Privacy Policy

Introduction

This Privacy Policy explains how CROSSLYNX TECHNOLOGIES SERVICES PRIVATE LIMITED collects, uses, discloses, stores, and protects information when you use the App to manage and monitor your electricity connection(s). It is intended to help you understand our data practices and your choices.

By downloading, installing, or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the App. Certain services within the App are provided in connection with your electricity utility/distribution company; where the utility acts as the controller of your consumer data, its own privacy terms may also apply.

About the Application

The App is a Smart Meter / Electricity Management application that allows consumers to:

• register and log in (including OTP-based verification) and use a guest recharge option;
• view their consumer profile, meter information, and connection details;
• monitor electricity consumption, load, voltage, and net-metering data;
• view bills and balances, recharge (prepaid) or pay bills (postpaid), and view transaction history;
• view tariff/charges and energy-saving information;
• receive notifications, alerts, campaigns, and broadcast/outage messages;
• raise and track service requests and support complaints; and
• manage language, theme, and notification preferences.

Information We Collect

We collect only the information needed to provide the services above. Categories collected in the App:

Information You Provide

• Account & identity: name, mobile number, email address, date of birth, password, consumer/account number.
• Profile & connection details: address, consumer type/category, contracted load, connection details.
• Tenant details (if you add tenants): tenant name, tenant mobile number, and tenant login password.
• Service requests / new connection / change requests: applicant and family names, contact details, addresses, ID number, category/caste, load and appliance details, and uploaded documents (identity proof, ownership proof, address proof, and supporting files in JPG/JPEG/PNG/PDF format, up to 5 MB each).
• Support/complaints: the issue category, your free-text description, chat messages, and any image you choose to attach.
• Profile photo: an image you capture or select (compressed before upload); you can also delete it.

Some of the above (e.g., identity documents and category information) may constitute sensitive personal information. We process it only to fulfil the specific request you submit. Pending legal review

Information Generated Through Use

• Authentication/session tokens, transaction and request records, and in-app preferences.

Information We Do Not Collect in the App

• We do not collect your card number, CVV, UPI PIN, or net-banking credentials (see Payment and Recharge Information).
• We do not read your SMS messages; OTPs are entered manually.
• We do not collect your device's GPS location (see Location and Google Maps).
• We have not integrated third-party analytics, advertising, or cross-app tracking SDKs.

Smart Meter and Electricity Information

To provide electricity-management services, the App displays information linked to your consumer/account and smart meter, including:

• Meter details: meter type/make, device/serial number, firmware version, phase, current rating, frequency, and associated distribution transformer.
• Consumption: daily, weekly, monthly, seasonal, and yearly usage, units, and estimated cost, including historical trends.
• Load & voltage: maximum load demand, load values, power quality, and average/maximum/minimum voltage (per phase).
• Net metering: import/export energy (for applicable connections).
• Balance & bills: wallet/current balance, arrears, outstanding amounts, bill amounts and components (energy/fixed/other charges, taxes, penalties), due dates, and emergency-credit status.

This information is retrieved from, and processed by, CROSSLYNX-operated backend systems and/or your electricity utility's systems to deliver the App's features.

Location and Google Maps

The App does not collect, store, or transmit your device's GPS location.

• The App uses Google Maps only on the Power Outage screen to render a map that shows the position of your meter and the associated distribution transformer. These coordinates are provided by the backend/utility, not obtained from your device.
• Your service-connection location (the latitude/longitude of your meter installation) may be part of your account/profile data maintained by the utility and returned to the App by our backend. This is information about your electricity connection — it is not your device's live location and is not derived from your device's GPS.
• On Android, the App declares location permissions and may request location permission when you open the Power Outage screen (to support standard map behaviour). Even if granted, the App does not read your device's GPS coordinates — there is no current-location retrieval in the App.
• On iOS, the App does not include a location-usage description, consistent with not collecting device location.
• The App does not perform continuous or background location tracking, geocoding, reverse-geocoding, or use of the Places API.
• Map rendering involves Google Maps Platform, which may process technical data (such as map tile requests) in accordance with Google's privacy practices.

Your control: You can allow or deny the location permission when prompted, and you can change it at any time in your device Settings → Apps/App permissions. Denying it does not prevent you from using the rest of the App.

Notifications

• Why we request it: to send you push and in-app notifications relevant to your electricity service.
• Provider: notifications are delivered using Firebase Cloud Messaging (FCM) by Google. To deliver them, the App generates a push notification token (device token) — a technical identifier used to route messages to your device — and registers it with our backend. On iOS, an APNs token is used to obtain the FCM token.
• Types of notifications that may be sent include: bill and recharge/payment updates, electricity/meter alerts, balance/service alerts, outage notifications, broadcast messages, and campaign updates. Notifications may contain account, billing, recharge, or electricity-service information.
• Your control: you can enable/disable notifications in your device settings at any time, and the App's Settings provide notification and alert preferences (e.g., email/SMS/popup notifications, electricity alerts, bill-delivery preference).

The device token is treated as a technical/device identifier used solely to deliver notifications.

