Privacy Policy
Effective date: [EFFECTIVE_DATE]
1. Who we are
AnyGrid (“we”, “us”, “our”) is operated by [ANYGRID LEGAL NAME], [ADDRESS].
Contact: privacy@anygrid.app.
Data Protection Officer (DPO): [DPO NAME / EMAIL].
EU representative (for GDPR): [IF APPLICABLE].
2. Scope & applicability
This policy applies to our websites, apps, and services including wallet, bookings, trip planner (AI), fleet portal, and partner portal. It covers personal data processed under DPDP (India) and GDPR (EU).
3. Data we collect
- Account & Identity: name, email, phone, fleet/company, role.
- Transactions: bookings, sessions, payments, refunds, credits, invoices.
- Device & Usage: device model, OS, app version, crash logs, cookies, IP.
- Location: with consent, for live routing/ETA and nearby chargers.
- Vehicle & Preferences: EV model, connector type, routing preferences.
- Support & Comms: messages, call recordings (if disclosed).
- Partners (CPO/OMC): OCPI/CSMS endpoints, settlement metadata.
4. How we use data (purposes & lawful bases)
- Provide services (bookings, wallet, routing, support) — Contract / Consent
- Payments & settlements — Contract / Legal obligation
- Safety, security, fraud prevention — Legitimate interests / Legal obligation
- Product analytics & service improvement — Legitimate interests / Consent (EU cookies)
- Marketing (opt-in, withdraw anytime) — Consent
- Legal compliance & disputes — Legal obligation / Legitimate interests
5. Retention
We keep data only as long as needed for service, tax/finance obligations (e.g., 7–10 years for invoices), or until consent is withdrawn where applicable.
7. International transfers
We may transfer data internationally. Where required, we use safeguards such as SCCs, DPDP-compliant measures, and vendor due diligence.
8. Your rights (DPDP & GDPR)
- DPDP (India): right to access, correction, erasure, grievance redressal, and nominate.
- GDPR (EU): access, rectification, erasure, restrict, portability, object, and withdraw consent.
Exercise rights: privacy@anygrid.app. Supervisory authorities: [INDIA/COUNTRY DPA], EU DPAs.
9. Children’s data
Our service is not directed to children under applicable age thresholds. We do not knowingly collect children’s data.
10. Security
We use technical & organizational measures including encryption in transit/at rest, access controls, monitoring, and incident response.
12. App permissions (location, NFC, camera)
Permissions are requested only to deliver features: location for nearby chargers & routing; NFC/camera to start sessions (tap/QR). You can disable them in system settings, but features may degrade.
13. Contact & complaints
DPO: [DPO EMAIL]. Email privacy@anygrid.app. Complaints: [INDIA DPA LINK]; EU: relevant DPA.
14. Changes to this policy
We’ll post updates with a new effective date; material changes will be highlighted in-app or via email.