may also lodge a complaint with the CNIL (www.cnil.fr) or, if you live in Belgium, with the Data Protection Authority (www.autoriteprotectiondonnees.be).

14. Cookies

This site does not use tracking or advertising cookies, and the apps contain no audience measurement tool or advertising identifier. Only strictly necessary technical cookies (session, security, display preferences) are set.

15. Outreach and invitations to technicians

What we do. SCCALE, which operates ChargeTeam, may contact EV-charging technicians to invite them to activate their ChargeTeam space or to join the network. This concerns: technicians whose record already exists with us (sign-up, missions carried out with SCCALE, technician files kept by SCCALE) and professionals listed in the public Qualifelec directory. Data used: last name, first name, professional contact details (email, phone number), area of intervention and declared qualifications. On simple request, we will tell you where your contact details come from.

How. Each message is written, reviewed and sent one by one by a member of the team: professional email, phone call, or text message if you have agreed to receive text messages. No automatic sending, no automatic follow-up. The invitation link is personal: it can be used only once and expires after 7 days.

Legal basis. Legitimate interest of SCCALE in developing its network of independent technicians, for a message related to your professional activity; consent for text messages.

Refusing, simply. You can refuse at any time, without giving a reason and free of charge: reply “STOP” or “no” to the message, say so during the call, or write to contact@chargeteam.pro. Your reply is read by a person: your refusal is recorded within 3 working days at the latest, and always before any new sending. Refusing the invitation does not delete your account: to do that, use the Delete my account page.

Register of refusals and retention. So that we no longer contact you, we keep a record of your refusal: an internal identifier, the date, the channel and the reason if you give one, without your contact details. This record is kept for 3 years from the refusal, then deleted. The contact details of a professional from the directory who did not follow up are deleted 3 years after the last contact.

Contact. contact@chargeteam.pro, or SCCALE, 37 rue des Coteaux du Lyonnais, 69520 Grigny. You may lodge a complaint with the CNIL (www.cnil.fr) or, if you live in Belgium, with the Data Protection Authority (www.autoriteprotectiondonnees.be).

15 bis. People met at the Flotauto 2026 trade show

What we do. At the Flotauto 2026 trade show, the ChargeTeam team noted the professional contact details of people met on site: last name, first name, company, job title, phone, email, type of organisation, needs expressed, level of interest and a team note. They are used only to get back to the person about the need they expressed, and they are told so at the meeting.

Who receives them. Authorized SCCALE staff and Lemlist (France, European Union), an email sending tool acting as processor: it is sent the email, first name, last name, company, job title, phone, type of organisation, needs and level of interest. The team note, the photo of the business card and the name of the person who entered the record are not sent to it. ChargeTeam only adds the contact details to a campaign: an email is sent only when a member of the team launches that campaign in Lemlist themselves.

Legal basis and duration. SCCALE’s legitimate interest in responding to a professional’s need. Retention: 36 months from the meeting.

Object, at any time. Without reason and free of charge, by writing to contact@chargeteam.pro. Your objection is kept so that you are not contacted again; your details are then removed from the Lemlist campaign and your address is unsubscribed there. Your other rights: section 13.