Kaasai Privacy Policy

Effective Date: 30 June 2025
Last Updated: 30 June 2025

1. Introduction

Kaasai Services Limited ("Kaasai", "we", "our", or "us") is a global provider of energy asset orchestration software-as-a-service (SaaS). We are committed to protecting the privacy and security of personal and operational data entrusted to us by our customers, users, and partners.

This Privacy Policy explains how Kaasai collects, uses, discloses, and safeguards your data, including personal information and operational data, in connection with our platform and services.

2. Scope

This Privacy Policy applies to all users of Kaasai’s services, including:

This Privacy Policy is designed in accordance with applicable data protection laws, including the General Data Protection Regulation (EU and UK GDPR), the California Consumer Privacy Act (CCPA), and other relevant global frameworks in jurisdictions that Kaasai operates in.

3. Information We Collect

Kaasai collects and processes data in the context of providing energy asset orchestration services. We do not knowingly collect special categories of personal data (e.g., health, biometrics, or ethnicity) unless explicitly required for service functionality and subject to user consent. Data collected by Kaasai includes:

a. Data Types Collected
Category Examples
Telematics Data GPS location, vehicle status, speed, distance travelled
Energy Data Usage, generation, storage, charging/discharging behaviour
Pricing Data Real-time and forecasted energy prices
Operational Data Schedules, fleet operations, system performance
Cost Data Operating costs, maintenance costs, revenue tracking
Vehicle & Driver Data Vehicle registration numbers, driver identifiers (not directly PII unless linked to a person)
Account & User Data Name, email, credentials, usage logs (for account holders)
b. Sources of Data

4. Purpose and Legal Basis for Processing

We process data for the following purposes, relying on one or more lawful bases as required by data protection laws:

Purpose Legal Basis
Delivering SaaS functionality Performance of a contract
Monitoring system performance Legitimate interests
Optimizing energy usage and asset orchestration Legitimate interests
Improving our services and analytics Legitimate interests
Complying with legal obligations Legal obligation
Providing support and responding to inquiries Performance of a contract
Enabling third-party system integration Consent or contract (depending on integration setup)
Using anonymized data for analytics, machine learning, or benchmarking Legitimate interests, with safeguards to prevent re-identification

5. Data Sharing and Third Parties

We do not sell your data. Kaasai may share data under strict conditions with:

6. Data Retention

We retain data only as long as necessary for the purposes outlined in this policy, including for:

Unless otherwise agreed with the customer, we retain identifiable operational and user data for up to 12 months after service termination, after which it is anonymized or securely deleted.

7. International Transfers

Our primary cloud infrastructure is hosted with leading provider Microsoft Azure, with data centers in Ireland, UK, and US, and governed by Standard Contractual Clauses where required.

As a global provider, Kaasai may transfer your data outside your country or region. In such cases, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, adequacy decisions, or equivalent legal mechanisms) in accordance with applicable data protection laws.

8. Security

We implement industry-standard security measures to protect data, including:

While no system is 100% secure, we continuously work to protect your data and maintain resilience.

9. Your Rights

We will respond to verified requests within the timeframes required by applicable laws, typically within 30 days.

Depending on your location, you may have the following rights:

To exercise your rights, contact us at privacy@kaasai.com.

10. Cookies and Tracking

Our websites and services may use cookies or similar technologies for user authentication, analytics, and service performance. You can manage your cookie preferences through your browser or our website settings.

11. Third-Party Integrations

Many of our services integrate with third-party platforms (e.g., fleet telematics, energy management systems). Kaasai only accesses these systems with your explicit authorization and processes data under your control.

Customers are responsible for ensuring they have appropriate rights and consents to authorize Kaasai’s access to third-party systems.

12. Children’s Privacy

Kaasai’s services are intended for business and commercial use. We do not knowingly collect data from children under 16 years of age. If we become aware that data from a child under 16 has been collected inadvertently, we will delete such data promptly.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated via our website or directly to account holders.

14. Contact Us

If you have any questions or concerns about this policy or our data practices, please contact:

Kaasai Services Limited
25 Bedford Square, London WC1B 3HH

Email: privacy@kaasai.com