Privacy Policy

A. Personal Information You Provide Directly

We collect personal information that you voluntarily provide to us when you register for an account, place an order for subscriptions, express an interest in obtaining information about us or our products, or otherwise when you contact us. The personal information we collect may include the following:

• Account Credentials: Full legal name, corporate email address, username, and password (stored in encrypted form).
• Contact Information: Mobile phone number and office address (for support and operational dispatch).
• Professional Identity: Job title (Driver, Fleet Manager, Site Administrator), Employee ID, and Driver's License Number for professional verification and legal compliance.
• Financial & Billing Data: Subscription billing records, company GST/Tax identification numbers, and billing addresses for invoice generation. All payment card details are processed exclusively by our payment processor, Razorpay, and are never stored on EKA Mobility servers.
• User-Submitted Media: Profile photographs, proof-of-delivery images, and vehicle damage documentation photographs uploaded within the platform.

B. Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, and information about how and when you use our Services.

• Precise Geolocation Data: We collect live location to show assigned vehicle position, calculate optimal navigation routes, record trip history ("Daily Trails"), enable geofence alerts, and optimize fleet logistics. This data is collected continuously—including when the application runs in the background or the screen is turned off—to ensure active driver dispatching, safety tracking, and accurate driver scoring.
• Device Telemetry: Device hardware name, manufacturer, model, operating system version, Unique Device Identifier (IMEI/UUID), and network carrier information to ensure platform compatibility and security.
• Log & Usage Data: IP addresses, browser type and version, pages or screens visited, time stamps, access durations, crash reports, and in-app interaction patterns for security monitoring and service quality improvement.
• Internet Activity & App Telemetry: In-app interaction patterns including feature usage frequency, session lengths, screen navigation, and error events, collected via our internal platform logging system for service quality and performance improvement.
• EV Telematics Data: Data transmitted from EKA electric vehicle onboard systems, including battery state of charge (SoC), battery health and temperature, real-time charging status, estimated remaining range, energy consumption (kWh per trip), motor diagnostics, and regenerative braking data. This data is generated automatically by EKA EVs and is the primary operational dataset used by the Eka Connect platform for fleet management, predictive maintenance scheduling, and Total Cost of Ownership (TCO) analysis.
• Professional & Employment Data: Trip records, mission logs, fleet assignment records, delivery confirmations, and driver performance data generated during the use of the platform in a professional capacity.

C. Information We Do NOT Collect

We are committed to data minimisation. The following categories of data are explicitly not collected by EKA Mobility:

• Raw credit or debit card numbers (handled exclusively by Razorpay).
• Biometric data such as fingerprints or facial geometry (device biometric authentication is processed locally by the device OS and is never transmitted to or stored on our servers).
• Audio or video recordings, thermal imaging, or sensory data, unless explicitly submitted by you.
• Education records or student data (excluding basic identification tracking mandated in B2G school bus contracts).
• Consumer profiling inferences for behavioral advertising or marketing.
• Health or medical data.
• Social media account data (we do not support social login).

We process your personal information for the following purposes:

• To facilitate account creation and authentication: Enabling secure login and session management for drivers and fleet administrators on the Eka Connect platform.
• To deliver and maintain the Service: Providing real-time EKA electric vehicle tracking, battery & charging status monitoring, geofencing, route optimisation, Daily Trail history, and fleet analytics to fulfil our contractual obligations with your organisation.
• To provide AI-powered predictive diagnostics: Analysing EV telematics data (battery health, motor diagnostics, energy consumption patterns) using machine-learning models to detect anomalies, predict component failures before they occur, and recommend preventive maintenance — reducing unplanned downtime and optimising Total Cost of Ownership (TCO) for fleet operators.
• To ensure vehicle and asset security: Processing geolocation data for intrusion detection, tow-alert monitoring, and asset recovery assistance.
• To enhance road safety and EV performance: Analysing driving behaviour patterns, speed events, energy efficiency, and route optimisation to support fleet managers in improving operational safety, reducing energy costs, and extending EV battery life.
• To manage subscriptions and billing: Processing subscription orders through our payment partner, Razorpay, and generating invoices and tax receipts.
• To respond to user inquiries & provide support: Addressing complaints, troubleshooting technical issues, and managing support requests submitted via email or phone.
• To send administrative communications: Dispatching critical operational notifications, maintenance alerts, system status updates, and subscription renewal reminders.
• To detect and prevent fraud: Monitoring for suspicious login activity, GPS spoofing attempts, and unauthorised data access to protect the integrity of the platform and client assets.
• To improve our Services: Using anonymised and aggregated analytics data to identify usage trends, feature gaps, and performance bottlenecks to improve the platform for all clients.
• To comply with legal obligations: Retaining records as required by Indian tax law, audit requirements, and responding to lawful government or court orders.
• To fulfil contractual obligations: Our service is delivered pursuant to an agreement with the Client; processing your data is inherently necessary to fulfil our end of that contract.

