This explains what we collect, why, who we share it with, and what you can do about it.
Pitvolt Ghana Limited is the data controller. Incorporated in the Republic of Ghana on 23 May 2026, company number CS108270526. Registered office: House No. 171, Labawuleshi Street, East Legon, Accra. Digital address: GA-376-8324, Ayawaso West.
Data questions: customer.service@pitvolt.com.
This policy forms part of our Terms of Service and is governed by the Data Protection Act 2012 (Act 843) of Ghana.
The short version
- We collect what we need to start your charge, take your payment, pay our hosts, and stop fraud.
- We never see or store your full card number. Card payments are handled by our payment provider.
- We do not sell your personal data. Not to anyone, not ever.
- Hosts see that a session happened and that it was paid. They don't get your contact details.
- You can ask us for your data, correct it, or object if we get it wrong.
1What we collect
If you're a driver
Data
Examples
Account
Name, email - only if you create an account. You can charge without one.
Phone number
Required when you pay with Mobile Money - your wallet is your phone number, so we need it to take the payment and send automatic refunds. We keep it with the payment record, and it creates a driver record so your next charge recognises you. Pay another way without creating an account, and we don't need your phone number.
Payment
Mobile Money wallet number; a tokenised card reference from our payment provider. Never the full card number.
Session
Site, charger ID, start and stop times, kWh delivered, tariff applied, amount paid and refunded.
Location
Approximate location, only when you enable it, to show nearby chargers. Turn it off and the app still works - you just search manually.
Vehicle
Make and model, only if you tell us, to filter for connector compatibility.
Device
App version, device type, crash and diagnostic logs.
Support
What you send us when you report a fault or ask for a refund.
If you're a host
Everything relevant above, plus: your business name and details, site name and location, charger identity and configuration, settlement and earnings records, and your TIN and tax details where we need them.
Payout details work differently. Your payout destination - your Mobile Money number or bank account - is sent directly to our payment provider to set up a payout recipient. We store only an opaque reference and a masked form (for example ***1234), never your full account number.
What we don't collect
We don't collect your full card number, CVV, or PIN - those go straight to our payment provider and never touch our systems. We don't track you across other apps or websites. We don't buy data about you from brokers.
2Why we collect it, and our lawful basis under Act 843
Why
What it covers
Basis
To run your charge
Starting sessions, metering, showing status and receipts.
Performance of a contract
To take payment and settle hosts
Processing payments through our payment provider, calculating settlements, sending payouts.
Performance of a contract
To prevent fraud and abuse
Detecting stolen cards, fake refund claims, meter manipulation.
Our legitimate interest
To support you
Answering questions, investigating faults, processing refunds.
Performance of a contract
To meet legal obligations
Tax records, anti-money-laundering, regulatory requests.
Legal obligation
To improve the platform
Understanding where chargers are needed, fixing bugs, planning capacity.
Our legitimate interest
To send you updates
Product news, new sites near you.
Your consent - opt in, unsubscribe any time
3Who we share it with
- Our payment provider - to process your payment and refunds. Our payment provider is licensed by the Bank of Ghana and certified to PCI-DSS Level 1 and ISO 27001, and handles your card and Mobile Money details under its own privacy policy.
- Mobile Money operators - MTN, Telecel, and AirtelTigo, where you pay from their wallets.
- The host of the charger you used - they see the session (time, kWh, amount, whether it was paid) because it's their equipment and their revenue. They do not get your name, phone number, or email.
- Our infrastructure and service providers - hosting, error monitoring, customer support tooling. They process on our instructions only.
- Regulators, law enforcement, or courts - where we're legally required, or to establish or defend legal claims.
- A buyer - if the business is sold or restructured, data may transfer, subject to this policy.
We do not sell your personal data. We don't sell it, rent it, or trade it. Not to advertisers, not to data brokers, not to anyone.
4Anonymised and aggregated data
We use anonymised, aggregated data - which cannot identify you - to understand network performance, plan where chargers should go, and report on the market. For example: "the average session at our Accra sites is 15 kWh."
We may share that kind of insight with partners, investors, or regulators. It says nothing about you individually.
5Where your data lives
Our systems are hosted on cloud infrastructure on Hetzner or DigitalOcean.
6How long we keep it
Data
Kept for
Account
While your account is open, then after 12 months we erase all data.
Session and payment records
6 years - tax and accounting law requires this.
Host settlement and tax records
6 years.
AML / KYC records (hosts)
At least 5 years after the account closes - required by Bank of Ghana AML/CFT rules, which also bind our payment provider.
Support conversations
2 years.
Location
Not stored - used in the moment to show nearby chargers, then discarded.
Marketing consent
Until you withdraw it.
Anonymised session data
Indefinitely - it isn't personal data any more.
7How we protect it
Encryption in transit and at rest. Access limited to staff who need it, and logged. Card data never touches our systems - it's tokenised by our payment provider, which is PCI-DSS Level 1. Host auth keys are secrets, and we'll tell you to rotate one if we think it's exposed.
8Your rights under Act 843
You can:
- Access - ask for a copy of the data we hold on you.
- Correct - have inaccurate data fixed.
- Object - to processing based on our legitimate interest, including fraud profiling.
- Withdraw consent - for marketing, any time, with no effect on your service.
- Ask us to delete data, except what we're legally required to keep (session, payment, and AML records, mostly).
- Complain - to us first, then to the Data Protection Commission of Ghana.
Email customer.service@pitvolt.com. We respond within 30 days. It's free unless a request is manifestly excessive or repetitive.
9Children
Pitvolt is not for anyone under 18. We don't knowingly collect data from children. If you think we have, tell us at customer.service@pitvolt.com and we'll delete it.
10Cookies
We currently use only essential cookies - for signing in, security, and payment processing. No analytics, no advertising, no cross-site tracking. Because we don't set any non-essential cookies, there's no cookie banner to click.
Cookie type
What it's for
How long it lasts
Session / security
Keeps you signed in and protects against cross-site request forgery.
Session
Payment
Set by our payment provider during checkout to process your payment securely and prevent fraud.
Set and managed by our payment provider under its own policy.
If we introduce non-essential cookies later - for example analytics to understand which pages people find useful - we'll update this policy and ask for your consent before setting them.
11Changes
We'll post any changes here with a new effective date. For material changes we'll email account holders at least 30 days before they take effect.