Legal
Privacy Policy
Last Updated: August 1, 2026
Effective Date: August 1, 2026
This Privacy Policy describes how ChargeChime ("ChargeChime," "we," "our," or "us"), a service operated by Aspireworks, Inc., collects, uses, discloses, retains, and protects personal information when you visit our website (chargechime.com), use our application (app.chargechime.com), or interact with our vehicle monitoring services (collectively, the "Services").
This policy applies to residents of all U.S. states and Canadian provinces. Where specific state laws grant additional rights (including California, Virginia, Colorado, Connecticut, and others), those rights are described in the jurisdiction-specific sections below.
1. Scope & Applicability
ChargeChime is a convenience vehicle monitoring service for connected vehicles in the United States and Canada. It is not an emergency, security, safety, or life-protection service. This policy covers personal information collected through our website, application, APIs, and any communications with us.
2. Categories of Personal Information We Collect
We collect the following categories of personal information, mapped to California Civil Code §1798.140 categories:
| Category | Examples | Source |
|---|---|---|
| A. Identifiers | Name, email address, phone number, account ID, IP address | You, Clerk (auth provider) |
| B. Personal information (Cal. Civ. Code §1798.80) | Name, phone number, billing address | You, Stripe |
| D. Commercial information | Subscription plan, payment history, billing records | Stripe |
| F. Internet/network activity | Browser type, device type, pages visited, authentication logs, IP address | Automatic collection |
| G. Geolocation data | We do NOT collect precise geolocation. Approximate location (city/region) may be inferred from IP address. | Automatic (IP-based only) |
| K. Inferences | Vehicle charging patterns, mileage trends, tire pressure history | Derived from vehicle data |
| Vehicle telemetry (not a CA category) | Battery/fuel level, charging status, lock status, tire pressure, odometer, VIN, make/model/year | SmartCar (with your authorization) |
3. Sensitive Personal Information
We do not intentionally collect sensitive personal information as defined under CCPA/CPRA (e.g., Social Security numbers, driver's license numbers, precise geolocation, racial/ethnic origin, religious beliefs, genetic data, biometric data, health information, sexual orientation, or contents of mail/email/text messages unless sent directly to us).
If we inadvertently receive sensitive personal information, we will delete it promptly upon discovery.
4. How We Collect Personal Information
- Directly from you: Account registration, contact forms, support requests, notification preferences.
- From SmartCar: Vehicle telemetry data, only after you explicitly authorize access through SmartCar's OAuth flow. You choose which permissions to grant.
- From Stripe: Payment processing metadata (we never receive or store full card numbers).
- From Clerk: Authentication events, session metadata.
- Automatically: IP address, browser/device information, pages visited, authentication timestamps. We use essential cookies only (see our Cookie Policy).
5. Purposes for Collection & Use
| Purpose | Data Categories Used |
|---|---|
| Provide and operate the monitoring service | Identifiers, vehicle telemetry, notification preferences |
| Deliver alerts and notifications (email, SMS, push) | Identifiers, vehicle telemetry, inferences |
| Process payments and manage subscriptions | Identifiers, commercial information |
| Authenticate users and prevent unauthorized access | Identifiers, internet/network activity |
| Provide customer support | Identifiers, vehicle telemetry, commercial information |
| Improve service reliability and fix bugs | Internet/network activity, error logs |
| Prevent fraud and abuse | Identifiers, internet/network activity |
| Comply with legal obligations | All categories as required |
6. Data Sharing & Disclosure
We do NOT sell your personal information.
We do NOT share your personal information for cross-context behavioral advertising.
We disclose personal information only to the following categories of service providers, each bound by contractual obligations to use your data solely to perform services on our behalf:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| SmartCar | Vehicle API connectivity | OAuth tokens, vehicle requests |
| Stripe | Payment processing | Name, email, billing info |
| Clerk | Authentication | Name, email, session data |
| Twilio | SMS delivery | Phone number, message content |
| Resend | Email delivery | Email address, message content |
| Cloudflare | Infrastructure, CDN, Workers | All data (encrypted at rest and in transit) |
We may also disclose personal information when required by law, subpoena, court order, or government request, or to protect our rights, safety, or property.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 90 days after deletion request |
| Vehicle telemetry | Rolling 12 months of history while account is active; deleted within 30 days of account closure |
| Notification history | 90 days |
| Authentication/security logs | 12 months |
| Billing records | 7 years (legal/tax requirement) |
| Contact form submissions | Until resolved + 12 months |
8. Your Privacy Rights
Depending on your state of residence, you may have some or all of the following rights regarding your personal information:
Right to Know / Access
You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, purposes, and third parties with whom we share it.
Right to Delete
You may request deletion of your personal information. We will delete your data and direct our service providers to do the same, subject to legal exceptions (e.g., tax/billing records we are required to retain, fraud prevention, exercising legal claims).
Right to Correct
You may request correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing
We do not sell or share your personal information. Therefore, no opt-out is necessary. If this changes in the future, we will provide a "Do Not Sell or Share My Personal Information" link and honor Global Privacy Control (GPC) signals.
Right to Limit Use of Sensitive Personal Information
We do not collect sensitive personal information beyond what is necessary to provide our Services.
Right to Data Portability
You may request your personal information in a structured, commonly used, machine-readable format (JSON or CSV).
Right to Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights. You will not receive different pricing, different quality of service, or be denied service for making a privacy request.
Right to Appeal (Virginia, Colorado, Connecticut residents)
If we deny your privacy request, you have the right to appeal. We will respond to your appeal within 45 days. If the appeal is denied, we will provide instructions for contacting your state's Attorney General.
