Privacy Policy

1. Who we are

WattSwap is a brand of Novosynth Industries Private Limited (“WattSwap,” “we,” “our,” or “us”), based in Bengaluru, India. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our products and services (together, the “Services”).

This single policy applies across our ecosystem, including:

• WattSwap.ai — consumer mobile app for finding stations, charging, payments, vehicles, hosting, and related EV energy features (Google Play package: ai.wattswap)
• WattSwap FieldForce — partner and field installer mobile app for CRM, installs, inventory, earnings, and SoftAP device setup (Google Play package: ai.wattswap.fieldforce)
• WattSwap web platforms — admin, partner, host, and operations dashboards (frontend / persona portals)
• WattSwap website — marketing, store, host, franchise, and support pages at wattswap.ai

By creating an account, installing our apps, or otherwise using the Services, you acknowledge this Policy. If you do not agree, please do not use the Services.

2. Scope and Google Play Data safety

This Policy is intended to satisfy Google Play’s User Data / Data safety requirements for both mobile apps listed above. It discloses:

• What data we collect (including sensitive permissions such as location and camera)
• Why we collect it and whether collection is required or optional
• Whether data is shared with third parties
• Security practices, retention, and your rights (including account deletion)

Play Console Data safety declarations for each app must remain consistent with this Policy. Features available to you may vary by product, role (driver, host, partner, installer, admin), and country.

3. Information we collect

We collect information in three ways: (a) you provide it; (b) we collect it automatically from devices and apps; (c) we receive it from partners or service providers.

3.1 Account and identity

• Name, mobile number, email address, and profile details
• OTP / authentication data and session tokens
• Organisation, partner, or persona role (for FieldForce and dashboards)
• Optional profile photo or display preferences

3.2 Contact and commercial details

• Postal / site address for installs, hosting, shipping, or invoicing
• Business details (GSTIN, organisation name, bank / UTR references for partner orders) where required for commerce or payouts
• Support tickets, chat, email, and call records when you contact us

3.3 Location data

WattSwap.ai: With your permission, we collect approximate and/or precise location (foreground; background only if you grant it) to show nearby stations, navigation / trip planning, charging session context, and recommendations.

WattSwap FieldForce: With your permission, we use location (and related Wi‑Fi / local network access) primarily to identify the charger’s setup network (SSID) and complete SoftAP / field install workflows—not for consumer advertising.

You can revoke location permission in OS settings. Core map or install features may not work without it.

3.4 Camera, photos, and QR

WattSwap.ai may use the camera (with permission) to scan QR codes on stations or devices. We do not use the camera for continuous recording. Photos you upload (e.g. support or install documentation) are stored as needed for that purpose.

3.5 Device, network, and app diagnostics

• Device model, OS version, app version, language, and time zone
• IP address, network type, and crash / performance diagnostics
• Push notification tokens (e.g. Expo / FCM) to deliver alerts
• On FieldForce: Wi‑Fi / local network state needed to reach a charger’s setup portal
• On WattSwap.ai (where enabled): Bluetooth for discovering or configuring WattSwap hardware

3.6 Charging, vehicle, and energy usage

• Station / connector selection, session start/stop, energy (kWh), duration, and tariffs
• Vehicle details you add (make/model, identifiers you choose to store)
• Optional telemetry or Android Auto / CarPlay–related status when you enable those features
• Host / site energy and occupancy data linked to your hosted assets

3.7 Payments and financial records

• Transaction amounts, currency, status, order IDs, and refunds
• Payment method type (e.g. UPI) — card / UPI credentials are processed by licensed payment partners; we do not store full card numbers on our servers
• Partner stock-order payment references (UTR), invoices, and settlement / earnings records

3.8 Partner / FieldForce operational data

• CRM pipeline data (prospects, leads, opportunities, sales) and install job tickets
• Inventory, orders, price lists, tier / discount, warranty, and portfolio information
• Device unlock / SoftAP workflow logs needed for commissioning
• Training, leaderboard, rewards, and performance metrics shown in-app

3.9 Website and dashboard data

• Pages visited, referrers, and form submissions (contact, host, franchise, store)
• Cookies and similar technologies (see our Cookie Policy)
• Dashboard login, role, and activity necessary to operate partner / admin tools

3.10 Data we do not sell

We do not sell your personal information. We do not share personal information with third parties for their independent advertising or cross-app tracking, except as described in Section 5 or where required by law.

