Privacy Policy

What we deliberately do not collect

• We never see your card, UPI ID or bank details. Payment happens inside the payment gateway's own checkout. We receive only a reference and an amount.
• Camera images never leave your device. The QR code is decoded on the phone; no photo is stored, uploaded or retained.
• No marketing or promotional push. Notifications cover your own activity only — see below. We never use them to advertise to you.
• No advertising identifiers, no tracking across other apps, no ad networks.
• We do not sell your data, and we do not share it for advertising.

If you allow notifications, your device is issued a token that lets our servers deliver a message to that device. We store it against your account and use it for four things:

• a charging session finishing, or failing partway through,
• progress updates while a session is running,
• your wallet balance running low, and
• a connector you queued for becoming free.

That is the whole list. You can turn categories off, set quiet hours in the app, or revoke the permission in your device settings — the app works normally without it, and revoking it stops us being able to reach that device at all. The token identifies a device, not you by name, and it is deleted with your account.

Location is the most sensitive thing the app asks for, so to be exact:

• It is used while the app is open. There is no background location tracking.
• Your coordinates are sent to Open Charge Map to look up public charging stations near you, and to OpenStreetMap Nominatim when you search for a place or we translate a coordinate into a place name.
• Destinations you search for during trip planning are saved to your account so they appear as recent suggestions. You can clear these in the app.
• Declining location permission does not block the app. You lose distance sorting and “chargers near me”; everything else works.

We use these providers. Each sees only what it needs.

Because some of these are outside India, your data may be transferred abroad. We only use providers that offer contractual protection for that transfer.

When the app crashes we send a report containing the error, a stack trace, and basic device information (model, OS version, app version).

Sending of personally identifying information is switched off in our configuration, so these reports are not intended to contain your name, phone number or location. Crash data is retained by our provider for a limited period (typically 90 days) and used only to fix faults.

Because crash reports are not linked to your account, we cannot find them by your identity — which also means deleting your account does not delete them. They expire on their own schedule. See §6.

• Account data (profile, vehicles, saved chargers, preferences) — while your account exists. Deleted when you delete the account.
• Wallet transaction history — while your account exists. Your top-ups and refunds are deleted with the account; they are deposits, not supplies, so nothing requires us to keep them.
• Tax invoices for charging sessions — kept beyond account closure, because tax law requires a supplier to retain records of a supply for a statutory period (in India, generally several years). Retained in a stripped form with no name, phone number or email. See §6.
• Support tickets — up to 3 years, or until you delete your account, whichever comes first.
• Recent searches and destinations — until you clear them, or delete your account.
• Push notification token — until you revoke the permission, reinstall the app, or delete your account, whichever comes first.
• Crash reports — per our provider's retention window, typically 90 days. Not linked to your account, so not removed by deleting it.
• Payment records at Razorpay — governed by their retention obligations, not ours. See §6.

Under India's Digital Personal Data Protection Act, 2023 — and comparable laws elsewhere — you may ask us to:

• access the data we hold about you,
• correct anything wrong (name, email, billing details are editable in-app),
• delete your account and data,
• withdraw consent for optional data such as location or camera, or for notifications, by turning the permission off in your device settings,
• complain to the Data Protection Board of India if we handle it badly.

What survives deletion, and why

We would rather tell you exactly what remains than claim a clean erasure we cannot deliver.

Tax invoices for charging sessions you were billed for. These are financial records of a completed supply and tax law requires us to keep them for a statutory period. We retain only the invoice number, date, amount, energy delivered, price, charger name, and your GSTIN if you gave one. They are detached from your identity — no name, phone number or email — and used for nothing but compliance.

Payment records held by Razorpay. Our payment processor keeps its own record of every transaction, including the phone number given at checkout, because it is legally required to as a regulated financial institution. Deleting your e-bolt account does not and cannot erase those. To ask Razorpay about data it holds independently, see razorpay.com/privacy.

Crash reports already sent. Diagnostic reports are not linked to your account and cannot be located by it, so they are not deleted on request. They expire on their own, typically within 90 days. They are not intended to contain your name, phone number or location — see §4.

Wallet balance. If you have money left, ask us for a refund before deleting. The app will warn you and offer to put you in touch. Once the account is gone, the record linking you to your original payment is gone with it, and we may be unable to identify the payment to refund. See the Refund & Cancellation Policy.

e-bolt is not intended for anyone under 18, and we do not knowingly collect data from children. Charging a vehicle requires a driving licence.

• All traffic between the app and our servers uses HTTPS.
• Your data is isolated at the database level: access rules mean one account cannot read another's rows, even if the app were tampered with.
• Wallet balances are computed and written only on our servers — the app cannot credit itself, and cannot alter what a charging session cost.
• Payment card details never reach our systems at all.

If we change what we collect or who processes it, we will update this page and change the date at the top. Material changes will be notified in the app.

Data requests — access, correction, deletion — and anything else about this policy:

privacy@e-bolt.in
BOLT EV SOLUTIONS LLP (trading as e-bolt)
A-212, Floor 2, A Wing, Mumbai Pune MMS Premises, Wadala Truck Terminal Road, Antop Hill, Mumbai, Maharashtra 400037, India

For anything about a session, a payment or your wallet, write to support@e-bolt.in instead — it reaches the people who can look up the charge point.

Grievance Officer: Aryan Sahal — grievance@e-bolt.in, as required by the DPDP Act. We respond to grievances within 30 days.