Movedi Mobility LLC Privacy Policy

1. What data do we collect?

When you use the Platform, we may collect and process the following types of data:

• 1.1. Registration data: first name, last name, e-mail address, phone number.
• 1.2. Vehicle data: vehicle registration number (required in order to identify the vehicle in the parking zone).
• 1.3. Geolocation data: GPS data from your device (only with your consent), so that we can find the nearest parking spaces for you.
• 1.4. Transaction and booking history: the date, time, and duration of bookings, the parking operator selected, and the amount paid.
• 1.5. Financial data: payment method and transaction status; if you save a card, the token issued by the payment provider, the masked card number (last four digits), the card type, and the expiry date. (Note: the Company does not store your full bank card number or CVV/CVC code on its own servers.)
• 1.6. Technical data: IP address, device type, operating system, application version, and log files.

2. Purposes of processing

We process your personal data for the following legitimate purposes:

• Providing the service: managing your account, booking parking spaces, and processing transactions, including charging a saved card for overtime and extensions (Terms of Use, clause 4.5).
• Improving the service: improving the functionality and the security of the application and the customer experience.
• Communication: booking confirmations, reminders, system notifications, and customer support.
• Legal obligations: meeting the financial and tax obligations imposed by the applicable legislation of Georgia.

3. Who do we share your data with?

The confidentiality of your data is protected. Data is transferred to third parties only in strictly defined cases:

3.1. Parking operators: only the data necessary to fulfil the booking is passed on (for example, vehicle registration number, booking time).

3.2. Payment Providers: For the purpose of processing payments, issuing refunds, and managing chargebacks, Movedi Mobility LLC shares necessary transaction data with authorized payment partners: TPay LLC (Flitt) and JSC Bank of Georgia (BOG).

3.3. State authorities: in the cases directly provided for by law (for example, on the basis of a court ruling or an official request from law-enforcement bodies).

3.4. Analytics and error monitoring: to keep the Platform working and to improve it, we use service providers that process data on our behalf and store it in the European Union:

• PostHog Inc. (web platform analytics): which pages you open and what you tap, along with technical data (errors, page load and network timings), linked to your account (account ID, name and e-mail address). Your visits to the web platform may also be recorded as a replay of the screen; in these recordings everything you type, and the personal details shown on screen (name, phone number, e-mail address, vehicle registration number, card digits), are hidden, and the card form is not recorded at all.
• Functional Software Inc. (Sentry; mobile application error monitoring): technical reports of errors and slow responses (device, operating system, application version, the error), linked only to your account ID — not to your name, phone number or e-mail address.

3.5. Advertising measurement (Meta): on the web platform (parking.movedi.app) we use the Meta Pixel and the Conversions API of Meta Platforms Ireland Ltd. to measure how our ads on Facebook and Instagram perform and to show Movedi ads to people who have visited the web platform. Meta receives: which pages you open and the steps you take (searching, viewing a car park, starting and paying for a booking, with the amount paid), your IP address, browser details and Meta's cookies (_fbp, _fbc), and, if you are signed in, your phone number, e-mail address, name and account ID, which are sent only in irreversibly hashed form (SHA-256). Meta may link this data to your Meta account and processes it under its own privacy policy (facebook.com/privacy/policy). You can manage the ads Meta shows you in your Meta account's ad preferences.

3.6. Advertising measurement (Google): on the web platform (parking.movedi.app) we use the Google Ads tag (gtag.js) of Google Ireland Ltd. to measure how our ads on Google perform and to show Movedi ads to people who have visited the web platform. Google receives: which pages you open and the steps you take (signing up, searching, viewing a car park, starting a booking, choosing how to pay and paying, with the amount paid), the ad click identifier in the address you arrived by, your IP address, browser details and Google's advertising cookies (such as _gcl_au and _gcl_aw), and, if you are signed in, your phone number and e-mail address, which are sent only in irreversibly hashed form (SHA-256). Google may link this data to your Google account and processes it under its own privacy policy (policies.google.com/privacy). You can manage the ads Google shows you at myadcenter.google.com.

4. Data retention period

• Personal data is stored only for as long as is necessary to achieve the purposes set out in this Policy, or for the mandatory period established by law (for example, financial and tax records are kept for 3-5 years).
• If your account is closed, your personal data is deleted or anonymised, except for data that must be retained by law.
• A saved card is kept until you remove it in the payment methods section of your account using the “Remove card” button; after that it is no longer charged.

5. Your rights

In accordance with the Law of Georgia on Personal Data Protection, you have the right to:

• Request information about the processing of your data;
• Request the correction, updating, or completion of inaccurate or incomplete data;
• Request that the processing of your data be stopped, or that your data be deleted or blocked (where this does not conflict with mandatory retention periods established by law);
• Withdraw the consent you have given, at any time.

How to delete your account:

• In the application or on the website, open the Account screen and choose “Delete account”, then confirm. Deletion cannot be undone.
• Deletion is available once you have no active booking or parking session and no unpaid amount (for example, an overtime charge).
• When your account is deleted, your name, phone number, and e-mail address are erased, your vehicles are removed, and you are signed out on every device. Booking and payment records are kept without your personal details, for as long as the law requires (see section 4). To remove saved cards, use the “Remove card” button in the payment methods section of your account before deleting it.
• You can also ask us to delete your account by writing to the e-mail address in section 8.

6. Security

We use modern technical and organisational security measures — including SSL encryption, access restrictions, and secured servers — to protect your data from unauthorised access, loss, or disclosure.

7. Changes to this Policy

The Company may update this Policy from time to time. Customers will be notified of changes through the application or the website.

8. Contact information

For questions about data protection, or to exercise your rights, you can contact us:

Movedi Mobility LLC

• Identification code: 404830279
• Registered address: 7 Mtatsminda Lane, Tbilisi, Georgia
• E-mail: help@movedi.app