Privacy Policy
The short version: we collect what we need to find chargers for your car and to keep the community's charger information honest. We do not sell personal data.
Last updated: 2 November 2026
1. Who is responsible for your data
Watermelon Group Private Limited (operator of Zevvy) is the Data Fiduciary for the Zevvy website and app at thezevvy.tech, as the term is used in India's Digital Personal Data Protection Act, 2023 (the DPDP Act). "We" and "us" in this policy mean that company.
Questions, requests and complaints go to the contact in section 11.
2. What we collect, and why
Browsing without an account
You can look at chargers and plan routes without signing in. We do not ask who you are. We see your IP address and device type when your browser talks to our servers, and we use them to keep the service running and to block abuse. In the feedback form we keep only a one-way hash of the IP address, never the address itself.
Your account
- Phone number, if you sign in with a one-time code. We send the code by SMS. We store the code only as a keyed hash, it expires after 10 minutes, and it works once.
- Email address, if you sign in with email, or the verified email Google or Apple shares with us when you choose their sign-in.
- Google or Apple account identifier, so we can recognise you next time. We do not receive your Google or Apple password.
- Username and display name. A username is created for you. Your display name is optional: you choose whether to have one, and it is the only name other drivers ever see next to your reviews, check-ins and leaderboard entries. We never show a username built from your phone number.
Your car
The make and model you choose, and its range, battery size and connector type. We use them to show chargers that fit your car and to plan charging stops. They are kept on your device and, if you are signed in, saved to your account so they follow you to another device.
Your location
We ask your browser for your location only when you use a feature that needs it, such as "chargers near me" or navigation. You can say no and still search by place name. Your location is used to find nearby chargers and routes. While you drive, the battery estimate is worked out on your phone and stays there. If you are signed in, routes you plan and chargers you open can be saved to your history so you can find them again. You can delete that history.
Reviews, driver check-ins and photos
- Reviews: a star rating and the text you write.
- Driver check-ins: whether a charger was working, whether the plug fit your car, how long you waited, an optional note, and the time. We also record the connector type of the car saved in your profile, so that "the plug fit" has a meaning.
- Check-in photos (optional): we shrink each photo and remove its metadata, including any GPS location, before it is stored. A photo is not shown to the public until a moderator approves it. Please do not photograph people or vehicle number plates.
Reviews and check-ins appear with your display name, or as an anonymous driver if you have not set one. Anyone can read them.
Invitations and how you found us
- Referral links. If you open a Zevvy link that carries a referral code, we remember the code on your device. If you then create an account, we record who invited you. The person who invited you sees a count of the people who joined, not who they are.
- Campaign tags (UTM data). Links and QR codes can carry tags such as the source, medium and campaign, for example which dealer's card brought you here. If you have accepted analytics, we save those tags once, when you create an account, to learn which channels work. If you have declined, we do not save them.
Feedback you send us
The message you write and any contact detail you choose to add, so that we can reply.
3. Analytics, and your choice
The first time you visit, we ask whether you allow analytics. Nothing is loaded from the services below until you say yes. If you say no, none of them run. You can change your mind at any time with the "Privacy choices" button at the bottom of any page.
- Microsoft Clarity records how pages are used (clicks, scrolling, and replays of sessions) so we can find confusing screens. Text you type into fields is masked.
- PostHog (its United States cloud) counts events such as signing up, saving a car, viewing a charger, planning a route and sharing. We record that the event happened, not what you typed.
These tools use cookies or local storage on your device. Without your consent we use only what the site needs to work, such as remembering your theme, your saved places and your choice about analytics.
4. Who we share data with
We do not sell personal data. We use these providers to run Zevvy, and each receives only what its job needs:
| Provider | What it does |
|---|---|
| Netlify | Serves the website |
| Render | Runs our server |
| MongoDB Atlas | Stores accounts, reviews and check-ins |
| Mapbox | Maps, search and routing. The start and end of a route you plan are sent to it. |
| Google, Apple | Only if you choose their sign-in |
| SMS provider (MSG91 or Twilio) | Delivers one-time codes to your phone number |
| Resend | Delivers sign-in emails |
| Microsoft Clarity, PostHog | Analytics, only if you accept (section 3) |
We may also disclose information if the law, a court or a government authority requires it, or to protect the safety of our users and our service.
Some of these providers handle data outside India. By using Zevvy you understand that your data may be processed in other countries, subject to any restrictions the Government of India notifies under the DPDP Act.
5. How long we keep it
- Account details: until you delete your account.
- One-time sign-in codes: 10 minutes.
- Reviews and check-ins: while your account exists. When you delete your account, we delete them or remove your name from them.
- Photos that a moderator rejects are deleted.
- Analytics data: only as long as it is useful for improving Zevvy, and no longer than the provider's own settings allow.
- Records we must keep to meet a legal duty are kept for as long as that duty lasts.
6. Your rights under the DPDP Act
You can ask us to:
- tell you what personal data of yours we hold and how we use it;
- correct or complete it;
- erase it;
- take up a complaint about how we handled your data (section 11);
- treat another person as your nominee, to exercise these rights if you die or become unable to.
You can withdraw a consent you gave at any time. Withdrawing is as easy as giving it: use "Privacy choices" for analytics, and delete your review, check-in or account for the rest. Withdrawing does not undo what we did lawfully before.
Send requests to the contact in section 11. We will ask you to prove the account is yours, then we aim to reply within 30 days.
7. Children
Zevvy is for people aged 18 and over. If you are younger, please use it only with a parent or guardian, who must agree to this policy for you. We do not knowingly collect a child's data, and we do not track or target children. If we learn that we hold a child's data without a parent's consent, we will delete it.
8. Keeping data safe
The site and server use HTTPS. Passwords are stored hashed, never in plain text. Sign-in codes are stored only as keyed hashes. We limit how many requests one source can make, and only authorised people can reach moderation tools. No service is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
9. Third-party content
Charger information on Zevvy comes from public datasets, charging networks, our own team and drivers like you. Our terms say how this content is credited. Links to other sites are covered by those sites' own policies.
10. Changes to this policy
If we change this policy, we will update the date above. If a change affects how we use data you already gave us, we will ask for your consent again where the law requires it.
11. Contact and grievances
To exercise a right, ask a question or make a complaint, write to our grievance contact. Please say which account or phone number you mean. Do not send passwords or one-time codes.
If we do not resolve your complaint, you may complain to the Data Protection Board of India.
