Privacy Policy
Last updated: 4 July 2026
Wise EV ("Wise EV," "we," "us," or "our") operates wise-ev.me and the Wise EV mobile apps (together, the "Service"). This Policy explains what personal data we collect, why, how long we keep it, and the rights you have under the EU General Data Protection Regulation ("GDPR") and the UK GDPR / Data Protection Act 2018.
The Service is directed at users in the European Union, the European Economic Area, and the United Kingdom. If you are accessing the Service from elsewhere, please note we have not assessed compliance with your local law.
1. Who is responsible for your data (the "controller")
Wise EV Naurunkatu 5 A Helsinki, Finland
Contact: wise.ev.me@gmail.com
We have not appointed a statutory Data Protection Officer, as this is not currently required for our size and type of processing. The contact above is responsible for handling privacy questions and requests.
2. What personal data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address; if you sign in with Google, your Google account email, name, and profile photo (only the scopes you approve) | You, or Google (with your consent) |
| Location (country only) | Country, inferred from your IP address at sign-up and login | Automatically, via IP lookup |
| Usage data | Pages/screens viewed, features used, device type, app version, crash logs | Automatically, via Google Analytics 4 (Google LLC) |
| Marketing preferences | Newsletter subscription status, email open/click activity, support correspondence | You; newsletters sent via Customer.io, support correspondence via our Gmail (Google LLC) mailbox |
| Content you provide | Saved comparisons, shortlisted vehicles, cost calculator inputs | You |
We do not collect payment card numbers, government ID numbers, or precise GPS location. We do not use the full IP address for any purpose beyond deriving your country at the moment of sign-up/login; the IP address is not stored in association with your profile after that lookup completes.
Under EU and UK case law (including the CJEU's Breyer ruling), an IP address is personal data even when only used transiently to derive a country, so it is included in this Policy and treated with the same care as directly identifying data.
3. Why we process your data and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and maintaining your account, authenticating you via email or Google Sign-In | Performance of a contract (Art. 6(1)(b)) |
| Showing content and pricing relevant to your country | Performance of a contract / legitimate interest (Art. 6(1)(b)/(f)) |
| Understanding how the Service is used, fixing bugs, improving features (analytics) | Legitimate interest (Art. 6(1)(f)), or consent where required for cookies (see §5) |
| Sending you newsletters or product updates | Consent (Art. 6(1)(a)) — you can withdraw at any time |
| Preventing fraud and abuse, enforcing our Terms | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations (e.g. responding to a lawful authority request) | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interest, we have weighed our interest against your rights and freedoms and concluded our processing does not override them. You can object at any time — see §7.
4. Signing in with Google
If you choose "Sign in with Google," Google authenticates you and shares only the profile fields you approve (typically name, email, profile photo) with us. We use this solely to create and secure your account. We do not request access to your Gmail, Google Drive, contacts, or any other Google service, and we do not sell or use this data for advertising. You can revoke Wise EV's access at any time from your Google Account permissions page. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
5. Cookies and similar technologies
We use cookies and comparable technologies (local storage, SDK identifiers in the apps) for:
- Strictly necessary purposes (keeping you signed in, load balancing, security) — no consent required.
- Analytics (understanding aggregate usage) — under the UK's Data (Use and Access) Act 2025 amendments to PECR, first-party statistical-improvement cookies may qualify for a limited exemption; where the exemption does not apply, or for EU/EEA visitors, we ask for your consent via the cookie banner before these are set.
- Marketing/newsletter tracking (e.g. email open/click tracking via Customer.io) — consent-based, and you can opt out via the unsubscribe link in any email.
You can withdraw or change cookie consent at any time through the cookie settings link in the site footer, or your browser/device settings. Rejecting non-essential cookies will not affect your ability to use core features of the Service.
6. Who we share your data with
We share personal data only with service providers who process it on our behalf under contract (data processing agreements), and only to the extent needed to run the Service:
- Google LLC — authentication (Sign in with Google) and web/app analytics (Google Analytics 4).
- GoDaddy — website and application hosting.
- Customer.io — sending newsletters and transactional emails, and tracking opens/clicks/unsubscribes.
- Google LLC (Gmail) — direct support correspondence from wise.ev.me@gmail.com.
We do not sell your personal data. We do not share your data with data brokers or use it for third-party advertising.
We may disclose data if required by law, to protect our rights, or in connection with a merger, acquisition, or asset sale (subject to confidentiality commitments and, where required, notice to you).
B2B/dealer partners: if you interact with a participating dealership through the Service (e.g. requesting a quote), the minimum information needed to fulfil that request is shared with that dealer under its own privacy obligations, which we require to be GDPR-compliant.
7. International data transfers
Our processors — Google LLC (Sign-In, Analytics, Gmail), GoDaddy (hosting), and Customer.io (email) — are US-based companies and may process data outside the EEA/UK, primarily in the United States. Where this happens, we rely on one or both of the following safeguards:
- An applicable adequacy decision (e.g. the EU–US Data Privacy Framework and the UK Extension to it, for certified US recipients). Note: this framework is subject to an ongoing legal challenge before the CJEU; we monitor its status and will adjust our transfer mechanism if it is invalidated.
- Standard Contractual Clauses (SCCs) approved by the European Commission, together with supplementary measures, where no adequacy decision applies.
You can request a copy of the relevant safeguard by contacting wise.ev.me@gmail.com.
8. How long we keep your data
| Data | Retention |
|---|---|
| Account data (email, Google profile fields) | For as long as your account is active, plus up to 12 months after deletion to handle disputes, then deleted or anonymized |
| Country (derived from IP) | Retained only as a profile attribute; the raw IP is not retained |
| Usage/analytics data | Up to 26 months, in line with standard analytics retention practice |
| Marketing/newsletter data | Until you unsubscribe or request deletion |
| Records required for legal/tax compliance | As required by applicable Finnish and EU law |
9. Your rights
Under the GDPR and UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), subject to legal exceptions.
- Restrict processing in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interest or for direct marketing.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
- Lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman; UK residents may also contact the Information Commissioner's Office (ICO).
To exercise any of these rights, email wise.ev.me@gmail.com. We will respond within one month, as required by law.
10. Security
We use industry-standard technical and organizational measures, including encryption in transit, access controls, and regular review of our third-party processors' security practices. No system is completely secure; if we become aware of a breach affecting your data, we will notify you and the relevant supervisory authority as required by law.
11. Automated decision-making
We do not use your personal data for any automated decision-making, including profiling, that produces legal or similarly significant effects on you. Vehicle comparisons, cost estimates, and recommendations shown in the Service are informational tools you control — they do not automatically determine any outcome for you.
12. Children
The Service is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact wise.ev.me@gmail.com and we will delete it.
13. Changes to this Policy
We may update this Policy as the Service evolves. We will post the updated version here with a new "Last updated" date, and where changes are material, we will notify you by email or in-app notice before they take effect.
14. Contact us
Wise EV Naurunkatu 5 A, Helsinki, Finland wise.ev.me@gmail.com