Digital Personal Data Protection & Privacy Policy
1.0 Statutory Notice & Scope
This Digital Personal Data Protection and Privacy Policy ('Privacy Policy') constitutes a binding legal agreement between you ('Data Principal', 'User', 'Host', or 'Driver') and Connect Charge Share Private Limited ('Data Fiduciary', 'CCS', 'Company', 'We', 'Us').
This document is published in accordance with the provisions of Section 5 and Section 6 of the Digital Personal Data Protection Act, 2023 (DPDP Act) and Rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
By downloading, installing, registering on, accessing, or utilizing the Connect Charge Share Mobile Applications (Host App and Driver App) or web platforms, you provide free, specific, informed, unconditional, and unambiguous consent to the collection, processing, storage, transfer, and disclosure of your personal data as outlined in this Policy.
2.0 Categories of Data We Collect
We adhere strictly to the principle of Data Minimization under the DPDP Act 2023, gathering only data strictly essential to execute peer-to-peer EV charging transactions, verify electrical safety, and ensure seamless settlements.
2.1 Identity & Contact Telemetry
Full Legal Name, Mobile Phone Number, and Email Address.
For Hosts: Physical Charging Location Address, Geo-coordinates, Landmark, and optional KYC documents (Government Identity Proof where mandated for commercial listing).
2.2 Vehicle & Connector Specifications
Electric Vehicle Manufacturer (OEM), Model, Registration State, Onboard Battery Capacity (kWh), Charging Standard (Type 2 AC, CCS2 DC, 15A/16A Industrial Socket, Bharat AC-001), and Recommended Inverter Amperage.
This data is used solely to match drivers with electrically compatible chargers and calculate accurate estimated charging durations. Vehicle technical specifications may be retrieved, auto-filled, or validated using third-party automotive specification and EV lookup APIs.
2.3 Camera & Optical Character Recognition (OCR) Telemetry
Photographs of Electric Meter Displays captured at session initiation ('Start Meter Reading') and termination ('End Meter Reading').
These photos are analyzed through automated machine learning models (Google Cloud Document AI) solely to extract numeric kilowatt-hour (kWh) values. We do not extract biometric, facial, or ambient private property imagery.
2.4 Precise Geolocation & Navigation Data
GPS coordinates collected while the app is active in the foreground to display nearby charging points, calculate transit distances, and provide turn-by-turn directions.
We do not track continuous background location when the application is terminated or inactive.
2.5 Financial & Payout Telemetry
For Drivers: Payment transaction identifiers, Razorpay Order IDs, payment mode (UPI, Card, Net Banking), and settlement statuses. Connect Charge Share Private Limited NEVER stores full Credit/Debit Card numbers, CVV codes, or UPI MPINs on its databases.
For Hosts: Beneficiary Bank Account Number, Indian Financial System Code (IFSC), and Account Holder Name. These are encrypted using AES-256 and transmitted securely to RazorpayX for direct automated settlement disbursements.
3.0 Lawful Grounds & Purpose of Processing
Under Section 4 and Section 7 of the DPDP Act, 2023, we process personal data exclusively based on (a) Explicit Consent provided by the Data Principal, and (b) Legitimate Uses as specified by law:
1. Facilitating marketplace matching between private charger hosts and EV drivers.
2. Generating cryptographic 6-digit Arrival OTPs to verify physical arrival and prevent unauthorized premises entry.
3. Calculating exact electrical units dispensed (End Meter minus Start Meter) and generating transparent billing breakdowns.
4. Executing automated T+3 bank payouts to hosts and processing instant refunds for rejected reservations.
5. Investigating dispute claims, equipment tampering, meter irregularities, or physical premises damages.
6. Complying with statutory reporting requirements under the Central Electricity Authority (CEA) and Ministry of Power guidelines.
4.0 Data Disclosures & Third-Party Processing
We strictly do NOT sell, rent, monetize, or trade your personal data to advertisers, data brokers, or unaffiliated commercial entities.
Data is shared strictly on a need-to-know basis with authorized entities under strict confidentiality agreements:
1. Between Driver and Host: Upon reservation confirmation, the Host receives the Driver's Name, Vehicle Model, and arrival timestamp. The Driver receives the Host's Station Name, Address, and authorized access instructions.
2. Payment Processors: Razorpay Software Private Limited / RazorpayX for processing payment gateways and banking ACH/NEFT payouts in compliance with RBI guidelines.
3. Cloud Infrastructure: Google Cloud Platform (GCP) and Amazon Web Services (AWS) data centers located within the territory of India, in strict adherence to data localization standards.
4. Law Enforcement & Statutory Authorities: Only when compelled by a valid legal subpoena, court order, or formal request under Section 91 of the Code of Criminal Procedure, 1973.
5. Third-Party Automotive & EV Lookup APIs: We integrate with licensed third-party vehicle databases and EV lookup APIs (such as Open EV Data services) to retrieve accurate electric car technical parameters (connector standards, battery capacity, maximum charging speed, and inverter limits) based on vehicle model selection.
5.0 Data Retention & Erasure Standards
We retain personal data only for as long as necessary to fulfill the operational purposes for which it was collected, or as mandated by statutory financial and taxation laws:
1. User Data Deletion Requests (Within 3 Business Days): Users may request deletion of their account and all associated personal data at any time by sending an email to support@rontogo.com. After receiving an email request to support@rontogo.com, we will permanently delete and purge all user data within three (3) business days, retaining only records required by applicable financial or taxation regulations.
2. Financial & Invoicing Records: Retained for a mandatory period of eight (8) years under Section 128 of the Companies Act, 2013 and Goods and Services Tax (GST) regulations.
3. Telemetry & Meter Photos: Archived for 180 days for audit and dispute verification, following which they are purged or irreversibly anonymized.
6.0 Rights of the Data Principal (DPDP Act, 2023)
Under Chapter III of the Digital Personal Data Protection Act, 2023, you hold the following statutory rights:
1. Right to Access: You may request a summary of personal data being processed and the identities of all data processors with whom it has been shared.
2. Right to Correction & Erasure: You may edit inaccurate information or request deletion of data that is no longer required. Following an email request to support@rontogo.com, user data will be deleted within three (3) business days.
3. Right to Grievance Redressal: You have the right to register complaints with our Data Protection Grievance Support Desk and receive formal acknowledgment within 24 hours.
4. Right to Nominate: You may designate another individual to exercise your privacy rights in the event of death or incapacity.
5. Right to Approach Data Protection Board: If your grievance is unresolved within 30 days, you may approach the Data Protection Board of India.
7.0 Grievance Redressal & Contact Support
For any data protection inquiries, grievance redressal, or privacy-related requests, please reach out to our team:
Department: Compliance & Support Desk
Entity: Connect Charge Share Private Limited
Registered Address: Hno 14-26, Komuram Bheem colony, Tellapur, Sangareddy Dist, R.C. Puram mandal, Telangana - 502032, India
Contact Email: support@rontogo.com
Timelines: We acknowledge all inquiries and complaints within twenty-four (24) hours and resolve verified grievances within fifteen (15) business days.