Privacy Policy

This Privacy Policy describes how Saivalabs ("we", "us", or "our") collects, uses, and safeguards information about you when you use our website, mobile applications, or EV charging network (collectively, the "Services"). By using our Services, you agree to the practices described in this Policy.

1. Information We Collect

We collect information that you provide directly to us and information generated automatically when you use our Services.

Personal Identifiers

When you create an account or contact us, we may collect your full name, email address, mobile phone number, and billing or correspondence address.

Transaction Data

We record details of every charging session you initiate, including the station used, session duration, energy delivered (kWh), payment amount, and payment method type. Full card or bank account numbers are never stored by us.

Usage Data

We automatically collect certain technical information when you visit our website or use our app, including your IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps of access.

Location Data

With your permission, we collect approximate location data (city or district level) solely to present nearby charging stations in our station finder feature. We do not track your precise GPS position continuously or store historical location trails.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and provide access to our charging network.
• To process payments and send you electronic receipts and session summaries.
• To send transactional and service communications such as session confirmations, maintenance alerts, and security notifications. We will not send marketing or promotional communications without your explicit consent.
• To analyse aggregate usage patterns to improve station availability, charging speeds, and app features.
• To detect, investigate, and prevent fraudulent transactions and other unauthorised or illegal activities.
• To comply with applicable laws, regulations, and legal processes.

3. Cookies & Tracking Technologies

Essential Cookies

We use strictly necessary cookies to enable core website functions such as user authentication, session management, and security. These cookies cannot be disabled without impairing the functionality of our Services.

Analytics Cookies

With your consent, we use analytics cookies to understand how visitors interact with our website (for example, which pages are visited most frequently and how long users remain on each page). This helps us prioritise improvements. Analytics data is aggregated and not used to identify individual users.

No Advertising Cookies

We do not use any third-party advertising or retargeting cookies. Your browsing behaviour on our platform is never shared with ad networks.

Managing Your Preferences

You may accept or decline non-essential cookies via the cookie preference banner displayed on your first visit, or at any time through our cookie settings page. You may also configure your browser to block or delete cookies, though this may affect certain features of our Services.

4. Sharing of Information

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your information only in the following limited circumstances:

Payment Processors

Payment transactions are processed by Razorpay, which is PCI-DSS Level 1 compliant. We share only the data necessary to complete the transaction. Razorpay's handling of your payment data is governed by their own privacy policy.

Map Services

Our station finder uses OpenStreetMap tile data for map rendering. No personal data is transmitted to OpenStreetMap servers; map tiles are loaded by your browser as anonymous requests.

Legal Requirements

We may disclose your information if required to do so by a court order, government authority, or applicable law, or where we believe disclosure is necessary to protect the rights, property, or safety of Saivalabs, our users, or the public.

5. Data Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• All data in transit between your device and our servers is encrypted using TLS 1.2 or higher.
• Access to personal data is restricted on a need-to-know basis and protected by multi-factor authentication.
• We conduct regular internal security reviews and periodic third-party vulnerability assessments.
• In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and report to the relevant authorities in accordance with CERT-In guidelines within the prescribed timeframe.

While we take every reasonable precaution, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your personal data only for as long as is necessary for the purposes described in this Policy or as required by law:

• Account data is retained for the duration your account is active, and for a further period of two years after account closure to handle any outstanding disputes or legal claims.
• Transaction records (invoices, payment logs, session history) are retained for seven years in compliance with Goods and Services Tax (GST) record-keeping obligations under the CGST Act, 2017.
• Deletion requests will be honoured within 30 days, subject to mandatory retention requirements as described above. You will be notified if any data cannot be deleted due to legal obligations.

7. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to any legal retention obligations.
• Right to object: You may object to our processing of your data where we rely on legitimate interests as the legal basis.
• Right to data portability: Where technically feasible, you may request your data in a commonly used, machine-readable format.

To exercise any of these rights, please contact us by email at mrvkraj@outlook.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

8. Third-Party Links

Our website and app may contain links to third-party websites or services that are not operated by us. These links are provided for your convenience only. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.

9. Children's Privacy

Our Services are intended for use by adults and are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe that we have inadvertently collected information from a person under 18, please contact us immediately at mrvkraj@outlook.com and we will take prompt steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Services we offer. When we make material changes, we will notify registered users by email at least 30 days before the changes take effect, and we will update the "Last updated" date at the top of this page. Your continued use of our Services after the effective date of the revised Policy constitutes your acceptance of the changes. If you do not agree to the updated Policy, you should discontinue use of our Services and may request account deletion as described in Section 7.

11. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: mrvkraj@outlook.com
• Address: Saivalabs, Sholinganallur IT Corridor, Chennai, Tamil Nadu 600119, India

We aim to respond to all privacy-related enquiries within 5 business days.