Privacy Policy

We collect information necessary to provide our EV charging wallet services: Personal Information: Full name, mobile number, email address, date of birth (for KYC). Vehicle Information: Vehicle registration number, EV make/model, connector type. Location Data: GPS location (with your permission) to show nearby charging stations. Payment Data: UPI VPA, saved card last 4 digits (full card data is processed by PCI-DSS compliant payment gateways). Usage Data: Charging session history, energy consumed, payment history, app usage logs. Device Data: Device ID, OS version, app version, push notification token.

We use your data to: • Operate and improve the PlugOne Wallet and Platform • Process payments and generate GST invoices • Send session notifications, billing alerts, and marketing communications (with consent) • Comply with legal and regulatory obligations under Indian law • Detect and prevent fraud and unauthorized access • Improve our charging network recommendation algorithms • Share anonymized, aggregated data with charging network partners for network planning

We share your data with: charging network partners: Session initiation data (user ID, connector) needed to authenticate and start charging. Payment Gateways: Razorpay, PhonePe — for payment processing under their respective privacy policies. KYC Partners: Digio / Karza Technologies for identity verification as required by RBI guidelines. Government Authorities: When required by law, court order, or regulatory mandate. We do NOT sell your personal data to third parties for advertising purposes.

Transaction records: 8 years (as required by Indian financial regulations). Account data: Duration of account + 3 years after closure. Location data: 90 days rolling window. Session logs: 2 years. You may request deletion of non-legally-mandated data by emailing privacy@plugone.in.

Under India's Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to: • Access a copy of your personal data • Correct inaccurate personal data • Erase personal data (subject to legal retention requirements) • Object to processing for marketing purposes • Data portability (receive your data in machine-readable format) • Nominate a person to exercise rights on your behalf To exercise these rights, email: privacy@plugone.in with subject "Data Rights Request".

We implement industry-standard security measures including: • 256-bit SSL/TLS encryption for all data in transit • AES-256 encryption for sensitive data at rest • Multi-factor authentication for account access • PCI-DSS compliant payment processing (cards never stored on our servers) • Regular security audits and penetration testing • Strict access controls — only authorized employees access personal data

Our website uses cookies and similar tracking technologies for: • Essential functionality (login sessions, cart/wallet state) • Analytics (Google Analytics — anonymized) • Performance optimization You can manage cookie preferences in your browser settings. Disabling cookies may affect Platform functionality. See our Cookie Policy for details.

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us immediately at privacy@plugone.in and we will take appropriate action.

We may update this Privacy Policy periodically. We will notify you via email and in-app notification at least 7 days before material changes take effect. Your continued use of the Platform after notification constitutes acceptance.

Data Protection Officer / Grievance Officer: Name: Compliance Team, PlugOne Technologies Pvt. Ltd. Email: privacy@plugone.in | grievance@plugone.in Phone: +91 98119 19891 Address: B2-502, Ashadeep Rainbow, Jeerota, Jagatpura, Jaipur, Rajasthan 303905 Grievances will be acknowledged within 48 hours and resolved within 30 days.