Privacy Policy
BOXIV Inc. (the “Company”) establishes the following privacy policy (this “Policy”) with respect to the handling of customers' personal information in the services the Company provides to its customers (collectively, the “Services”), and to the handling of personal information by the Company generally.
Article 1 Personal Information
1. “Personal information” means the information defined in Article 2, Paragraph 1 of the Act on the Protection of Personal Information.
2. “Personal-related information” means personal-related information as defined in that Act, and includes cookies, advertising identifiers, IP addresses, browser information, location information, browsing history and the like.
3. “Personal data” is the collective term for personal information and personal-related information.
4. “Vehicle-acquired data” means the following information that the PORTAL app obtains from vehicle manufacturers' APIs.
- Profile information
- Vehicle information (live data / service history and appointments / driving records / upgrade information / nearest Supercharger / ownership / location information, and the like)
- Vehicle location information (precise location / approximate location)
- Vehicle command history (adding a driver, live camera, unlocking / starting / remote starting, scheduling software updates, and the like)
- Vehicle charging management information (charging history, amounts billed, charging location, charging start and end times, and the like)
Article 2 Methods of Collecting Personal Information
The Company acquires customer information lawfully and fairly in the situations set out below.
[Common]
- On member registration and login: name, address, telephone number, date of birth, email address, corporate number and the like
- On login through a third-party service: social IDs, access tokens, profile images and the like
- When responding to inquiries: the content of the inquiry, attached files and the like
[BOXIV shop]
- On the purchase of goods and payment: order details, delivery address, credit card details, bank account details and the like
[BOXIV SHARE]
- On booking, registering for and using car sharing: driver's license details, vehicle usage history, distance driven and location, photographs of the interior and exterior of the vehicle and the like
[BOXIV Lightning]
- On listing a vehicle and on a contract of sale: vehicle registration details (registration number, identification number, vehicle inspection details, OBD data and others), driver's license details, bank account details
[PORTAL]
- Use of the vehicle information acquisition feature: the full set of “vehicle-acquired data” in Article 1, Paragraph 4
Article 3 Purposes of Use of Personal Information
1. Processing orders, dispatching goods and providing after-sales support for BOXIV shop
2. Managing vehicle bookings, pickup and return for BOXIV SHARE, and checking driving history
3. Matching buyers and sellers of vehicles on BOXIV Lightning, and supporting performance of contracts of sale
4. Providing EV information, displaying vehicle status, rankings and proposing charging plans on PORTAL
5. Processing payments, managing billing and payment, verifying identity and preventing fraudulent use
6. Improving the quality of the Services as a whole, developing new features and marketing
7. Research, planning and development of EV-related products, expansion of the features of existing services, creation of new services and personalisation measures, using data that has been anonymized or reduced to statistics
8. Joint research and joint service development with partners
9. Responding to breaches of laws, regulations or the terms, and resolving disputes
Article 4 Provision to Third Parties and Outsourcing
1. The Company shall not provide personal information to third parties, except where laws and regulations so provide or the individual has consented.
2. The Company may use, provide or share vehicle-acquired data and usage data that has been anonymized or reduced to statistics so that the Company, its business partners or research institutions can carry out activities such as developing EV parts and accessories, enhancing app features, planning and developing new services, and analyzing the market.
3. Where the Company outsources payment processing, delivery, identity verification (KYC) and the like, it shall exercise appropriate supervision over the contractor.
Article 5 Security Control Measures
1. The Company shall hold API keys, OAuth tokens, credit card details and the like in encrypted form, and shall encrypt communication channels as well.
2. The Company shall implement least-privilege access rights, log auditing and measures to prevent unauthorized access.
3. Where fraudulent use comes to light, the Company shall take prompt measures, such as suspending the account and reporting to the supervisory authority.
Article 6 Use by Minors
Customers who are minors should use the Services only after obtaining the consent of a parent or legal representative.
Where the Company confirms that a minor is using the Services, it shall deem that such consent has been given.
Article 7 Handling in the Event of a Change to or Suspension of an API
Where the vehicle information acquisition feature of PORTAL becomes unavailable because of a change in the specifications of a vehicle manufacturer's API, the suspension of its provision or the like, the Company shall not be liable for any loss arising from this, but shall make good-faith efforts to restore it.
Article 8 Correction, Deletion and Suspension of Use
Customers may request the correction, deletion or suspension of use of their retained personal data by the procedure prescribed by the Company.
The Company shall respond within a reasonable period, in accordance with laws and regulations.
Article 9 Changes to this Privacy Policy
The Company shall revise this Policy from time to time. Material changes shall be announced on the website, by in-app notice or by similar means, and shall take effect at the time of posting.
Article 10 Disclosure
Where an individual requests disclosure of retained personal data or of records of provision to a third party (meaning those provided for in Article 33, Paragraph 5 of the Act on the Protection of Personal Information), the Company shall, having confirmed that the request comes from the individual concerned, disclose them to that individual without delay. However, where disclosure would fall under any of the following, the Company may withhold all or part of it, and where it decides not to disclose, it shall notify the individual to that effect without delay.
- Where there is a risk of harm to the life, body, property or other rights and interests of the individual or of a third party
- Where there is a risk of serious impediment to the proper conduct of the Company's business
- Where disclosure would violate other laws or regulations
- With respect to records of provision to a third party, where any of the following applies
(1) Records where disclosing whether such a record exists would risk harm to the life, body or property of the individual or of a third party
(2) Records where disclosing whether such a record exists would risk encouraging or inducing an unlawful or improper act
(3) Records where disclosing whether such a record exists would risk harm to the security of the nation, damage to the relationship of trust with another country or an international organization, or disadvantage in negotiations with another country or an international organization
(4) Records where disclosing whether such a record exists would risk impeding the prevention, suppression or investigation of crime or the maintenance of public safety and order Records where disclosing whether such a record exists would risk impeding the prevention, suppression or investigation of crime or the maintenance of public safety and order
Article 11 Contact Us
For inquiries about the handling of personal information, please contact the customer support desk below.
Established June 1, 2023
Updated April 18, 2025
Updated June 20, 2025