Privacy Policy

1. Information We Collect

Account and authentication data. Sign-in, sign-up and password reset are handled by our authentication service at auth.electrovaya.io; the Portal itself never receives or stores your password. The account record associated with your access consists of your email address, your name, the company or plant you belong to, the roles and permissions granted to you, and sign-in timestamps.

Session data. To keep you signed in, the Portal stores short-lived access and refresh tokens in HTTP-only cookies that are not readable by scripts in your browser. Standard server logs may record the IP address, timestamp and user agent of requests.

Usage and diagnostic data. We record limited activity within the Portal such as pages and views requested, actions performed against equipment (for example a firmware update or a log upload), and application errors for development, debugging, auditing and improving the product. We do not use third-party analytics, advertising or cross-site tracking services.

2. Cookies and Browser Storage

The Portal uses cookies strictly for authentication and session management. No advertising or tracking cookies are set.

The Portal also keeps data in your browser's local storage so pages load quickly and remember how you left them, including:

• A cache of recently viewed battery, plant and activity data
• Your dashboard filters, selected time range and timezone
• Your light or dark theme preference

This cached data stays on your device, expires on its own, and is cleared when you sign out or clear your browser's site data.

3. How We Use Information

• Authenticate you and maintain your session
• Enforce role-based access so you only see the plants, batteries and devices you are authorized to see
• Display fleet status, activity, alerts and reports, and support operations such as firmware updates and log collection
• Diagnose faults, monitor service health and improve the Portal and the products it manages
• Meet security, audit and legal obligations

We do not use your information for automated decisions that affect you personally, and we do not sell it.

4. Data Sharing

We do not sell, rent or trade your information, and we do not share it with advertisers or data brokers.

We may disclose information where required by law or to protect the rights, safety or property of Electrovaya, our customers or the public.

5. Data Retention

Account records are kept while your access to the Portal is active and for as long as needed afterwards for audit and legal purposes. Session tokens expire automatically and are discarded when you sign out.

6. Security

Access to the Portal requires authentication over an encrypted connection and is restricted by role and scope. Session tokens are short-lived and held in HTTP-only cookies, and the Portal holds no credentials of its own. We apply reasonable technical and organizational measures to protect the information we handle, though no system can be guaranteed completely secure.

7. Your Choices

You can sign out at any time to end your session, and clear locally cached data through your browser settings. Because the Portal is provided to you through your organization, requests to access, correct or delete your account information are handled together with your organization's Electrovaya contact.

To make such a request, contact us using the details below.

8. Children's Privacy

The Portal is a business application intended for authorized adult users. It is not directed toward children, and we do not knowingly collect information from them.

9. Electrovaya Mobile and Desktop Applications

This policy covers the web Portal. The Electrovaya Product Suite applications for mobile and Windows are covered by a separate policy, available at /app-privacy.

10. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time. Any changes will be reflected on this page with an updated revision date.

11. Contact Information

If you have any questions about this Privacy Policy, please contact:

Email: support@electrovaya.io