B. Lawful Basis: B2C vs B2G Contexts

Depending on your role and your organisation, our lawful basis for processing varies:

• Business-to-Consumer (B2C): For individual consumers using our fleet services, we process data based on your explicit consent. You may withdraw this consent at any time (see "Your Rights" below).
• Business-to-Government (B2G): For government fleet customers (e.g., municipal transport, official vehicles), data processing is governed by the service agreement with the Agency based on contractual necessity, statutory duty, and public interest. The Agency establishes the legal basis to share data with us.
• Business-to-Business (B2B): For commercial fleet operators, processing is based on contractual obligations to deliver the requested services.

C. Data Breach Notification

In the event of a personal data breach, we maintain incident response protocols to promptly notify affected users and regulators as required by law. This includes notifying relevant authorities within mandated timelines (e.g., within 72 hours under GDPR and the India DPDP Act, and within 6 hours to CERT-In) and informing affected individuals as soon as practicable or without undue delay.

We may share your personal data with the following categories of service providers, each of whom is bound by data processing agreements and confidentiality obligations:

We may also disclose your personal information in the following limited circumstances:

• Legal Compliance: When required to comply with a legal obligation, court order, subpoena, or government authority request, in accordance with applicable law.
• Protection of Rights: When disclosure is necessary to enforce our Terms of Service, protect the safety of any person, or prevent fraud and illegal activity.
• Business Transfers: In connection with any merger, acquisition, reorganisation, sale of assets, or transition of our business or a portion thereof, where personal data may be transferred as a business asset, subject to the same privacy commitments herein.
• With Your Consent: In any other circumstances where you have provided explicit prior consent for a specific disclosure.

We use the following tracking technologies:

• Session Cookies: Used to maintain secure, authenticated user sessions between the driver mobile app and the web-based fleet management dashboard. These cookies are strictly necessary for the functioning of the platform.
• Google Maps Platform APIs: We use Google Maps APIs which may load mapping tiles, request the device's GPS location, and set identifiers to render vehicle routes and asset positions on the interactive map. By using Eka Connect, you agree to be bound by the Google Maps Platform Terms of Service.
• Razorpay Identifiers: Our payment gateway, Razorpay, may use session identifiers and security tokens during the checkout process to prevent fraud and authenticate transactions.

We do not use social media cookies, cross-site tracking cookies, remarketing pixels, or any advertising-network cookies. Users on supported browsers may configure cookie preferences via browser settings; however, disabling essential cookies will impair platform functionality.

All accounts on Eka Connect are created using a corporate email address and password, or Single Sign-On (SSO) credentials provided by the organisation's IT administrator. We do not integrate with Facebook Login, Google Sign-In (as an authentication method), Apple ID (Sign in with Apple), or any other social media authentication provider. This design decision ensures the highest possible security standard for our B2B enterprise clients.

EKA Mobility's primary application infrastructure and data storage are located in India. To perform real-time navigation rendering, geocoding, route optimization, and vehicle tracking services, we share precise GPS coordinates and technical device identifiers across borders with global service providers (such as Google Maps API servers located in the United States and other global regions).

