Privacy Policy

PowerXchange Portal

Effective Date: 9th June' 2025

Last Updated: 9th June' 2025

1. Introduction

This Privacy Policy ("Policy") outlines how PowerXchange Innovations Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at 7, 714-716, Princess Business Skypark, A.B. Road, Scheme no. 54, Vijay Nagar, Indore, Madhya Pradesh -- 452010, and corporate office at 103 A, Unitech Cyber Park, Sector-39, Gurgaon, Haryana -- 122003 (hereinafter referred to as "Company", "we", "our", or "us"), collects, processes, stores, and safeguards the personal information of users ("you", "user", "consumer", or "prosumer") who use the PowerXchange Portal (accessible atwww.powerxchange.io) and related mobile applications and services (collectively referred to as "Platform").

By accessing or using the Platform, you signify your agreement to this Privacy Policy and provide express consent to the terms herein, in accordance with the Information Technology Act, 2000, theInformation Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and theDigital Personal Data Protection Act, 2023.

2. Applicability

This Policy applies to all users of the Platform, including but not limited to consumers prosumers, franchisees, aggregators, vendor partners, and any person availing services or interacting with the Platform.

3. Categories of Data Collected

We collect the following categories of personal and sensitive personal information:

a. Personal Identification Data

  • Full name, contact number, email address
  • Residential and service address
  • Date of birth, gender, nationality

b. KYC & Regulatory Data

  • Aadhaar number (masked), PAN, Voter ID
  • KYC documentation and photographs
  • Proof of address and identity

c. Energy Usage & Generation Data

  • Rooftop solar generation metrics
  • Electricity consumption and net metering details
  • Smart meter and P2P energy trade data

d. Financial & Payment Data

  • Bank account information
  • UPI IDs and transaction logs
  • Invoices, billing records, and subsidy/loan status

e. Technical & Device Information

  • IP address, browser type, device ID
  • Location (with permission)
  • Cookies and session metadata

4. Purpose of Data Collection

Your personal data is collected and processed for the following lawful purposes:

  • To register and onboard you onto the PowerXchange Platform
  • To verify your identity via KYC and regulatory integrations
  • To facilitate Peer-to-Peer (P2P) solar energy trading
  • To monitor, record, and analyze your energy generation and usage
  • To connect you with EPC vendors, financiers, and government subsidy portals for energy services.
  • To process payments, refunds, incentives, and commissions
  • To comply with applicable laws and directions from DISCOMs, SLDCs, CERC/SERCs
  • To send communications, alerts, newsletters, and updates
  • To improve our services through analytics and machine learning

5. Legal Basis for Processing

The Company processes your data under the following legal grounds:

  • Consent: Explicit consent obtained at the time of registration or use
  • Contractual Necessity: To perform obligations arising out of user agreements
  • Legal Compliance: As required by Indian electricity laws, tax regulations, and data protection statutes
  • Legitimate Interest: For security, fraud detection, product improvement, and service delivery

6. Data Sharing and Disclosure

We may disclose your data to third parties in the following circumstances:

  • With DISCOMs, SLDCs, and regulatory authorities for grid integration and energy settlement
  • With EPC vendors, Distributors, OEMs, financiers, and government portals for services related to solar installation & upgradation, solar maintenance, financing, and subsidy processing etc.
  • With third-party service providers (e.g., payment gateways, analytics platforms, CRM providers) under confidentiality agreements
  • In response to lawful requests from government or regulatory bodies
  • In case of corporate restructuring, merger, or acquisition

We do not sell or lease your data to any third party for marketing or unrelated purposes.

7. Data Storage, Retention, and Security

  • All data is stored on secure servers located within India, in compliance MEITY with applicable data localization guidelines.
  • Data is retained as long as necessary to fulfil the purpose for which it was collected and for legal compliance.
  • We employ reasonable security practices and procedures, including:
    • SSL encryption and firewalls
    • Access controls and role-based restrictions
    • Two-Factor Authentication (2FA)
    • Regular security audits and compliance checks

8. Your Rights

As a data principal under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access and review your personal data
  • Request correction or update of incorrect information
  • Withdraw consent at any time
  • Request deletion of non-essential personal data
  • File a grievance or escalate to the Data Protection Board of India

You may exercise these rights by contacting the Grievance Redressal Officer mentioned below.

9. Consent Management

  • You provide explicit consent by registering or using the Platform.
  • You may withdraw consent through email or platform settings, which may affect service availability.
  • We maintain records of consent for compliance and audit purposes.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Maintain session and user authentication
  • Personalize content and enhance experience
  • Analyze traffic and usage trends

You may choose to disable cookies via browser settings, although some features may be restricted.

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors. If informed, we will promptly delete such data.

12. Grievance Redressal Officer

In accordance with Rule 5(9) of the Information Technology Rules, 2011, and Section 13 of the DPDP Act, the Company has appointed the following officer:

Address to the person with

Designation: Grievance Redressal Officer

Email: support@powerxchange.io

Registered Address: 7, 714-716, Princess Business Skypark, A.B. Road, Scheme no. 54, Vijay Nagar, Indore, Madhya Pradesh -- 452010

Response Time: Within 15 working days

13. Policy Updates

We reserve the right to update or revise this Policy at any time. Any changes will be communicated through the Platform or email. Continued usage of the Platform constitutes acceptance of the revised Policy.

14. Contact Information

For any questions, feedback, or data requests, you may contact.

PowerXchange Innovations Private Limited:

📍 Registered Office: 7, 714-716, Princess Business Skypark, A.B. Road, Scheme no. 54, Vijay Nagar, Indore, Madhya Pradesh -- 452010

📍 Corporate Office: 103 A, Unitech Cyber Park, Sector-39, Gurgaon, Haryana -- 122001

📧 Email: support@powerxchange.io

🌐 Website: www.powerxchange.io