Privacy Policy.

Massive Mobility Private Limited ("Massive Charging", "we", "us", or "our") operates the Massive Charging EV charging network, mobile application, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services. Please read this policy carefully. By using our Services, you consent to the practices described herein.

1. Information We Collect

Information you provide directly:

• Name, mobile number, and email address when you register an account
• Vehicle registration number and EV model details
• Billing address and GST number (for business accounts)
• Communications you send us via support channels

Information collected automatically:

• Charging session data — station ID, start/end time, energy dispensed (kWh), session duration
• Location data — GPS coordinates at the time of initiating a charging session
• Device information — device type, OS version, app version, IP address
• Usage data — pages visited, features used, in-app actions
• Log data — error reports, crash logs, and diagnostic information

Information from third parties:

• Payment confirmation data from UPI payment processors and banking partners
• Identity verification data from KYC partners (where applicable)
• Map and location data from mapping service providers

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Massive Charging network and Services
• Process charging sessions and associated payments
• Send transaction confirmations, invoices, and session summaries
• Provide customer support and resolve disputes
• Send service notifications, maintenance alerts, and safety communications
• Personalise your experience and provide location-relevant station recommendations
• Analyse usage patterns to optimise network performance and station placement
• Comply with legal obligations, including GST filing and regulatory reporting
• Prevent fraud, abuse, and unauthorised access
• Send marketing communications where you have opted in

3. UPI & Payment Data

Massive Charging uses UPI (Unified Payments Interface) as the primary payment method. When you initiate a payment:

• We do not store your UPI PIN, bank account credentials, or card details on our servers
• Payment transactions are processed by NPCI-regulated payment aggregators
• We receive and store transaction reference IDs, amounts, timestamps, and payment status
• Wallet balances (if applicable) are maintained on our secure payment infrastructure

All payment data is handled in accordance with applicable RBI guidelines and PCI-DSS standards.

4. Cookies & Tracking

Our website and app use cookies and similar tracking technologies to:

• Maintain session state and keep you logged in
• Understand how users navigate our website
• Measure the effectiveness of our marketing
• Improve website performance and user experience

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

5. Sharing with Third Parties

We do not sell your personal information. We may share your data with:

• Payment processors — to complete transactions and issue refunds
• Cloud infrastructure providers — to host and operate our platform securely
• Analytics providers — to understand usage patterns (data is anonymised or pseudonymised)
• SMS and email service providers — to send transactional and service communications
• Regulatory authorities — where required by law, court order, or government directive
• Business partners — site hosts and CPO partners, limited to session data relevant to their station

All third-party partners are bound by contractual obligations to protect your data and use it only for the specified purpose.

6. Data Retention

We retain your personal data for as long as your account is active or as required to provide the Services. Specific retention periods:

• Account data — retained for the duration of your account plus 3 years after closure
• Transaction and session records — retained for 7 years to comply with GST and financial regulations
• Support communications — retained for 2 years from the date of resolution
• Marketing consent records — retained until consent is withdrawn

You may request deletion of your account and associated data by contacting us. Some data may be retained beyond your request where required by law.

7. Your Rights

Under applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (once notified), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request erasure of your personal data (subject to legal obligations)
• Withdraw consent for marketing communications at any time
• Raise a grievance with our Data Protection Officer

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Data Security

We implement industry-standard technical and organisational measures to protect your personal data, including:

• TLS encryption for all data transmitted between your device and our servers
• Encrypted storage for sensitive personal data at rest
• Role-based access controls limiting internal access to personal data
• Regular security audits and vulnerability assessments

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the app or email, and update the "Last updated" date at the top of this page. Continued use of our Services after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related queries, data requests, or to reach our Grievance Officer:

• Email: [email protected]
• Postal address: Massive Mobility Private Limited, India
• Grievance Officer: Available at massivecharging.com/contact

We aim to acknowledge all privacy requests within 48 hours and resolve them within 30 days.