Privacy Policy

Last Updated: 19 January 2026

1. Introduction

Amp Assist, Lda. ("Amp Assist", "we", "us", or "our") is a private limited liability company incorporated under the laws of Portugal, with its registered office at Rua da Prata 80, 1st Floor, 1100-420 Lisbon, Portugal.

Amp Assist provides AI-powered Operations-as-a-Service solutions for electric vehicle ("EV") charging networks, including infrastructure monitoring, incident detection and resolution, and AI-enabled customer support services.

We are committed to protecting personal data and to processing such data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679 – "GDPR"), and all other applicable data protection and privacy laws, as well as the EU Artificial Intelligence Act ("AI Act").

This Privacy Policy explains how personal data is processed when you:

• visit or interact with our website;
• contact us or submit inquiries;
• interact with our AI-enabled customer support services (Amp Nexus); or
• use EV charging infrastructure supported by our operational monitoring and support services (Amp Pulse).

2. Our Role in Processing Personal Data

2.1 Website Data

For personal data collected through or in connection with our website, Amp Assist acts as the Data Controller, as it determines the purposes and means of the processing of such data.

2.2 Service-Related Data

When providing its operational services, including Amp Pulse and Amp Nexus, Amp Assist acts as a Data Processor, processing personal data on behalf of its business customers, such as Charge Point Operators and mobility service providers, which act as the Data Controllers.

Such processing is governed by the applicable Data Processing Agreement ("DPA"), concluded in accordance with Article 28 of the GDPR.

3. Data Controller Contact Details

Amp Assist, Lda.
Rua da Prata 80, 1st Floor
1100-420 Lisbon, Portugal

Email (privacy-related inquiries): privacy@amp-assist.com

4. Personal Data Collected via the Website

4.1 Categories of Personal Data

Contact Data — name and email address, collected when you submit a contact or inquiry form.

Technical and Usage Data — IP address, device type, browser information, access timestamps, and similar technical metadata automatically generated and logged by our hosting and infrastructure providers in connection with your use of the website.

4.2 Purposes and Legal Bases of Processing

4.3 Analytics

We use Cloudflare Web Analytics, a privacy-first analytics service that does not use cookies, does not track individual users, and does not collect personal data. Cloudflare Web Analytics operates entirely on the server side and is designed to respect visitor privacy while providing aggregated, anonymous usage statistics.

We do not use advertising, tracking, or third-party marketing cookies on our website.

5. Amp Assist Services Overview

Amp Pulse — an operational monitoring and analytics service that integrates with a customer's Charge Point Management System ("CSMS") to support the availability, performance, and reliability of EV charging infrastructure.

Amp Nexus — an AI-first, omni-channel customer support system designed to assist EV drivers and client staff through voice, chat, and email interactions.

6. Amp Pulse (Operational Monitoring)

6.1 Categories of Personal Data

• Charger and infrastructure identifiers
• Network and system metadata
• Charging session timestamps
• Energy consumption metrics
• Status, event, and error logs
• Physical location of charging stations
• Session identifiers, which may be indirectly linked to individual EV drivers

6.2 Purposes of Processing

• Monitoring the availability, performance, and reliability of EV charging infrastructure
• Detecting, diagnosing, and resolving operational incidents
• Supporting operational analytics and continuous service improvement

7. Amp Nexus (AI-Enabled Support Center)

7.1 Categories of Data

Identity and Contact Data — Name, Email Address, Phone Number

Communication Data — Call Audio Recordings, AI-generated Transcripts, Chat and Email Correspondence

Billing-Related Data — Invoice Inquiries, Payment Status Information. Amp Assist does not process or store payment card details.

7.2 AI Transparency and Human Oversight

• Users are clearly informed when they are interacting with an AI system
• Users are always given the option to speak with a human agent
• AI systems operate under predefined rules and continuous human supervision
• Any automated actions affecting charging infrastructure are strictly limited to technical interventions aimed at resolving operational incidents

Amp Assist's AI systems do not make decisions that produce legal effects or similarly significant effects on individuals.

8. Use of Artificial Intelligence

Amp Assist uses artificial intelligence ("AI") technologies to support the delivery of its services, in particular to automate and assist customer support interactions, analyse operational incidents, and support operational workflows related to EV charging infrastructure.

No personal data or customer communications are used by Amp Assist to train AI models.

The use of AI qualifies as limited-risk AI under the EU Artificial Intelligence Act and is subject to applicable transparency and human oversight requirements.

9. Sub-Processors

We share personal data with the following categories of service providers, all of which are bound by data processing agreements and process data exclusively within the EU:

• Cloud infrastructure — hosting, databases, storage, and logging
• AI / language models — conversational AI processing (real-time, no data retention)
• Voice, telephony & SMS — speech synthesis, speech recognition, SIP telephony, and SMS notifications
• Email delivery — transactional email
• Website analytics — privacy-preserving analytics (no cookies, no personal profiling)

A detailed list of sub-processors, including provider names and locations, is available upon request. Please contact us at privacy@amp-assist.com.

10. International Data Transfers

All of our data is processed inside the European Union. Our infrastructure is deployed in Google Cloud's EU regions.

In the event that a transfer outside the EU becomes necessary in the future (e.g., due to a sub-processor change), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or an adequacy decision, before any transfer occurs.

11. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it is processed. Website contact data is retained for the period necessary to respond to inquiries and comply with applicable legal obligations. Service-related data is retained in accordance with the instructions of the relevant Data Controller.

12. Security Measures

• Encryption of personal data in transit and at rest
• Firewalls and network security controls
• Role-Based Access Control (RBAC)
• Multi-Factor Authentication (MFA)
• Access restrictions based on a strict need-to-know principle
• Confidentiality obligations for all personnel

13. Data Subject Rights

Under the GDPR, data subjects have the following rights:

• Right of Access — to obtain confirmation and access to personal data being processed
• Right to Rectification — to request correction of inaccurate data
• Right to Erasure — to request deletion in certain circumstances
• Right to Restriction — to request limited processing in specific situations
• Right to Object — to object to processing based on legitimate interests
• Right to Withdraw Consent — where processing is based on consent
• Right to Lodge a Complaint — with a supervisory authority (in Portugal: Comissão Nacional de Proteção de Dados)

Requests may be submitted to privacy@amp-assist.com.

14. Changes to this Privacy Policy

Amp Assist may update this Privacy Policy from time to time. Any material changes will be made available on this page.