Privacy Policy

EV DOST APP – PRIVACY POLICY

Effective Date: June 2026

Published By: Bycyshare Technologies Private Limited

Bycyshare Technologies Private Limited ("Zypp", "we", "us") values your digital trust. This Privacy Policy outlines our strict protocols regarding the collection, processing, storage, and protection of personal data belonging to Users registered on the EV DOST App. This policy is structured to be fully compliant with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act, 2023.

1. Data Collected by the Platform

We process and retain only the specific data vectors necessary to validate your identity, prevent cyber fraud, and facilitate seamless milestone payouts:

Personal Identity Data: Legal Name, Date of Birth, Gender, Mobile Number, and Personal Email Address.

Statutory Identification Data (KYC): Aadhaar Card details (processed strictly under voluntary consent for identity validation), Permanent Account Number (PAN) Card details for mandatory central tax cross-matching.

Financial & Payment Processing Coordinates: Bank Account Number, IFSC Code, Cancelled Cheque copies, Bank Statements, and Unified Payments Interface (UPI) IDs.

Role-Specific Verification Data: Employee IDs, Official Corporate Email Addresses, Agency Credentials, Student ID cards, GSTIN numbers, Fleet size parameters, and Social Media follower/reach analytics.

Automated Device and Telemetric Logs: Device IMEI numbers, unique IP addresses, Mobile Operating System configurations, App usage timestamps, geolocational coordinates (to track hub associations), and system crash metrics.

2. Legal Grounding and Purpose of Data Processing

We collect and process your personal data under the explicit legal basis of "Contractual Necessity" and "Consent". The data is used for:

Authenticating access via secure OTP frameworks.

Verifying statutory eligibility and preventing systemic multi-accounting or identity spoofing.

Calculating, processing, and clearing weekly referral payouts and milestone incentives.

Administering structural gamification pipelines (e.g., rendering your performance ranking on the public App Leaderboard).

Enforcing compliance with federal anti-money laundering and tax guidelines.

3. Data Minimization, Sharing & Third-Party Disclosure

Zypp does not engage in the monetization, sale, or unauthorized trading of User databases. Your information is selectively disclosed only under the following strict conditions:

3.1. Financial Intermediaries: Shared securely with authorized banking corporations, payment gateway infrastructures, and automated node network entities to directly process financial rewards into your designated accounts.

3.2. Ancillary Facilitation: Shared with chosen corporate insurance providers or lending institutions only if you explicitly elect to unlock third-party loans or special ecosystem benefits via the App.

3.3. Statutory Mandates: Disclosed to law enforcement agencies, tax inspectors, or judicial tribunals if required by law or to protect our rights against fraud, financial loss, or cyber-attacks.

4. Data Security and Safeguards

4.1. We apply rigorous administrative, technical, and physical security measures, including Advanced Encryption Standard (AES) 256-bit protocols for data-at-rest and Transport Layer Security (TLS) for data-in-transit.

4.2. Access to your documents is restricted through strict Role-Based Access Control (RBAC) mechanisms within Zypp's operations team.

4.3. While we enforce industry-leading firewalls and regular security audits, no digital storage environment can claim absolute immunity. Users must maintain strict confidentiality of their OTP codes.

5. Your Data Rights under Indian Regulations

As a data principal, you have the following rights which can be exercised through the in-app support portal:

Right to Access and Correction: The right to review, update, or rectify any outdated or inaccurate personal information mapped to your profile.

Right to Erasure (Withdrawal of Consent): You may formally request the deletion of your account and related data. Please note that choosing to delete your data will result in the immediate termination of platform access, and any accrued but unprocessed incentives may be forfeited if verification cannot be completed.

Statutory Retentions: We will retain essential transaction logs, tax data, and identity records for the minimum durations mandated by the Income Tax Act, 1961, and Indian anti-fraud frameworks, even after account closure.

6. Updates to this Privacy Policy

Zypp reserves the right to revise this Privacy Policy to align with technological advances or evolving legislative directives under the DPDP Act. We will notify you of material updates through prominent in-app alerts, SMS, or WhatsApp notifications before the revised policy takes effect. Your continued use of the platform after updates are posted confirms your acceptance of the revised data management terms.