Privacy Policy | VoltBridge

Effective Date: June 22, 2025

VoltBridge Technologies Pvt. Ltd. ("VoltBridge," "we," "us") is committed to protecting the privacy of businesses and individuals on our platform. VoltBridge is a global B2B platform connecting electric vehicle (EV) supply chain buyers and suppliers. This Privacy Policy explains what information we collect, how we use it, and your rights. We gather business-related data primarily from publicly accessible sources, using AI-based tools to compile company profiles and contact details. Companies may claim their profiles and provide updates or corrections to their information on our platform.

Data We Collect

Public Business Information

We collect non-sensitive company information that is publicly available (for example, from company websites, public registries, and industry databases). This includes company names, business addresses, industry sectors, corporate email addresses, phone numbers, and descriptions of products or services. Collection is automated but limited to data that is already public. We do not collect sensitive personal data or private individual contact details from these sources.

Information Provided by Companies

If your company claims its profile or interacts with us, we collect the data you provide (such as business email, phone number, company address, and job title). This helps us verify profiles and maintain up-to-date information.

Account Registration Data

If you register for an account on VoltBridge, we collect your registration details (company name, business email, password, etc.). We use this information to manage your account and provide our services.

We do not use cookies or any other tracking technologies on our website (see "Cookies and Tracking" below). All data we collect falls into the categories above (business or corporate contact information) and is used only as described in this policy.

How We Use Data and Legal Bases

We use the collected information to operate our platform and connect buyers with suppliers. This includes verifying company details, matching businesses in the EV supply chain, improving data accuracy, and communicating with companies about their profiles or inquiries. We comply with applicable privacy laws (such as the GDPR) by processing data on lawful grounds:

Legitimate Interests (Art. 6(1)(f), GDPR)

For data scraped from public sources, our lawful basis is legitimate interest. Our legitimate interests include maintaining an accurate and comprehensive directory of EV supply chain companies, enabling useful connections between businesses, and improving our services. We balance these interests against privacy rights and collect only the data needed for these purposes. For example, because the data is already public, we do not need individual consent to include it, but we ensure our use is fair and transparent.

Performance of a Contract (Art. 6(1)(b), GDPR)

When you provide information by creating an account or claiming a profile, processing is necessary to fulfill our contract with you (such as providing access to the platform or implementing your requested data changes).

Legal Obligations (Art. 6(1)(c), GDPR)

We may also process data to comply with legal obligations (for example, financial record-keeping, tax compliance, or responding to lawful government requests).

Our platform uses AI tools to compile and standardize business data from public sources. This automated profiling helps keep the directory accurate and up-to-date. We do not make automated decisions about individuals that have legal or similar effects on them; any profiling is limited to business-level data. If you believe any automated processing significantly affects you, you have the right to object or request human intervention.

Cookies and Tracking

VoltBridge does not use cookies or any other tracking technologies to collect personal data. We do not engage in behavioral advertising or analytics. In fact, a website like ours that does not use cookies or collect personal information is not required to display a cookie consent banner. If our practices change and we begin using cookies or similar technologies in the future, we will update this policy and obtain any necessary consents.

Data Retention

We retain personal and business data only as long as needed for the purposes described above or as required by law. In line with GDPR's storage limitation principle, we establish specific time limits for data retention. For example:

Account Data: Registration and account information (e.g. company name, login email) is kept for up to 3 years after account closure or last activity, then securely deleted.
Company Profile Data: Business profile information (scraped or provided) is retained as long as the profile is active and useful. Typically, we retain it up to 6 years after the last update or verification. We regularly review profiles and remove outdated or duplicate data.
Communications: Records of support requests, emails, or other correspondence are kept for up to 2 years after the last interaction, to ensure we can address any ongoing matters.
Financial/Legal Records: If applicable, billing, contracts, and other legal documents are kept as required by law (commonly up to 6–7 years for accounting and tax purposes).
Server Logs and System Data: Any server logs or technical data (e.g. IP addresses) are anonymized or deleted within 1 year unless needed to investigate security issues.

After these periods, data is securely deleted or irreversibly anonymized. These retention schedules ensure we do not keep personal data longer than necessary, in compliance with GDPR principles.

Your Rights

If our processing involves your personal data (for example, as a contact person at a company), you have rights under applicable data protection laws. You may have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Correct any inaccurate or incomplete personal data.
Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal obligations.
Restriction: Request that we limit how we use your data (for example, while a dispute over accuracy is resolved).
Portability: Obtain your data in a structured, machine-readable format and transfer it to another organization, where technically feasible.
Objection: Object to processing of your personal data on the basis of legitimate interests (including an objection to any marketing communications).
Withdraw Consent: If we ever process data based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@thevoltbridge.com. We will respond within the timeframe required by law (usually 30 days). Note that we may need to retain certain information if required by law or for legitimate business reasons, even after a deletion request.

International Data Transfers

VoltBridge operates globally, and your data may be stored or processed outside your country (for example, in India, where VoltBridge is headquartered, or in other countries where we have servers or service providers). When we transfer personal data from the EU/EEA to a country outside the EU/EEA, we ensure adequate protections. In particular, we rely on European Commission-approved Standard Contractual Clauses (SCCs) or other GDPR-compliant transfer mechanisms to safeguard EU personal data in transit. We also consider adequacy decisions (e.g. countries recognized by the EU as offering adequate protection). Transfers from other regions are handled under equivalent safeguards in accordance with local laws.

Complaints and Contact Information

If you have any questions or concerns about our data practices, please contact us at privacy@thevoltbridge.com. VoltBridge has not appointed a separate Data Protection Officer; all privacy inquiries should be directed to this general contact.

You also have the right to lodge a complaint with a data protection authority. For example:

EU/EEA: You may contact your national data protection authority (such as the Data Protection Commission in Ireland or another EU member state) or the European Data Protection Board (EDPB).
India: Under India's Digital Personal Data Protection Act, 2023, the government has established a Data Protection Board of India to oversee compliance and handle complaints.

Please refer to the official websites of these authorities for contact details.

Changes to This Policy

This Privacy Policy is effective as of the date above. We may update it from time to time to reflect changes in our practices or legal requirements. We will post any changes on our website and update the Effective Date. Your continued use of VoltBridge services after a change indicates your acceptance of the revised policy. We encourage you to review this policy periodically for updates.

For more information on your privacy rights, you may also visit the European Union's GDPR portal or contact your local data protection authority.

Contact: privacy@thevoltbridge.com

VoltBridge Privacy Policy