Effective Date: 30 April 2026 | Last Updated: 30 April 2026 1. Data Controller This Privacy Policy explains how PULSEV Şarj Çözümleri A.Ş. (“PULSEV”, “we”, “us”) collects, uses, stores, and protects user data through the Site Şarj mobile application (the “App”), in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”). Data Controller PULSEV Şarj Çözümleri A.Ş. Address İvedik OSB, Ankara, Türkiye Contact privacy@pulsev.com.tr Web https://www.pulsev.com.tr 2. Personal Data We Collect Site Şarj only collects the minimum data necessary for charging service management: 2.1. Identity and Contact Information Full name Email address Mobile phone number Residence (site / block / apartment) information 2.2. Vehicle Information Vehicle license plate (optional) Vehicle make and model (optional) 2.3. Charging Usage Data Charge card identifier Charging session start and end times Energy consumed (kWh) Charging station identifier Credit top-up and spending history 2.4. Technical Data Device model and operating system version App version Anonymous crash reports Important: Site Şarj does not collect the user’s real-time GPS location. Charging stations are at fixed locations. 3. Purposes and Legal Basis for Processing Purpose Legal Basis Provision and management of charging services Performance of contract Credit top-up and dues allocation Performance of contract Reporting usage data to site administration Legitimate interest User support services Performance of contract Compliance with legal obligations Legal obligation (Tax Procedure Law, etc.) App performance improvement Legitimate interest 4. Data Storage Location Your personal data is stored and processed on servers located within the Republic of Türkiye. Your data is not transferred abroad. 5. Data Sharing Your personal data may be shared with: Site Administration: Only the relevant site management can view charging usage and dues information of their own residents. Domestic Service Providers: Hosting infrastructure provider in Türkiye, SMS gateway service. Legal Authorities: EPDK, Revenue Administration, courts, and other authorized public bodies as required by law. 6. Data Retention Active usage data: Duration of active account Charging history and billing records: 5 years (per Tax Procedure Law) After account deletion: Non-mandatory data deleted within 30 days 7. Your Rights (KVKK Art. 11) Users have the right to: Know whether their personal data is being processed Request information about processing Learn the purpose and whether it is used in accordance Request correction of incomplete or inaccurate data Request deletion or destruction within legal conditions Know third parties to whom data has been transferred Object to outcomes resulting from automated processing Claim compensation for damages arising from unlawful processing To exercise these rights, please contact: privacy@pulsev.com.tr 8. Account Deletion Users may delete their accounts via “Profile → Delete My Account” within the app or by sending a request to privacy@pulsev.com.tr. Deletion requests are processed within 30 days. 9. Children's Privacy Site Şarj is not intended for users under 18. We do not knowingly collect data from individuals under 18. 10. Security Data is transmitted with TLS 1.2+ encryption and stored on infrastructure compliant with international standards. PULSEV is undergoing ISO/IEC 27001 certification. 11. Changes This Privacy Policy may be updated from time to time. Material changes will be communicated through in-app notifications. 12. Contact PULSEV Şarj Çözümleri A.Ş. İvedik OSB, Ankara, Türkiye Email: privacy@pulsev.com.tr Web: https://www.pulsev.com.tr Drag widget here

Effective Date: 30 April 2026 | Last Updated: 30 April 2026 1. Data Controller This Privacy Policy explains how PULSEV Şarj Çözümleri A.Ş. (“PULSEV”, “we”, “us”) collects, uses, stores, and protects user data through the EVRoad mobile application (the “App”), in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”). Data Controller PULSEV Şarj Çözümleri A.Ş. Address İvedik OSB, Ankara, Türkiye Contact privacy@pulsev.com.tr Web https://www.pulsev.com.tr 2. Personal Data We Collect EVRoad only collects the minimum data necessary for charging service management: 2.1. Identity and Contact Information Full name Email address Mobile phone number Residence (site / block / apartment) information 2.2. Vehicle Information Vehicle license plate (optional) Vehicle make and model (optional) 2.3. Charging Usage Data Charge card identifier Charging session start and end times Energy consumed (kWh) Charging station identifier Credit top-up and spending history 2.4. Technical Data Device model and operating system version App version Anonymous crash reports Important: EVRoad does not collect the user’s real-time GPS location. Charging stations are at fixed locations. 3. Purposes and Legal Basis for Processing Purpose Legal Basis Provision and management of charging services Performance of contract Credit top-up and dues allocation Performance of contract Reporting usage data to site administration Legitimate interest User support services Performance of contract Compliance with legal obligations Legal obligation (Tax Procedure Law, etc.) App performance improvement Legitimate interest 4. Data Storage Location Your personal data is stored and processed on servers located within the Republic of Türkiye. Your data is not transferred abroad. 5. Data Sharing Your personal data may be shared with: Site Administration: Only the relevant site management can view charging usage and dues information of their own residents. Domestic Service Providers: Hosting infrastructure provider in Türkiye, SMS gateway service. Legal Authorities: EPDK, Revenue Administration, courts, and other authorized public bodies as required by law. 6. Data Retention Active usage data: Duration of active account Charging history and billing records: 5 years (per Tax Procedure Law) After account deletion: Non-mandatory data deleted within 30 days 7. Your Rights (KVKK Art. 11) Users have the right to: Know whether their personal data is being processed Request information about processing Learn the purpose and whether it is used in accordance Request correction of incomplete or inaccurate data Request deletion or destruction within legal conditions Know third parties to whom data has been transferred Object to outcomes resulting from automated processing Claim compensation for damages arising from unlawful processing To exercise these rights, please contact: privacy@pulsev.com.tr 8. Account Deletion Users may delete their accounts via “Profile → Delete My Account” within the app or by sending a request to privacy@pulsev.com.tr. Deletion requests are processed within 30 days. 9. Children's Privacy EVRoad is not intended for users under 18. We do not knowingly collect data from individuals under 18. 10. Security Data is transmitted with TLS 1.2+ encryption and stored on infrastructure compliant with international standards. PULSEV is undergoing ISO/IEC 27001 certification. 11. Changes This Privacy Policy may be updated from time to time. Material changes will be communicated through in-app notifications. 12. Contact PULSEV Şarj Çözümleri A.Ş. İvedik OSB, Ankara, Türkiye Email: privacy@pulsev.com.tr Web: https://www.pulsev.com.tr Drag widget here