If you are accessing the service from the European Union (EU), United Kingdom (UK), South Africa, Australia, New Zealand, or any other jurisdiction, please be aware that your personal data and telemetry may be transferred to and processed in India, the United States, or other international jurisdictions where data protection laws may differ. We implement the following strict safeguards for international and cross-border data transfers:

• Standard Contractual Clauses (SCCs): We rely on the European Commission's Standard Contractual Clauses (SCCs) as the primary legal mechanism for transferring personal data, GPS locations, and telemetry from the EU/EEA, UK, and other regulated regions to India and the United States. These clauses are incorporated into our data processing agreements with third-party service providers including Google and AWS.
• Data Processing Agreements (DPAs): We have entered into formal Data Processing Agreements with all our third-party service providers (listed in Section 3) requiring them to maintain contractual obligations equivalent to the level of data protection applicable to your jurisdiction.
• Security Standards: All transfers are conducted over encrypted HTTPS/TLS 1.3 channels, and stored data is encrypted at rest within our infrastructure to prevent unauthorized access.

We are not registered under the US-EU Data Privacy Framework (DPF) as this framework applies specifically to US-based organisations, and EKA Mobility is incorporated in India.

We retain personal information in accordance with the following schedule:

• Account & Identity Data: Retained for as long as your account is active. Upon account closure, data is retained for up to 7 years (84 months) to comply with legal, tax, and financial reporting obligations.
• Geolocation & Trip History Data: Precise GPS logs, Daily Trail records, and mission audit data are retained for the duration of the active fleet session and in historical archive for up to 7 years (84 months). This retention period is standard practice in the logistics and transport industry for insurance claims, legal disputes, and regulatory audits.
• Internet Activity & App Telemetry: Internal platform usage telemetry is retained for up to 2 years (24 months) for operational monitoring and product improvement purposes, after which it is anonymised or deleted.
• Subscription & Billing Records: Financial records and transaction histories are retained for a minimum of 7 years (84 months) as required by the Income Tax Act, 1961 (India) and GST regulations.
• Professional & Employment Data: Trip performance data, fleet assignments, and driver mission logs are retained for up to 7 years (84 months) for audit, legal, and contractual reference.

When we no longer have a legitimate operational or legal purpose to retain personal information, we will either delete it securely or anonymise it so that it can no longer be associated with a specific individual.

Google Maps Location Caching

We cache precise latitude and longitude coordinates obtained via the Google Maps Platform API for the duration of the active fleet trip, and maintain this data in historical logs for up to 84 months (7 years) for legal and audit compliance. This caching is disclosed in accordance with Google Maps Platform usage policies.

Eka Connect is a professional B2B fleet management platform intended exclusively for use by adults in a professional or commercial capacity. The operation of commercial vehicles requires a valid driving licence which, under Indian law and most global jurisdictions, requires the holder to be an adult. Accordingly, our Services are not directed at, marketed to, or designed for minors under 18 years of age.

We do not knowingly collect personal information from children without verified parental consent. If our services extend to minors (e.g., B2G school bus tracking), we handle such data in strict compliance with applicable laws (like COPPA or the DPDP Act). If we become aware that we have collected personal information from a person under 18 years of age without proper consent, we will take immediate steps to deactivate the account and delete the associated personal data from our systems. Parents or guardians can request deletion of a child’s data by contacting us immediately at info@ekamobility.com.

Regardless of your location, EKA Mobility provides the following universal data subject rights to all users of the Eka Connect platform:

• Right of Access: You have the right to request a copy of the personal information we hold about you, including the categories of data, the purposes of processing, and the categories of recipients to whom it has been disclosed.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal information held about you.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. We have provided a Request Account Deletion mechanism in our mobile application that assists you in submitting a deletion request to our support team, or you can contact us directly at info@ekamobility.com (see Section 19 for details).
• Right to Data Portability (Export): You have the right to request your personal identification data and historical driving telemetry in a structured, commonly used, and machine-readable format (JSON/CSV), and to have it transferred to another data controller where technically feasible.
• Right to Restrict Processing: You may request that we limit the way in which we use your personal data in certain circumstances.
• Right to Object: You have the right to object to the processing of your personal data for purposes of legitimate interests (See Section 2) at any time.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing (e.g., push notifications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Exercising Your Rights (B2C vs B2G)

• B2C Consumers & Independent Drivers: You may exercise your data rights—including initiating account deletion and data export requests—directly within the Eka Connect mobile application under Settings > Account, by contacting us at info@ekamobility.com (which is automated via the app's support flow), or by post to our registered address.
• B2G/B2B End Users (Corporate/Government Drivers): If your data is processed through your employer or a government agency (e.g., you are a government driver), requests should be coordinated through your Agency’s or Company's data officer. We will comply with governmental or client directions and forward your request to the relevant data controller where required.