9. How to Submit a Privacy Request
You can exercise any privacy right using these methods:
- Email: [email protected]
- In-App: Account → Privacy → "Submit Data Request"
- Web Form: chargechime.com/contact (select "Privacy Request" as subject)
- Mail:
Aspireworks, Inc. DBA ChargeChime
Attn: Privacy
PO Box 530202
Henderson, NV 89053-0202
Verification Process
To protect your information, we must verify your identity before processing access, deletion, or correction requests. Verification may include:
- Confirming ownership of the email address associated with your account
- Confirming account-specific information (e.g., vehicle make/model, subscription date)
- For requests submitted by authorized agents: written authorization signed by the consumer, plus verification of both agent and consumer identity
We will respond to verified requests within 45 days. If we need additional time, we will notify you of a one-time extension of up to 45 additional days and explain the reason.
Authorized Agents
You may designate an authorized agent to submit privacy requests on your behalf. The agent must provide a signed written authorization from you. We may still verify your identity directly unless the agent provides a valid power of attorney under your state's law.
10. How to Delete Your Data
To request complete deletion of your data:
- Option A (In-App): Sign in → Account → Privacy → "Delete My Data" → Confirm. This initiates an automated deletion that completes within 30 days.
- Option B (Email): Send an email to [email protected] with subject line "Data Deletion Request" and include your account email. We will verify your identity and process within 45 days.
- Option C (SmartCar): You can also revoke ChargeChime's access to your vehicle at any time via SmartCar's permission management. This immediately stops vehicle data collection but does not delete previously collected data — submit a separate deletion request for that.
Upon deletion: your account, vehicle data, notification history, and preferences are permanently removed. The following are retained per legal requirements:
- Billing/tax records: 7 years (IRS requirement)
- Fraud prevention logs: 12 months
- Legal compliance records: as required by applicable law
11. Cookies & Tracking Technologies
ChargeChime uses only essential/strictly necessary cookies required for authentication and session management. We do not use:
- Advertising or marketing cookies
- Third-party analytics cookies (no Google Analytics, no Facebook Pixel)
- Cross-site tracking technologies
- Fingerprinting techniques
We honor Global Privacy Control (GPC) browser signals. Because we do not sell or share data, no additional action is triggered by GPC, but we respect the signal as an expression of your privacy preferences.
For full details, see our Cookie Policy.
12. Data Security
We implement commercially reasonable technical, administrative, and physical safeguards, including:
- Encryption at rest (AES-256) and in transit (TLS 1.3)
- SmartCar OAuth tokens encrypted with AES-256-GCM using dedicated encryption keys
- Authentication via Clerk with multi-factor authentication support
- Infrastructure hosted on Cloudflare's global network with DDoS protection
- Rate limiting and abuse prevention
- Regular security reviews
No system is 100% secure. If we discover a data breach affecting your personal information, we will notify you in accordance with applicable state breach notification laws (typically within 72 hours of discovery).
13. Children's Privacy
ChargeChime is not directed to, and does not knowingly collect personal information from, children under 16. If we learn we have collected personal information from a child under 16, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at [email protected].
14. International Data Transfers
ChargeChime is based in the United States. If you access our Services from outside the U.S., your information may be transferred to, stored, and processed in the United States. By using our Services, you consent to this transfer. We rely on Cloudflare's global infrastructure, which may process data in multiple countries, all subject to appropriate data protection safeguards.
15. California-Specific Disclosures (CCPA/CPRA)
In addition to the rights described above, California residents are entitled to the following disclosures:
- Categories of PI collected in the preceding 12 months: Identifiers, personal information per Cal. Civ. Code §1798.80, commercial information, internet/network activity, inferences, and vehicle telemetry.
- Categories of PI sold: None. We have not sold personal information in the preceding 12 months.
- Categories of PI shared for cross-context behavioral advertising: None.
- Categories of PI disclosed for a business purpose: Identifiers and commercial information (to Stripe for payment processing), identifiers (to Clerk for authentication, to Twilio/Resend for notification delivery), vehicle telemetry (to/from SmartCar for vehicle connectivity).
- "Shine the Light" (Cal. Civ. Code §1798.83): We do not disclose personal information to third parties for their direct marketing purposes.
- Financial incentives: We do not offer financial incentives tied to the collection or deletion of personal information.
16. Virginia, Colorado, Connecticut & Other State Disclosures
If you are a resident of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, or any other state with a comprehensive consumer privacy law, you have the rights described in Section 8 above, including:
- Right to access, correct, and delete your personal information
- Right to data portability
- Right to opt-out of targeted advertising (we do not engage in targeted advertising)
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to opt-out of profiling (we do not engage in profiling that produces legal or similarly significant effects)
- Right to appeal a denied request within 45 days, with instructions for escalating to your state Attorney General if the appeal is denied
17. Canadian Residents (PIPEDA)
Canadian residents have the right to access, correct, and request deletion of personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation. Contact [email protected] to exercise these rights. If you are unsatisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.
18. Do Not Track / Global Privacy Control
We honor the Global Privacy Control (GPC) signal. When we detect a GPC signal from your browser, we treat it as a valid opt-out of sale/sharing request (though we do not currently sell or share data). We also respect browser-level "Do Not Track" signals, though no industry standard for DNT compliance currently exists.
19. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you via email (for material changes affecting your rights)
- Provide a 30-day notice period before changes take effect
Continued use of our Services after the effective date of changes constitutes acceptance of the updated policy.
20. Contact Us
For privacy-related inquiries, data requests, or concerns:
- Email: [email protected]
- Web: chargechime.com/contact
- Mail:
Aspireworks, Inc. DBA ChargeChime
Attn: Privacy
PO Box 530202
Henderson, NV 89053-0202
We aim to respond to all privacy inquiries within 10 business days and to fulfill verified consumer requests within 45 calendar days.