Privacy Policy

Founding Partner Program Notice — This Platform is currently operated by an independent founder as part of its Founding Partner Program. Company registration details will be published here once the platform is incorporated. Until then, references to 'the Company' shall mean 'the Platform' operated by the Founder.

1. Introduction

EVChargeHub ("we", "our", "us") respects your privacy and is committed to protecting your personal data in accordance with the India Digital Personal Data Protection Act, 2023 (DPDP) and the Information Technology Act, 2000. This Privacy Policy explains how we collect, use, disclose, and safeguard information you provide when you use our website, Progressive Web App, and services (collectively, the "Platform").

2. Information We Collect

2.1 Personal Information

Name, email, phone number, password (hashed), date of birth (optional), profile photo.

2.2 Location Information

GPS coordinates, IP-derived location, home/office addresses — used to show nearby chargers and stopovers.

2.3 Vehicle Information

Make, model, battery capacity, range, connector type, licence plate (optional).

2.4 Charging & Session History

Session start/end, kWh delivered, cost, station visited, session ratings.

2.5 Business Information (for Partners)

Legal name, GSTIN, PAN, business address, bank details, authorized representative KYC documents.

2.6 Hotel & Booking Information

Room bookings, check-in/out dates, guest count.

2.7 Payment Information

We do not store your card details. Payments are processed by PCI-DSS compliant gateway (Stripe / Razorpay / others). We store only masked references and transaction IDs.

2.8 Cookies, Analytics & Marketing

See our separate Cookie Policy.

2.9 Device Permissions

Camera (QR check-in), GPS (nearby search), Notifications (charging alerts), Photo Library (review uploads).

2.10 User-Generated Content

Reviews, photos, chat messages, support interactions.

3. Purpose of Collection

• Provide charger discovery, route planning and reservation services
• Facilitate payments and issue GST invoices
• Personalise AI recommendations
• Prevent fraud and misuse
• Meet legal obligations
• Send transactional notifications
• Send marketing communications (only with explicit consent)

4. Legal Basis

We process your data on the basis of:

• Your consent (which you may withdraw at any time)
• Performance of a contract with you
• Legal obligations (tax, DPDP compliance)
• Our legitimate interests (security, fraud prevention)

5. Data Retention

• Active accounts: retained while your account is active
• Charging & transaction history: 7 years (Indian tax law)
• Marketing preferences: until you withdraw consent
• Deleted accounts: personal data purged within 30 days; anonymised aggregates may be retained

6. Third-Party Sharing

We share data only with:

• Payment processors (Stripe, Razorpay, Cashfree, PhonePe)
• Cloud infrastructure providers (AWS, Cloudflare)
• Business partners (limited to what's needed for the specific service you request)
• Government authorities when legally required

We never sell your personal data.

7. International Transfers

Data may be transferred to servers outside India (AWS regions). We use Standard Contractual Clauses and appropriate safeguards.

8. Security

• AES-256 encryption at rest
• TLS 1.3 encryption in transit
• Bcrypt-hashed passwords (never plaintext)
• Role-based access, audit logging, MFA for admin
• Regular penetration tests

9. Your Rights (DPDP §11–15)

• Access — download all data we hold about you
• Correction — request corrections
• Erasure — request deletion of your account and data
• Nomination — nominate another person to exercise rights on your behalf
• Grievance redressal — via our Grievance Officer

Exercise these rights from your Privacy Dashboard at /app/privacy or by emailing our Privacy Officer.

10. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect data from minors.

11. Changes

We may update this Privacy Policy from time to time; you will be notified in-app for material changes.

12. Contact

Data Protection / Privacy Officer: our Privacy Officer via the Contact page Grievance Officer: our Grievance Redressal channel (see Contact page)

<!-- TEST edit -->