We will respond to all legitimate direct requests within 30 days, subject to applicable law. In complex cases, we may extend this period by an additional 60 days with prior notice. Account deletion requests received via support are reviewed and deactivation occurs within 72 hours, with complete erasure from active production systems within 30 days.

You also have the right to lodge a complaint with the relevant data protection supervisory authority in your country if you believe your rights have been violated. Detailed jurisdiction-specific rights and supervisory authorities are described in Sections 10–15 below.

EKA Mobility (Pinnacle Mobility Solutions Private Limited), a subsidiary of Pinnacle Industries and India's leading electric commercial vehicle manufacturer, is incorporated under the Companies Act, 2013 and is subject to the Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules thereunder. We act as a Data Fiduciary under the DPDP Act in respect of all personal data we collect and process through the Eka Connect platform. In certain contexts (e.g., when processing fleet operator data on behalf of client organisations), we may also act as a Data Processor.

Lawful Basis under the DPDP Act: We process personal data on the following lawful bases:

• Consent: Where required, we obtain clear, informed, and freely given consent from data principals (users) at the time of registration and before processing sensitive data categories such as precise geolocation.
• Legitimate Uses: We process data to comply with legal obligations under Indian law; to fulfil subscriptions and contracts with client organisations; and for public interest purposes where applicable.

Rights of Data Principals under the DPDP Act:

• Right to Information: You have the right to obtain information about the personal data we hold about you and how it is being processed.
• Right to Correction and Erasure: You may request the correction of inaccurate data or the erasure of data that is no longer necessary, subject to applicable retention obligations.
• Right of Grievance Redressal: You may contact our Grievance Officer (see Section 18) with any grievance regarding the processing of your personal data. We will acknowledge receipt within 48 hours and resolve the grievance within 30 days.
• Right to Nominate: You have the right to nominate another individual who may, in the event of your death or incapacity, exercise your data rights on your behalf.

Data Localisation: Our primary data centres for storing personal data of Indian users are located in India, in accordance with applicable data localisation requirements.

Data Protection Board: If you are unsatisfied with our response to your grievance, you may appeal to the Data Protection Board of India once it is constituted and operational under the DPDP Act.

Grievance Officer (India):
Name: Grievance Redressal Cell
Email: info@ekamobility.com
Phone: 020-67679900
Address: Pinnacle Mobility Solutions Pvt. Ltd., Sai Radhe Complex, Office No. G 101, Kennedy Road, Pune 411 001, Maharashtra, India.

If you are accessing Eka Connect from the European Union (EU) or the United Kingdom (UK), the General Data Protection Regulation (GDPR) and UK GDPR (collectively, "GDPR") apply to our processing of your personal data. EKA Mobility acts as the Data Controller for the purposes of the GDPR in respect of personal data collected from EU/UK users.

Legal Bases for Processing under the GDPR:

• Performance of a Contract (Article 6(1)(b)): The primary legal basis. We process your data to deliver the fleet management services you have contracted for. Real-time tracking, route optimisation, and mission logging are inseparable from our contractual obligations.
• Legitimate Interests (Article 6(1)(f)): We process data to ensure fleet security, detect and prevent fraud, analyse app performance, improve road safety, and protect the platform's integrity. These interests are balanced against your fundamental rights.
• Compliance with Legal Obligation (Article 6(1)(c)): We retain data to comply with Indian tax law, audit requirements, and applicable EU regulations.
• Consent (Article 6(1)(a)): For optional data uses such as push notifications, we rely on your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time.

Special Categories of Data (Article 9 GDPR): Precise geolocation data may constitute "special category" data in certain interpretations. We rely on explicit consent and the necessity for employment contract performance as our dual legal basis for processing this data.

Your Rights under GDPR: In addition to the rights listed in Section 9, you have the right to lodge a complaint with your local EU/UK Data Protection Authority (DPA). In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

No EEA/UK Representative: We have not currently appointed a formal EU/UK Representative under Article 27 GDPR. For all GDPR-related inquiries from EU/UK residents, please contact us directly at info@ekamobility.com.

