This policy explains how White Stripe Innovations Private Limited ("we") collects and uses personal data when you use zevos.ai, the zevOS platform, or a charger connected to it. It is written to comply with the Information Technology Act, 2000, the SPDI Rules, 2011 and the Digital Personal Data Protection Act, 2023.
1. Data we collect
- Account data — name, email, mobile number, business name, GSTIN, bank account details (Operators), login credentials.
- Driver data — mobile number or email used to sign in, vehicle details you choose to add, RFID card identifiers.
- Charging data — charger identifier, location, start/end time, energy delivered, tariff and amount for each session.
- Payment data — transaction identifiers, amount, status and the last four digits / masked identifier returned by the payment aggregator. We never receive or store full card numbers, CVV or UPI PINs.
- Technical data — IP address, device and browser type, approximate location (only when you allow it, to find nearby chargers), and diagnostic logs.
2. Why we use it
- To deliver the Service: authenticate you, start and stop sessions, calculate charges, issue receipts and settle earnings.
- To meet legal obligations: GST invoicing, financial record-keeping, payment-network and RBI requirements, and lawful requests from authorities.
- To keep the Service safe: fraud prevention, abuse detection, security monitoring.
- To support you: respond to queries, refund requests and disputes.
- To improve the Service: aggregated, de-identified analytics on charger utilisation and performance.
We do not sell personal data and do not use it for third-party advertising.
3. Who we share it with
- The Operator of the charger you use — session and payment details needed to run their business and handle your support requests.
- Payment aggregators (e.g. Razorpay, PayU, Cashfree) to process payments, refunds and settlements.
- Service providers under contract with us — cloud hosting, email/SMS delivery, authentication, analytics and error monitoring — who may only process data on our instructions.
- Authorities, where required by law or to protect rights, safety and property.
4. Where data is stored
Production data is stored on cloud infrastructure in India. Some service providers may process limited data outside India under appropriate contractual safeguards.
5. Retention
Session and payment records are kept for eight years to meet tax and financial record-keeping requirements. Account data is kept while your account is active and for up to 90 days after closure, unless a longer period is required by law. Diagnostic logs are retained for up to 12 months.
6. Security
Data is encrypted in transit (TLS) and at rest. Payment-gateway credentials are stored encrypted, access is role-based and logged, and tenant data is isolated per Operator. No system is perfectly secure; if we become aware of a breach affecting you, we will notify you and the relevant authorities as required by law.
7. Your rights
- Access and correct your personal data from your account settings or by contacting us.
- Request deletion of your account and personal data, subject to records we must keep by law.
- Withdraw consent for optional processing (for example location access) at any time.
- Raise a grievance with our Grievance Officer (below); we respond within 30 days.
8. Cookies
We use strictly necessary cookies and local storage to keep you signed in and remember your preferences. We do not use third-party advertising cookies.
9. Children
The Service is not directed at children under 18 and we do not knowingly collect their data.
10. Grievance Officer and contact
Grievance Officer, White Stripe Innovations Private Limited
Email: support@zevos.ai
Phone: +91 97797 57625
We may update this policy from time to time; the date at the top shows the current version.