4. How we use information

We process personal data for the following purposes:

• Provide the Services — accounts, maps, charging sessions, SoftAP installs, CRM, inventory, dashboards
• Payments and commerce — process, confirm, refund, and reconcile transactions and partner orders
• Notifications — session status, tickets, orders, security alerts (you can control OS / in-app notification settings)
• Support and safety — respond to requests, investigate incidents, prevent fraud and abuse
• Improve products — diagnostics, reliability, feature development; where feasible we use aggregated or de-identified data
• Personalisation — recommendations and operational insights relevant to your role (not third-party ads)
• Legal and compliance — tax, accounting, dispute resolution, and regulatory obligations (including India’s DPDP Act where applicable)

Legal bases may include: performance of a contract, consent (e.g. precise location, camera, marketing), legitimate interests (security, product improvement), and legal obligation.

5. Sharing and disclosure

We may share information only as needed to operate the Services:

• Payment processors and banks — to complete charges, refunds, and settlements
• Cloud hosting, messaging, and push providers — to run apps, APIs, email/SMS OTP, and notifications
• Maps and location SDKs — to display maps and routes (subject to their terms)
• Charging / network partners (CPOs) — only session or identity data required to start, stop, or bill a charge you initiate
• Your organisation — if you use FieldForce or dashboards under a partner / employer account, admins in that organisation may see operational data tied to your role
• Professional advisors and authorities — when required by law, court order, or to protect rights, safety, and security
• Business transfers — in a merger, acquisition, or asset sale, with appropriate safeguards and notice where required

Third-party station listings shown in our apps may come from public or partner databases. Viewing a listing does not by itself share your personal data with that operator.

6. Permissions used by our mobile apps

Permissions are requested in-context and can be denied or revoked in system settings. Approximate mapping to Google Play Data safety categories:

We do not request access to your contacts, SMS inbox, or call logs for advertising. SMS OTPs are handled via your OS / messaging provider when you authenticate.

7. Data security

We use administrative, technical, and organisational measures appropriate to the risk, including TLS for data in transit, access controls, least-privilege staff access, and secure cloud hosting. Payment card data is handled by PCI-aligned payment partners. No method of transmission or storage is perfectly secure; you use the Services at your own residual risk.

8. Data retention

• Active accounts — profile and usage data retained while the account remains active
• After an account deletion request — public access is revoked immediately and the account is hidden from product UIs; personal and transactional data are retained in WattSwap systems for financial-year settlements, accounting, disputes, fraud prevention, and internal analysis (they are not publicly accessible)
• Transactions, invoices, tax, and settlement records — retained as required for the financial year and applicable law
• Permanent erasure — not automated at this time; a future policy update may define erasure. Until then, deleted accounts remain barred from public access while data stays available to WattSwap backend teams
• Security / fraud logs — retained as needed for investigation and prevention

9. Your rights and account deletion

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you may request to:

• Access or correct personal data we hold about you
• Withdraw consent where processing is consent-based (e.g. location, marketing)
• Object to certain processing or request restriction
• Receive a portable copy of data you provided, where feasible
• Delete your account access (public deactivation)

How to delete your account: open the WattSwap account portal at https://dashboard.wattswap.ai/delete-account, sign in with the same email/password or mobile OTP used in WattSwap.ai, WattSwap FieldForce, or the dashboards, review the retention notice, type DELETE, and submit. You can also email privacy@wattswap.ai.

Requesting deletion immediately revokes login and app/dashboard access and hides the account from other users in product UIs. Personal and transactional data are retained for settlements (financial year), legal compliance, and internal analysis, and are not publicly accessible. Permanent erasure of stored data is not performed automatically today and will follow a future decision.

Partner organisation admins may also deactivate FieldForce users within their organisation; that does not automatically erase historical commercial records tied to the organisation.

10. Cookies and similar technologies

Our websites and web dashboards use cookies and similar technologies for essential operation, preferences, and analytics. You can control cookies via browser settings. Details: Cookie Policy. Mobile apps may store tokens and preferences locally (e.g. secure storage / AsyncStorage) to keep you signed in and remember settings.

11. Children’s privacy

The Services are intended for users aged 18 and above (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will take steps to delete it.

12. International users and transfers

We primarily operate in India. Data may be processed on servers or by vendors in other countries. Where we transfer personal data internationally, we use appropriate contractual and technical safeguards. By using the Services from outside India, you understand that your information may be transferred to India and other locations where we or our processors operate.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised version at https://wattswap.ai/privacy.html (or successor URL) and update the “Last updated” date. Material changes may also be notified in-app or by email. Continued use after the effective date constitutes acceptance of the updated Policy where permitted by law.

14. Contact us

For privacy questions, Data safety clarifications, or to exercise your rights:

Privacy: privacy@wattswap.ai
General: info@wattswap.ai
Entity: Novosynth Industries Private Limited (WattSwap brand)
Location: Bengaluru, Karnataka, India

This Policy is provided in English. If translated, the English version prevails in case of conflict, except where local law requires otherwise.