Privacy Policy

Waynull is an EV charging software company headquartered in Mumbai, India. For data about visitors to our website, prospects and our own clients' contacts, Waynull decides how and why that data is used and is responsible for it. In this policy, "we", "us" and "our" mean Waynull.

We collect minimal personal data, only for project communication, service delivery and billing. Depending on how you interact with us, this can include:

• Contact details you give us: name, email, phone, company, role, and anything you write in a form, email or meeting booking. With a contact form we also receive how you found our site and the pages you viewed in that visit.
• Billing details: invoices, tax details and payment status. Card and UPI details are handled by the payment provider; we do not store full card numbers.
• Usage data: pages visited, device, browser and approximate location, collected through analytics and server logs.
• Project data: information you share with us, or that flows through software we build, host or support for you.

We use personal data strictly for these purposes, and on these grounds:

• To reply to enquiries, prepare proposals and run meetings (steps you ask for before a contract).
• To deliver, support and invoice the services we have agreed (performance of a contract).
• To keep our website and systems secure and to understand how the site is used (our legitimate interests).
• To send updates or newsletters you have signed up for (your consent, which you can withdraw at any time).
• To meet tax, accounting and other legal obligations.

When we build, host or support a CSMS, app or dashboard for a client, the client decides what data about its drivers, chargers and sessions is collected and why. For that data the client is the data controller (data fiduciary) and we act only as its processor, on its documented instructions. We sign a data processing agreement with clients on request. Drivers should contact the operator of the charging network first for questions about their data.

Your data is never sold or rented. We share it only with service providers that help us run the business, under contracts that require them to protect it, and only as far as needed. These are, by category:

• Cloud hosting and infrastructure providers.
• Payment processors, such as Razorpay.
• Analytics, such as Google Analytics.
• Scheduling, email and form delivery services used to answer you.

We may disclose data where the law requires it, to respond to a valid legal request, or to protect the rights, safety and property of our clients, our team or the public. Where the law allows, we tell the affected client first.

We protect data with technical and organisational measures appropriate to the risk, including:

• Encryption in transit (TLS/SSL) and encrypted storage where needed.
• Firewalls and hardened, regularly updated infrastructure.
• Access on a need-to-know basis, with roles and permissions, and credentials kept out of source code.
• Confidentiality obligations for everyone on our team and our subcontractors who handles data.

If we become aware of a security incident that affects personal data we hold or process, we act to contain it, notify affected clients without undue delay, and notify regulators and individuals where the law requires.

We keep personal data only as long as needed for the purpose it was collected, or as required by tax, accounting and other laws. Client project data is returned or deleted at the end of an engagement, as agreed in the contract. After that, data is deleted or anonymised.

We work with clients worldwide, and our hosting providers may store data outside your country. Where we transfer data across borders, we use providers with recognised security standards and the safeguards required by applicable law, such as standard contractual clauses where they apply.

Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023 and, where they apply, the EU and UK GDPR, you can ask to access, correct, update or delete your personal data, withdraw consent, or object to processing. Write to mehmedkhan16@gmail.com and we will respond within the time the law requires. You also have the right to complain to your data protection authority.

We use essential cookies to run the site and, with your consent, analytics cookies to understand how it is used. You can change your choice at any time, or block and delete cookies in your browser settings; the site will still work.

Our website and services are for businesses and are not directed at children under 18. We do not knowingly collect their data.

Mohammed Khan, Founder, Waynull, Mumbai, India, 401202. Email mehmedkhan16@gmail.com.

We may update this policy as our services and the law change. The date at the top shows the latest version. Where a change is significant, we will tell active clients directly.

By using our website and services, you acknowledge this Privacy Policy.

Waynull, Mumbai, India, 401202. Email mehmedkhan16@gmail.com, phone +91 70570 45789. For contract, security or data protection questions, write to the same address and mark the subject line accordingly so it reaches the right person quickly.