Privacy Policy

Who this policy applies to

This Privacy Policy describes how EnergyMap.in (operated by the non-profit entity behind the India Energy Atlas, “EnergyMap”, “we”, “our”, or “us”) handles personal information when you visit energymap.in, use our APIs, subscribe to alerts, or contact us by email. It applies to visitors and users in India, the United States, and elsewhere.

EnergyMap.in publishes public-domain grid, generation, market, and regulatory data about India. Almost everything on the site is anonymous to browse. You only share personal information when you deliberately do so — by creating an account, subscribing to a plan, setting up alerts, contacting us, or donating.

Under India's DPDP Act, 2023, we rely on your consent for account, billing, and alerts processing, and on legitimate uses for security, fraud prevention, and compliance with law. Under US state privacy laws, our processing purposes are:

• •To operate the site, APIs, and alerts you requested.
• •To process payments and issue tax receipts (including 80G receipts for eligible Indian donors).
• •To prevent abuse, rate-limit APIs, and investigate security incidents.
• •To comply with Indian, US, and other applicable legal obligations — including tax, accounting, and lawful requests from authorities.
• •To send service announcements (billing, outages, breaking changes). You may opt out of non-transactional emails at any time.

We do not use your personal information to train third-party AI models. We do not engage in automated decision-making that produces legal or similarly significant effects about you.

We use the minimum cookies and local-storage keys needed to run the site. These fall into two buckets:

• •Strictly necessary: session cookie for logged-in users, CSRF token, and a preference store for the state/chart defaults you pick. You cannot disable these without breaking the site.
• •Privacy-preserving analytics: aggregate page views via a cookie-less analytics provider. No cross-site tracking, no advertising identifiers, no third-party ad cookies.

We honor the Global Privacy Control (GPC) signal. If your browser sends GPC, we treat it as an opt-out of any sale or sharing, even though we do not sell personal information.

We share personal information only with a narrow set of service providers (called “data processors” under DPDP and “service providers” under CCPA) under written contracts that restrict them to processing on our behalf:

• •Cloud hosting and managed database providers (for site, APIs, and account data).
• •Payment processors (for subscriptions and donations).
• •Transactional email providers (for alerts and receipts).
• •Error-tracking and uptime monitoring.

We may also disclose information to comply with valid legal process (court orders, subpoenas, or lawful requests from Indian or US authorities), or to protect the rights, property, or safety of EnergyMap, our users, or the public. In a corporate transaction — such as a merger, acquisition, or sale of assets involving the non-profit entity — personal information may be transferred to the successor subject to this Policy.

EnergyMap.in is operated from India. Depending on the service, personal information may be stored or processed in India, the United States, or other jurisdictions where our vendors operate. Transfers outside India are made to countries not restricted by the Central Government under Section 16 of the DPDP Act, 2023. We use contractual safeguards with all international processors.

To exercise any right, email hello@energymap.in from the email on file, or from an email address you can verify control of. We will respond within 30 days (DPDP) or 45 days (US state laws), as required.

We use TLS in transit, encryption at rest for managed databases, hashed passwords (bcrypt/argon2), scoped API keys, and least-privilege access for operators. No system is perfectly secure — if a breach affecting your personal data occurs, we will notify the Data Protection Board of India and affected users as required by law, and notify US users in line with applicable state breach-notification statutes.

We retain personal information only as long as needed for the purposes described here, typically: account data until you delete your account, billing records for 8 years (Indian tax law and US accounting standards), server logs for 90 days, and donation records for the period required to support 80G receipts.

EnergyMap.in is not directed to children. We do not knowingly collect personal information from children under 18 (India, under the DPDP Act) or under 13 (US, under COPPA). If you believe a child has provided us personal information, email hello@energymap.in and we will delete it.

Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be announced at the top of the site and, for registered users, by email at least 15 days before they take effect. The “Effective” date at the top of this page always reflects the latest version.