Payment and Recharge Information

• Payments (prepaid recharge and postpaid bill payment) are processed by the BillDesk payment gateway. Payment is completed on a BillDesk-hosted page shown inside a secure in-app WebView.
• CROSSLYNX does not collect or store your card number, CVV, UPI PIN, or net-banking credentials. You enter these directly with BillDesk. BillDesk processes payment information under its own privacy policy and terms.
• The App processes and stores (in your account/transaction history) payment metadata such as: recharge/bill amount, order ID, BillDesk order ID, transaction ID, payment status, charge amount, currency, payment mode, card type/name (as returned by the gateway), bank reference/tracking number, invoice reference, and timestamps.
• Guest recharge: you may recharge without logging in by providing your consumer/account number(s), mobile number, and recharge amount.
• Sensitive payment screens are protected against screenshots/screen recording.

Device and Technical Information

• Push notification token (FCM/APNs) — stored locally and registered with our backend to deliver notifications.
• Platform type (Android/iOS) — used to configure notification behaviour.
• Firebase installation/instance identifiers — generated by the Firebase SDK for messaging (technical).
• Network information / IP address — as inherent to any internet communication, your IP address is visible to the servers and third-party services you interact with.
• Diagnostic logs — request/response logs are produced only in internal debug builds and are not transmitted to us in production.

The App itself does not implement collection of your device model, hardware identifiers, or advertising ID; however, integrated Google/Firebase and Google Maps services may process certain technical/device information under Google's own policies.

How We Use Information

We use information to:

• register and authenticate you and maintain your session;
• provide electricity-management features (profile, meter, consumption, load/voltage, net metering);
• display balances and bills and process recharge/bill payments via BillDesk;
• deliver notifications, alerts, campaigns, and broadcast/outage messages;
• process and track service requests and support complaints;
• save/share documents you request (bills, receipts, statements, tariff);
• remember your preferences (language, theme, notifications);
• maintain security, prevent unauthorized access, and improve reliability; and
• comply with applicable legal, regulatory, and contractual obligations.

We do not use your information for third-party advertising or cross-app tracking.

How We Share Information

We may share information with:

• Your electricity utility / distribution company, to provide and administer your connection and services;
• BillDesk, to process payments and recharges;
• Google (Firebase Cloud Messaging), to deliver notifications; and Google Maps Platform / Google Docs Viewer, for map rendering and optional document viewing;
• Backend, hosting, and infrastructure providers engaged by CROSSLYNX to operate the service;
• Regulatory, governmental, or legal authorities, where required by law or to protect rights, safety, and security.

We do not sell your personal information. Any sharing is limited to the purposes described in this Policy.

Third-Party Services

The App integrates the following third-party services. Their processing of information is governed by their own privacy policies:

Data Storage and Retention

• On your device: the App stores session tokens, basic profile identifiers (name, account/mobile number, user/connection type), the notification device token, and preferences (language, theme) in the device's local preferences. These are cleared when you log out or your session ends.
• On our/utility systems: account, meter, consumption, billing, transaction, request, and support data are stored on backend systems.
• Retention: we retain information for as long as necessary to provide services, maintain account and transaction records, meet legal/regulatory and tax obligations, resolve disputes, enforce agreements, and maintain security and business records.

Data Security

We apply appropriate technical and organizational measures, including:

• encrypted transport (HTTPS/TLS) for UAT and Production environments;
• certificate pinning for backend communication;
• token-based authentication with session refresh and automatic sign-out on session expiry;
• screenshot/screen-recording protection on sensitive screens; and
• clearing locally stored data on logout.

No method of transmission or storage is completely secure; while we strive to protect your information, we cannot guarantee absolute security.

User Rights and Choices

Subject to applicable law (including the Digital Personal Data Protection Act, 2023 (India) where applicable), you may have rights to:

• access and obtain a summary of your personal data;
• correct/update inaccurate or incomplete data (e.g., via your profile);
• request deletion/erasure of your data;
• withdraw consent and manage notification/marketing preferences;
• nominate another individual to exercise your rights in specified circumstances; and
• raise a grievance with our Grievance Officer.

In-app choices include updating your profile, managing tenant profiles, updating/removing your profile photo, managing notification and alert preferences, deleting notifications, and logging out. To exercise legal rights not available in-app, contact us using the section below.

Account Deletion

You can remove certain data in-app (e.g., profile photo, tenant profiles, notifications). To request deletion of your account and associated personal data, contact us at systemadmin@crosslynxus.com. We will process such requests in accordance with applicable law and our retention obligations; some records may be retained where legally required.

Children's Privacy

The App is intended for electricity account holders and is not directed at children. We do not knowingly collect personal data from children. Under the DPDP Act, 2023, additional protections apply to individuals under 18. If you believe a child has provided us personal data, please contact us for removal.

International Data Transfers

Some third-party services (Google/Firebase, Google Maps, BillDesk) may process information on infrastructure located in one or more countries. Where information is transferred or processed outside your country, it is handled subject to applicable legal requirements.

Cookies and Tracking Technologies

The App is a mobile application and does not use browser cookies for tracking, and does not integrate advertising or cross-app tracking technologies. A device notification token and Firebase installation identifiers are used only to deliver notifications and operate messaging. The in-app payment WebView is hosted by BillDesk and may use cookies/technologies necessary for payment processing under BillDesk's policies.

Grievance and Contact Information

For questions, requests, or complaints regarding this Privacy Policy or your data:

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the App or other appropriate means, and the "Last Updated" date will be revised. Continued use of the App after changes take effect constitutes acknowledgement of the updated Policy.

Effective Date: August 1, 2026 · Last Updated: August 1, 2026