Privacy Policy

Introduction

Welcome to GridFlow Drive. This Privacy Policy explains how GridFlow Nepal Pvt. Ltd. ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our mobile application and services in Nepal. GridFlow Drive is an electric vehicle charging platform that helps you locate EV chargers, navigate to charging stations, reserve charging slots, make payments, and access ancillary services at EV charging locations.

GridFlow Drive is operated in Nepal by GridFlow Nepal Pvt. Ltd., a subsidiary of GridFlow Limited (Hong Kong). By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Personal Information

We collect personal information that you provide directly to us, including:

• Account information: name, email address, phone number, password
• Profile information: vehicle details (make, model, battery capacity, charging preferences)
• Payment information: credit/debit card details, mobile wallet information, billing address
• Identity verification documents as may be required under Nepali law
• Communication data when you contact our customer support

Location Information

To provide our core services, we collect:

• Real-time GPS location data to show nearby charging stations and provide navigation
• Location history to improve route suggestions and service recommendations
• Destination addresses you enter for navigation purposes

You can control location permissions through your device settings. However, disabling location services may limit certain features of the app.

Usage and Transaction Data

We automatically collect information about your use of our services:

• Charging session details: station location, duration, energy consumed, cost
• Reservation history and preferences
• Payment transaction records
• App usage patterns and feature interactions
• Device information: device type, operating system, unique device identifiers, mobile network information

Technical and Analytics Data

• IP address and connection information
• App performance data and crash reports
• Cookies and similar tracking technologies
• Analytics data to understand user behavior and improve services

How We Use Your Information

We use the collected information for the following purposes:

Service Delivery

• Provide access to our EV charging network and locate nearby charging stations
• Enable navigation and route planning to charging locations
• Process charging station reservations and manage queue systems
• Facilitate payment processing for charging sessions and ancillary services
• Monitor charging sessions and provide real-time updates
• Send notifications about charging status, reservation confirmations, and payment receipts

Account Management

• Create and maintain your user account
• Authenticate your identity and prevent unauthorized access
• Provide customer support and respond to your inquiries
• Send important service updates and technical notices

Service Improvement

• Analyze usage patterns to improve app functionality and user experience
• Develop new features and services based on user needs
• Optimize charging station network planning and expansion
• Personalize your experience with relevant recommendations

Legal and Security

• Comply with legal obligations under Nepali law and regulations
• Prevent fraud, unauthorized transactions, and illegal activities
• Protect the safety and security of our users and services
• Enforce our terms of service and other agreements
• Resolve disputes and address complaints

Marketing and Communications

• Send promotional offers and updates about new features (with your consent)
• Conduct surveys and gather feedback
• Provide information about our partner services and benefits

You can opt out of marketing communications at any time through app settings or by contacting us directly.

Data Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers and Partners

• Charging station operators and owners to facilitate charging services
• Payment processors and financial institutions to process transactions
• Cloud storage and hosting providers for data infrastructure
• Analytics and performance monitoring service providers
• Customer support and communication platforms
• Mapping and navigation service providers

These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

Corporate Group

We may share information with our parent company GridFlow Limited (Hong Kong) and affiliated entities for operational purposes, technical support, and service improvement. All entities adhere to privacy standards consistent with this policy.

Legal Requirements

We may disclose your information when required to:

• Comply with applicable laws, regulations, or legal processes in Nepal
• Respond to lawful requests from government authorities or law enforcement
• Protect our rights, property, or safety, or that of our users or the public
• Investigate and prevent fraud or security issues

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the relevant parties. You will be notified of any such change and your choices regarding your information.

With Your Consent

We may share information for purposes not described in this policy when we have your explicit consent.