Data Transfer Mechanism: All transfers of personal data of EU/UK data subjects to India and the United States are conducted under the European Commission's Standard Contractual Clauses (Module 2: Controller to Processor) or (Module 1: Controller to Controller) as applicable.

This section applies to residents of the United States, including but not limited to residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and Florida (FDBR).

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined under the CCPA/CPRA:

• Identifiers: Real names, email addresses, IP addresses, device IDs — Collected and Disclosed (to cloud/analytics providers).
• California Customer Records: Names, contact details, billing addresses — Collected and Disclosed.
• Professional or Employment-Related Information: Driver assignments, trip logs, fleet role — Collected and Disclosed.
• Internet or Other Electronic Network Activity: In-app interaction telemetry via internal platform logging — Collected.
• Geolocation Data: Precise GPS coordinates (Sensitive Personal Information under CPRA) — Collected and Disclosed (to Google Maps).
• Sensitive Personal Information: Account login credentials, Driver's License numbers, precise geolocation, and financial information (via Razorpay) — Collected and Disclosed.

We do not sell or share personal information for cross-context behavioural advertising purposes. We have not sold personal information in the preceding 12 months.

Data Retention (CCPA)

All categories listed above are retained for as long as the user has an active account and for up to 7 years (84 months) thereafter to comply with audit, legal, and financial reporting obligations.

Your Rights under CCPA/CPRA

• Right to Know: You may request disclosure of the specific pieces of personal information we hold about you and the categories of third parties with whom it is shared.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions (e.g., legal retention obligations).
• Right to Correct: You may request correction of any inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell or share data, so this right does not apply in the traditional sense; however, we honour all opt-out requests as a matter of policy.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of your sensitive personal information (geolocation, login credentials, driver's license) to only those purposes necessary to provide the services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

California Shine the Light: California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

CCPA Metrics: EKA Mobility does not process the personal information of 10 million or more California residents annually and is therefore not subject to the mandatory public CCPA metrics disclosure requirement.

To submit a US privacy rights request, please email info@ekamobility.com with the subject line "US Privacy Rights Request."

Where we process personal information of data subjects located in the Republic of South Africa, we comply with the Protection of Personal Information Act 4 of 2013 (POPIA) and any applicable regulations made thereunder.

Conditions for Lawful Processing under POPIA: We process personal information only where:

• The data subject has consented to the processing;
• The processing is necessary for the performance of a contract to which the data subject is party;
• The processing complies with a legal obligation; or
• The processing is necessary for the legitimate interests of EKA Mobility that are proportionate and do not override the data subject's rights.

Special Personal Information: We process data concerning criminal behaviour (specifically Driver's License violations, if reported) and precise location information as special personal information where necessary for the provision of our fleet management services, in accordance with Section 32 of POPIA.

Your Rights under POPIA:

• The right to be notified that your personal information is being processed (this Policy serves as that notice).
• The right to access your personal information and the identity of all third parties who have access to it.
• The right to request the correction or deletion of personal information.
• The right to object to the processing of your personal information.
• The right to submit a complaint to the Information Regulator of South Africa at inforegulator.org.za.

Where we collect personal information from individuals located in Australia, we do so in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Key Commitments under the APPs:

• APP 1 — Open and Transparent Management: This Privacy Policy constitutes our open disclosure of how we manage your personal information.
• APP 3 — Collection of Solicited Personal Information: We only collect personal information that is reasonably necessary for the performance of our fleet management services.
• APP 5 — Notification of Collection: We notify you of the purpose of data collection, the entities to which we typically disclose it, and your ability to access and correct your information at or before the time of collection.
• APP 6 — Use or Disclosure: We use and disclose personal information only for the primary purpose of collection (fleet management services) or with your consent.
• APP 8 — Cross-Border Disclosure: When we disclose your personal information to overseas recipients (e.g., Google in the United States), we use contractual mechanisms to ensure the recipient handles it in a manner consistent with Australian privacy law.
• APP 11 — Security of Personal Information: We take reasonable steps to protect all personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure.
• APP 12 — Access to Personal Information: You have the right to request access to the personal information we hold about you.
• APP 13 — Correction of Personal Information: You have the right to request correction of personal information we hold about you if it is inaccurate, out of date, incomplete, or misleading.

