Privacy Policy

1.1 This Privacy Policy ("Policy") describes how Chhabi Electric Mobility Pvt. Ltd. ("Chhabi", "Company", "we", "us", or "our"), part of the Chhabi Group (established 1965) and a legal entity distinct from Chhabi Electricals Pvt. Ltd., collects, uses, stores, discloses, and otherwise processes personal data in connection with the website located at chhabi-mobility.com, the Chhabi Watt mobile and web applications, our electric vehicle charging hardware, and related services (collectively, the "Services").

1.2 This Policy applies to all persons who interact with the Services, including:

• B2C — individual customers who buy or use a Chhabi Watt AC charger (Chargiq Core/Edge) at home, or who charge at a public/commercial Chargion station.
• B2B — business customers, fleet operators, dealers, distributors, and enterprise buyers.
• White-label partners — Charge Point Operators (CPOs), OEMs, and networks who resell Chhabi hardware and software under their own brand, and their end users.

2.1 The categories of personal data collected by Chhabi, and illustrative examples of their use, are set out below:

2.2 Chhabi does not knowingly collect government identification numbers, financial account numbers, or other sensitive financial information directly. Payment processing is carried out through a licensed payment gateway, which processes such information on Chhabi's behalf (see Clause 6).

3.1 Chhabi uses personal data for the following purposes:

• Provide and operate charging services (start/stop sessions, billing, session history)
• Process orders, payments, warranty claims, and AMC (Annual Maintenance Contract) requests
• Provide customer support and respond to service/breakdown requests
• Send OTA firmware updates and maintain remote diagnostics
• Communicate order updates, service notices, and (with consent) marketing communications
• Improve our products, website, and app based on usage patterns
• Comply with legal, tax, and regulatory obligations (e.g. GST records, consumer protection law)
• Detect and prevent fraud or misuse of charging infrastructure
• For white-label partners: enable the technical integration (APIs, CMS, fleet management data flows) needed to operate charging hardware under their brand

4.1 Chhabi processes personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act") on the following legal bases:

• Consent — for most B2C data collection (account creation, app usage, marketing communications), we will ask you to affirmatively agree before we process your personal data, and you can withdraw this consent at any time (see Section 8).
• Contract performance — processing needed to fulfil an order, warranty, or AMC you've entered into with us (B2B and B2C).
• Legitimate/certain legal uses — the DPDP Act permits some processing without consent for specified purposes (e.g. compliance with law, medical emergencies, employment purposes). We rely on this narrowly and only where the Act clearly permits it.

5.1 The website uses cookies and similar tracking technologies for the following purposes:

• Keep you logged in and remember preferences
• Understand site traffic and usage (analytics)
• Support advertising/retargeting, if you enable this

5.2 You may control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website, including your ability to remain logged into your dashboard.

6.1 Chhabi does not sell personal information. Personal data is shared only in the following circumstances:

• Service providers — payment gateways, cloud hosting, SMS/email providers, logistics partners for delivery/installation — bound by contract to protect your data and use it only for the service they provide us.
• White-label partners — because our hardware and software are white-labelled, when you charge at, or register for, a station operated under a partner's brand (not the Chhabi brand), the relevant charging/session data is shared with that partner as the operator of that station, so they can bill you and run their network.
• Group companies — Chhabi Electricals Pvt. Ltd. and its divisions, where needed for shared backend systems, finance, or support.
• Legal/regulatory — where required by law, court order, or government authority (e.g. tax authorities, law enforcement).
• Business transfers — if Chhabi is involved in a merger, acquisition, or sale of assets, customer data may transfer as part of that deal, subject to this policy's protections.

7.1 Chhabi employs reasonable technical and organizational measures, including encryption in transit and access controls, to protect personal data against unauthorized access, alteration, or loss. No system is entirely secure, and Chhabi cannot guarantee absolute security.

7.2 Personal data is retained only for as long as necessary for the purposes for which it was collected, typically for the duration of the account or customer relationship, plus any additional period required for tax, warranty, or legal record-keeping obligations under applicable Indian law.

7.3 Data is stored on secure servers with access restricted to authorized personnel. Any transfer of data outside India is carried out in compliance with the DPDP Act, 2023 (see Clause 11).

8.1 Under the DPDP Act, 2023, you (as a "Data Principal") have the right to:

• Access — request confirmation of what personal data we hold about you and a summary of it
• Correction — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your personal data, subject to legal retention requirements
• Withdraw consent — at any time, for processing based on consent (this won't affect processing done before withdrawal, and may limit our ability to provide certain services)
• Grievance redressal — raise a complaint with our Grievance Officer (Section 13), and if unresolved, with the Data Protection Board of India
• Nominate — appoint a nominee to exercise these rights on your behalf in case of death or incapacity

8.2 To exercise these rights, contact Chhabi using the details set out in Clause 13.

9.1 The Services are intended for individuals aged 18 and above. Chhabi does not knowingly collect personal data from children. Under the DPDP Act, the processing of a child's personal data requires verifiable parental consent. If you believe a child has provided personal data to Chhabi, please contact us using the details in Clause 13, and such data shall be deleted.

10.1 The website and application may link to or integrate with third-party services, including payment gateways, maps, social media platforms, and fleet management or CMS platforms used by Partners. Chhabi is not responsible for the privacy practices of such third parties, and you should review their privacy policies separately.

11.1 Personal data may be processed or stored on servers located outside India where Chhabi's service providers operate internationally. Any such transfer is carried out in accordance with the DPDP Act, 2023, with equivalent safeguards applied to protect the data.

12.1 Chhabi may update this Policy from time to time. The revised version shall be posted on this page with an updated "Last Updated" date. For material changes, Chhabi shall make reasonable efforts to notify registered users, including by email or in-application notice.

13.1 The DPDP Act requires Chhabi to designate a Grievance Officer for handling data-related complaints. The details of the Grievance Officer are set out below:

13.2 General privacy queries may be directed to sales@chhabi-mobility.com.