Data Security

We implement comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit using industry-standard SSL/TLS protocols
• Encryption of sensitive data at rest, including payment information
• Secure authentication mechanisms and password protection
• Regular security assessments and vulnerability testing
• Restricted access to personal data on a need-to-know basis
• Employee training on data protection and privacy practices
• Incident response procedures and breach notification protocols

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-leading standards.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by Nepali law:

• Account information: retained while your account is active and for a reasonable period after closure for legal and operational purposes
• Transaction records: retained for at least 7 years as required by financial regulations
• Payment information: retained as required by payment card industry standards
• Location data: retained for up to 12 months unless you request earlier deletion
• Analytics data: typically aggregated and anonymized for long-term analysis

You may request deletion of your data at any time, subject to our legal obligations and legitimate business interests.

Your Rights and Choices

Under Nepali law and our commitment to data protection, you have the following rights regarding your personal information:

Access and Portability

• Request access to the personal information we hold about you
• Receive a copy of your data in a structured, commonly used format
• Request transfer of your data to another service provider where technically feasible

Correction and Updates

• Update or correct inaccurate or incomplete personal information
• Modify your profile settings and preferences at any time through the app

Deletion

• Request deletion of your account and associated personal data
• Request deletion of specific data categories, subject to legal retention requirements

Restriction and Objection

• Object to certain types of data processing, including marketing communications
• Request restriction of processing in specific circumstances
• Withdraw consent for optional data processing activities

Location Controls

• Enable or disable location services through your device settings
• Control background location access permissions
• Request deletion of location history

Marketing Preferences

• Opt out of promotional emails and notifications
• Manage communication preferences in app settings
• Unsubscribe from marketing messages using the link provided in emails

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within 30 days.

International Data Transfers

Your information may be transferred to and processed in locations outside of Nepal, including Hong Kong where our parent company GridFlow Limited is located, and other countries where our service providers operate. These countries may have different data protection laws than Nepal.

When we transfer your data internationally, we ensure appropriate safeguards are in place:

• Data processing agreements with our parent company and service providers
• Adherence to internationally recognized data protection standards
• Implementation of technical and organizational security measures
• Regular compliance assessments and audits

Third-Party Services and Links

Our app may contain links to third-party websites, services, or charging station operator platforms. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

We use the following categories of third-party services:

• Payment processors for secure transaction handling
• Mapping and location services for navigation functionality
• Analytics platforms to understand app usage and performance
• Cloud infrastructure providers for data storage and processing
• Customer support and communication tools

Each third-party service provider has their own privacy policy governing their collection and use of data.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and improve our services:

Types of Cookies We Use

• Essential cookies: Required for app functionality and security, including authentication and session management
• Analytics cookies: Help us understand how users interact with our app to improve features and performance
• Preference cookies: Remember your settings and preferences for a personalized experience
• Marketing cookies: Used to deliver relevant advertisements and measure campaign effectiveness (with your consent)

Managing Cookies

You can control cookie preferences through your device settings or browser settings. Note that disabling certain cookies may affect app functionality. You can also opt out of analytics tracking through app settings.

Children's Privacy

GridFlow Drive is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. The service requires users to have a valid payment method and driver's license or vehicle ownership, which are typically available only to adults.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete such information promptly. If you believe we have information from or about a child, please contact us immediately.

Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Inform relevant regulatory authorities as required by Nepali law
• Provide details about the nature of the breach and data affected
• Outline steps we are taking to address the breach and prevent future incidents
• Recommend actions you can take to protect your information

Compliance with Nepali Law

We are committed to complying with all applicable Nepali laws and regulations regarding data protection and privacy, including but not limited to:

• Electronic Transactions Act, 2063 (2008)
• Privacy Act, 2075 (2018)
• Information Technology Act and related regulations
• Consumer Protection Act and guidelines
• Financial sector regulations applicable to payment processing

We maintain records of our data processing activities and cooperate with relevant regulatory authorities in Nepal.

Updates and Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you through the app, email, or other prominent means
• Provide you an opportunity to review changes before they take effect
• For significant changes, request your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of GridFlow Drive after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Acknowledgment

By using GridFlow Drive, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services.