Complaints regarding our handling of your personal information may be lodged with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Where we collect personal information from individuals located in New Zealand, we do so in accordance with the Privacy Act 2020 (NZ) and the 13 Information Privacy Principles (IPPs) contained therein, as administered by the Privacy Commissioner of New Zealand.

Key Commitments under the Privacy Act 2020 (NZ):

• Purpose of Collection (IPP 1): We collect personal information only for lawful purposes connected with the provision of our fleet management services.
• Source of Information (IPP 2): We collect personal information directly from you wherever reasonably practicable.
• Collection from Subject (IPP 3): We clearly inform you at the time of collection about the purpose of collection, the intended recipients, and your rights of access and correction.
• Storage and Security (IPP 5): We take steps that are reasonable in the circumstances to protect personal information from loss, unauthorised access, use, modification, or disclosure.
• Access (IPP 6): You have the right to access your personal information held by us, subject to grounds for refusal under the Act.
• Correction (IPP 7): You may request correction of your personal information if it is inaccurate.
• Limits on Use (IPP 10): We use your personal information only for the purpose for which it was collected, unless you consent to another use or use is permitted by law.
• Privacy Breach Notification: We will notify the Privacy Commissioner and affected individuals about any notifiable privacy breach, i.e., one that causes or is likely to cause serious harm, as required by the Privacy Act 2020.

Complaints may be lodged with the Office of the Privacy Commissioner of New Zealand at privacy.org.nz.

Most web browsers and some mobile operating systems and mobile applications include a "Do-Not-Track" (DNT) feature or setting you can activate to signal your privacy preference not to have data about your online activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

Global Privacy Controls (GPC): We currently do not process Global Privacy Control signals as we have not implemented the required technical infrastructure. We will update this notice if GPC support is added in the future.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this notice, and the updated version will be effective as soon as it is accessible. When we make material changes to this Privacy Policy, we will notify you either by prominently posting a notice of such changes within the Eka Connect platform or by directly sending you a notification via email. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

Your continued use of the Eka Connect Services after any update to this Privacy Policy constitutes your acknowledgement of the updated terms. Where required by applicable law, we will obtain your explicit consent to material changes.

You may exercise your data rights in the following ways:

• Request Account Deletion (Within the App / Support): Because accounts are administratively provisioned by your employer or fleet administrator, users cannot delete accounts directly in an automated manner. To request permanent account deletion and de-identification of personal data, open the Eka Connect application, navigate to Settings > Account > Request Account Deletion (which will assist you in sending a pre-formatted email deletion request to info@ekamobility.com), contact your organization's Fleet Administrator, or email us directly at info@ekamobility.com.
• Data Export (Portability): To export your personal profile details and trip-telemetry logs in a structured, machine-readable format, navigate to Settings > Account > Request Data Export in the mobile app, or contact our support team at info@ekamobility.com.
• Profile Updates (Within the App): For regular account details such as name, email, and phone number, you may update your profile directly within the Eka Connect application settings at any time.
• Via Your Fleet Administrator: Many operational data rights relating to your role, trip history, and fleet assignment may be managed by your organisation's Fleet Administrator within the Admin Dashboard.
• By Contacting Us Directly: For other privacy requests, please contact us at info@ekamobility.com with the subject line "Data Request — [Your Request Type]".

We will review and respond to all submitted data requests within 30 days of receipt, in accordance with applicable law. Please note that certain requests may be subject to exceptions, including our legal data retention obligations described in Section 7 (e.g., maintaining transaction records for tax compliance or anonymized fleet data), and we will inform you if any exception applies to your request.

This application uses the Google Maps Platform APIs. By using Eka Connect, you agree to be bound by the Google Maps Platform Terms of Service and the Google Privacy Policy.

• Our Maps Platform implementation accesses user device location information for the purpose of placing vehicles on a map and calculating routes.
• We obtain (or request) the user's location data with knowledge and consent at the time of onboarding.
• We cache precise latitude/longitude coordinates retrieved via the Google Maps API:
  • During a trip: For the full duration of the active fleet mission.
  • In historical logs: For up to 84 months (7 years) for legal, insurance, and audit compliance in the logistics industry.

This use of Google Maps is consistent with Google's Maps Platform Acceptable Use Policy for professional logistics and fleet management applications.