Your privacy is very important for Pulsev Charge Solutions. Please spend a moment to read Privacy Policy before using a UmayEvim app. Application Usage: This Policy becomes effective upon the user’s download and use of the application. Use of the appication is at user’s own risk. Developer is not liable to user for any damages, including compensatory, special, incidental, exemplary, punitive, or consequential damages, connected with or resulting from this agreement or user’s use of this application. User agress to defend and indemnify Developer and hold Developer harmless from all claims, losses, damages, complaints, or expenses connected with or resulting from user’s business operations. Usage of permissions used in application: INTERNET: For enabling network communication and accessing online resources. ACCESS_NETWORK_STATE: To check the current network connectivity status (Wi-Fi). CAMERA: To allow the app to access the device camera for scanning QR. ACCESS_WIFI_STATE: To get information about the current Wi-Fi connection and network details. CHANGE_WIFI_MULTICAST_STATE: To allow the app to receive multicast packets on Wi-Fi, useful for device discovery or communication. Does the application collects precise real time location: No, application is not collecting realtime location. Can personal data shared with third parties: No, We are not collecting any personal data. As well as we are not sharing any information with third parties. Children App usage: This application is not specially designed for childrens. Parent’s gudiance / restriction required from user end whenever require. Security: We are not collecting any personal data outside your device. All your personal data remain in your device. So there is no issue related to secuity. Still use this application as your own risk. Policy Changes: This Privacy Policy may be updated from time to time for any reason. We are not collecting any user’s any details so we are not able to personally update any users. We will update in play store details if there is any change in Privacy Policy. Contact Us: If you have any questions regarding privacy policy or application, please contact us via email at : bogachan.olmez@pulsev.com.tr

Charging Network Management Platform (CSMS) Last updated: 26 June 2026 PulsEV's Charging Network Management Platform ("the Platform"; formerly referred to as Public CMS) is a B2B, OCPP-based charging station management system (CSMS) provided to charge point operators ("Operators"). The Platform is white-label: it is published and operated under each Operator's own brand. Any mobile or web apps you may see in app stores are showcase examples; production deployments run under the Operator's brand. 1. Roles For end-user/driver personal data processed through an Operator's deployment, the Operator is the data controller and PulsEV acts as the data processor on the Operator's behalf and instructions. For Operator account and business-contact data, PulsEV is the data controller. 2. Data we process - Operator account and business contact data (name, title, e-mail, phone, company). - Charging station data (station/connector IDs, status, OCPP telemetry, energy and session records). - Transaction and billing records. - End-user data (e.g. driver accounts, RFID, payment references) - only on the Operator's instructions and under the Operator's own privacy policy. - Technical/log data (IP, device, audit logs). 3. Purposes and legal basis (KVKK Art.5/6, GDPR Art.6) Operating and maintaining the Platform; billing and support; security and fraud prevention; legal and regulatory compliance (incl. EPDK and GİB reporting). Legal bases: performance of contract, legitimate interest, and legal obligation. 4. Sharing and sub-processors Data may be shared with infrastructure providers strictly as needed and under confidentiality: hosting, payment, SMS/e-mail and analytics providers. 5. International transfer Where data is transferred abroad, KVKK Art.9 / GDPR Chapter V safeguards apply. 6. Retention Data is kept for the term of the Operator agreement and the periods required by law, then deleted, destroyed or anonymized. 7. Your rights End users should contact the relevant Operator (the data controller). For Platform or business data, contact PulsEV at contact@pulsev.com.tr. 8. Contact PulsEV Charging Solutions - contact@pulsev.com.tr - 0850 304 0557.