Privacy Policy

Effective Date: March 15, 2026

Last Updated: June 2026

NexinEV is a product owned and operated by Spack Solutions Private Limited, a company incorporated under the Companies Act, 2013, with its registered office in Hyderabad, Telangana, India (hereinafter referred to as “the Company”, “we”, “us”, or “our”). This Privacy Policy governs the collection, use, storage, and protection of personal data in connection with the NexinEV platform, website (www.nexinev.com), and all related services (collectively, the “Platform”).

This Policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and applicable rules thereunder. By accessing or using the NexinEV Platform, you (the “Data Principal”) consent to the practices described in this Policy.

1. Scope and Applicability

This Policy applies to:

•        All visitors to www.nexinev.com

•        Business entities and their authorized representatives who register on the Platform

•        EV charging network operators, fleet operators, and commercial partners using NexinEV services

•        Any individual whose personal data is processed by NexinEV in connection with the above

This Policy does not apply to third-party websites or services linked from the Platform. NexinEV is primarily a B2B platform; personal data collected is largely that of business representatives and authorized users.

2. What Personal Data We Collect

2.1 Data You Provide Directly

•        Identity information: Full name, designation, business email address, phone number

•        Account credentials: Username, encrypted password

•        Business information: Company name, registered address, GST number, CIN

•        Communication data: Enquiry forms, emails, demo requests, support tickets

•        Contract and billing data: Invoicing details, payment references (we do not store payment card data)

2.2 Data Collected Automatically

•        Device and browser information: IP address, browser type, operating system

•        Usage data: Pages visited, features used, session duration, interaction logs

•        Cookies and tracking technologies: Session cookies, analytics cookies (see Section 8)

•        Log data: Server logs, error reports, API call records

2.3 Data from Third Parties

•        Partner onboarding data shared by EV charger manufacturers or infrastructure partners

•        Data shared by your employer or organization when providing you Platform access

We do not knowingly collect sensitive personal data (as defined under DPDPA) unless explicitly required for regulatory compliance and with your explicit consent.

 3. Lawful Basis and Purpose of Processing

Under the DPDPA 2023, we process your personal data on the following lawful grounds:

(a) Consent:

•        Newsletter subscriptions and marketing communications

•        Non-essential cookies and analytics

•        Collection of any data beyond operational necessity

(b) Contractual Necessity:

•        Creating and managing your NexinEV account

•        Delivering platform services as agreed under Terms of Service

•        Processing payments and generating invoices

•        Providing technical support and customer service

(c) Legitimate Interests:

•        Platform security, fraud prevention, and abuse detection

•        Product improvement and feature development based on usage analytics

•        Internal reporting and operational management

(d) Legal Obligation:

•        Compliance with applicable Indian laws, regulations, and court orders

•        Responding to lawful requests from government authorities

 4. How We Use Your Data

We use your personal data strictly for the purposes stated at the time of collection. Specific uses include:

•        Account registration, verification, and management

•        Providing, operating, and improving the NexinEV platform

•        Sending transactional communications (invoices, service alerts, downtime notices)

•        Responding to support queries and technical issues

•        Sending product updates and feature announcements (with opt-out option)

•        Conducting analytics to understand usage patterns and improve performance

•        Ensuring platform security and preventing unauthorized access

•        Complying with legal and regulatory requirements

We do not sell, rent, or trade your personal data to any third party for commercial purposes.

5. Data Sharing and Disclosure

We may share your personal data only in the following circumstances:

5.1 Within Our Organization

Personal data is accessible only to employees and contractors on a need-to-know basis, bound by confidentiality obligations.

5.2 With Service Providers (Data Processors)

We engage trusted third-party processors who assist us in operating the Platform, including cloud hosting providers, payment gateways, and email services. All processors are bound by data processing agreements ensuring DPDPA-compliant handling.

5.3 With Business Partners

Where you interact with NexinEV through a partner integration (e.g., charger OEM or infrastructure partner), relevant operational data may be shared with that partner for service delivery purposes only.

5.4 Legal and Regulatory Disclosure

We may disclose data when required by law, court order, or a competent government authority under applicable Indian law.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

6. Cross-Border Data Transfers

NexinEV primarily operates within India. Where data is transferred outside India (for example, to cloud service providers with international infrastructure), we ensure such transfers comply with the DPDPA 2023 and any applicable government-notified rules on cross-border data flows.

We implement appropriate contractual safeguards for all international data transfers.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by law. Our general retention periods are:

•        Account data: Retained for the duration of your account and up to 3 years after account closure

•        Transaction and billing records: 7 years (as required under Indian tax and accounting laws)

•        Communication logs: 1 year

•        Usage and analytics data: 2 years in identifiable form, then anonymized

•        Legal hold data: Retained as required by applicable legal proceedings

Upon expiry of the retention period, data is securely deleted or anonymized.

 8. Cookies and Tracking Technologies

NexinEV uses cookies and similar technologies on its website. These include:

•        Essential cookies: Necessary for platform functionality and security. Cannot be disabled.

•        Analytics cookies: Help us understand how visitors use the site. Subject to your consent.

•        Preference cookies: Remember your settings and configurations.

You can manage your cookie preferences through your browser settings or our cookie consent banner. Disabling non-essential cookies will not affect your ability to use the core platform.

9. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access (Section 11, DPDPA):

You have the right to obtain a summary of the personal data we hold about you and the processing activities undertaken.

Right to Correction and Erasure (Section 12, DPDPA):

You may request correction of inaccurate or incomplete data, and erasure of data that is no longer necessary for the purpose it was collected.

Right to Grievance Redressal (Section 13, DPDPA):

You have the right to raise a grievance with our Grievance Officer and receive a response within the timelines prescribed under DPDPA.

Right to Nominate (Section 14, DPDPA):

You may nominate another individual to exercise your rights on your behalf in the event of death or incapacity.

Right to Withdraw Consent:

Where processing is based on your consent, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, write to us at: support@nexinev.com. We will respond within 30 days of receipt of your request.

 10. Data Security

NexinEV implements technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

•        Encryption of data in transit using TLS (Transport Layer Security) protocols

•        Role-based access controls ensuring data is accessible only to authorized personnel

•        Secure development practices applied across the platform

•        Incident response procedures for data breach identification and management

In the event of a personal data breach that is likely to affect your rights, we will notify the Data Protection Board of India and affected Data Principals as required under DPDPA 2023.

11. Children’s Data

NexinEV is a B2B platform intended for use by businesses and their authorized adult representatives. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data of a minor has been collected without verifiable parental consent, we will delete it promptly.

12. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address privacy-related concerns:

Grievance Officer, NexinEV

Email: support@nexinev.com

Response Time: Within 30 days of receipt of your grievance

If you are not satisfied with our response, you have the right to escalate your grievance to the Data Protection Board of India, as constituted under the DPDPA 2023.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

•        Update the “Last Updated” date at the top of this Policy

•        Notify registered users via email or an in-platform notification

•        Where required under DPDPA, obtain fresh consent for new processing activities

We encourage you to review this Policy periodically. Continued use of the Platform after changes are effective constitutes your acceptance of the updated Policy.

 14. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts in Hyderabad, Telangana, India.

 15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:

NexinEV Support & Privacy Team

Website: www.nexinev.com

Email: support@nexinev.com

 © 2026 Nexinev. All Rights Reserved. | A product of Spack Solutions Private Limited, Hyderabad, India.