Privacy Policy

Last Updated: September 19, 2026

1. Information We Collect

Personal Data

We may collect personal information that you voluntarily provide to us when you:

• Request a solar savings estimate or quote
• Schedule a consultation or site assessment
• Sign up for our solar subscription service
• Contact us via phone, email, or contact forms
• Subscribe to our newsletter or marketing communications
• Participate in surveys or promotions

Personal information we collect may include:

• Name and contact information (email address, phone number, mailing address)
• Property address and details
• Current electricity usage and utility information
• Service preferences and requirements
• Payment and billing information (processed securely through third-party payment processors)
• Communication preferences
• Any other information you choose to provide

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing activities, including:

• IP address and geolocation data
• Browser type and version
• Operating system
• Pages viewed and time spent on pages
• Referring website or source
• Device information and identifiers
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our solar subscription and energy services
• Communication: To respond to inquiries, send service updates, and provide customer support
• Scheduling: To schedule installations, consultations, and maintenance visits
• Billing: To process subscription payments and manage billing
• Energy Monitoring: To monitor your solar system performance and optimize energy production
• Marketing: To send promotional materials, newsletters, and service updates (with your consent)
• Improvement: To analyze website usage and improve our services and user experience
• Legal Compliance: To comply with legal obligations and protect our rights
• Safety: To ensure the safety and security of our services and users

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for the performance of a contract with you
• Legal Obligation: Processing is necessary to comply with legal obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights do not override these interests

4. How We Share Your Information

We may share your information in the following circumstances:

Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Payment processors and financial institutions
• Solar equipment manufacturers and suppliers
• Energy monitoring and analytics platforms
• Customer relationship management (CRM) platforms
• Email marketing and communication services
• Website hosting and analytics providers
• Licensed solar installation contractors

Business Transfers

If we are involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

Protection of Rights

We may disclose information when we believe it is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to government requests.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with small amounts of data that are sent to your browser from a website and stored on your device.

Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your browsing habits to deliver targeted advertising

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

6. Third-Party Links and Services

Our website may contain links to third-party websites and services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure socket layer (SSL) technology
• Regular security assessments and updates
• Access controls and authentication procedures
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Typical retention periods include:

• Subscription Data: Retained for the duration of your subscription plus 7 years for tax and legal purposes
• Energy Production Data: Retained for the duration of service to track system performance
• Marketing Data: Retained until you withdraw consent or unsubscribe
• Website Analytics: Retained for up to 26 months

9. Your Data Protection Rights

Rights for All Users

• Access: Request copies of your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Opt-Out: Unsubscribe from marketing communications

Additional Rights for EEA Users (GDPR)

• Data Portability: Request transfer of your data to another organization
• Restriction: Request restriction of processing your data
• Objection: Object to processing of your personal data
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Lodge a Complaint: File a complaint with your local data protection authority

State-Specific Privacy Rights (United States)

California Residents (CCPA/CPRA)

California residents have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: What personal information is collected, used, disclosed, or sold
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale or sharing of personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit: Limit use and disclosure of sensitive personal information
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights

Do Not Sell/Share My Personal Information: We do not sell your personal information. We may share information with service providers for business purposes.

Shine the Light Law: California residents can request information about disclosures to third parties for direct marketing purposes.

Virginia Residents (VCDPA)

Virginia residents have rights under the Virginia Consumer Data Protection Act:

• Right to access personal data
• Right to correct inaccuracies
• Right to delete personal data
• Right to obtain a copy of personal data
• Right to opt-out of targeted advertising, sale of personal data, and profiling

Colorado Residents (CPA)

Colorado residents have rights under the Colorado Privacy Act:

• Right to access, correct, and delete personal data
• Right to data portability
• Right to opt-out of targeted advertising and sale of personal data
• Right to opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects

Connecticut Residents (CTDPA)

Connecticut residents have rights under the Connecticut Data Privacy Act:

• Right to confirm whether we process personal data
• Right to access, correct, and delete personal data
• Right to data portability
• Right to opt-out of targeted advertising, sale of personal data, and profiling

Utah Residents (UCPA)

Utah residents have rights under the Utah Consumer Privacy Act:

• Right to access and delete personal data
• Right to data portability
• Right to opt-out of targeted advertising and sale of personal data

Montana, Oregon, and Texas Residents

Residents of states with emerging privacy laws have rights including:

• Right to access personal information collected
• Right to request deletion of personal information
• Right to opt-out of certain data processing activities
• Right to non-discrimination for exercising privacy rights

Nevada Residents

Under Nevada law, you have the right to opt-out of the sale of certain personal information to third parties. We do not sell personal information as defined under Nevada law.

Florida Residents

Florida residents benefit from state consumer protection laws and have rights to:

• Request information about data collection and use
• Opt-out of marketing communications
• File complaints with the Florida Attorney General's Office

How to Exercise State-Specific Rights: To exercise any of these rights, please contact us using the information provided below. We will respond to verifiable requests within 45 days (or as required by applicable state law). We may require additional information to verify your identity before processing your request.

10. Biometric Information and Sensitive Data

We do not collect biometric information (such as fingerprints, facial recognition data, or voiceprints). If our business practices change to include biometric data collection, we will:

• Obtain explicit written consent as required by state law (Illinois BIPA, Texas, Washington, etc.)
• Provide clear disclosure about the specific purpose and length of collection
• Implement appropriate security measures
• Provide data destruction timelines

Sensitive Personal Information

We may collect limited sensitive personal information including:

• Financial account numbers (for subscription payment processing)
• Government-issued identification (for permitting requirements)
• Property-related information including roof specifications and energy usage
• Utility account information (to assess savings potential)

We do not collect:

• Social Security numbers
• Health or medical information
• Genetic or biometric data
• Precise geolocation tracking beyond service addresses
• Sexual orientation or personal relationship information
• Contents of mail, email, or text messages (unless you send them to us)

11. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal or similarly significant effects. Any automated processing (such as email marketing) does not:

• Make decisions that significantly affect your rights
• Deny you services or benefits
• Evaluate, analyze, or predict personal aspects about you without human review

You have the right to opt-out of automated processing and request human review of any decisions, where applicable.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not:

• Knowingly collect information from children under 13
• Target advertising to children
• Allow children to publicly post personal information

13. International Data Transfers

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated. By using our services, you consent to the transfer of your information to the United States.

For EEA users, we ensure appropriate safeguards are in place for international data transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with third-party service providers
• Compliance with Privacy Shield principles where applicable

14. Do Not Track Signals

Some browsers have a "Do Not Track" feature that lets you tell websites you do not want your online activities tracked. We currently do not respond to Do Not Track signals.

However, you may:

• Opt-out of targeted advertising through industry opt-out tools
• Use browser privacy settings to limit tracking
• Contact us directly to opt-out of data collection where applicable

15. Email and Marketing Communications

With your consent, we may send you marketing emails about our services, special offers, and updates. You can opt out of receiving marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us through our contact form
• Updating your communication preferences in your account settings

Please note that even if you opt out of marketing communications, we may still send you non-promotional emails related to your services, such as appointment confirmations and service updates.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (if you have provided your email address)
• Providing prominent notice on our website for material changes

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy. For material changes that require consent under applicable law, we will obtain your affirmative consent before applying the changes.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EEA users with data protection questions, you may also contact your local data protection authority.

State Attorney General Offices: You may also file complaints with your state's Attorney General or Consumer Protection office regarding privacy concerns.

18. Consent and Agreement

By using our website and services, you consent to our Privacy Policy and agree to its terms. If you do not agree with this policy, please discontinue use of our website and services.

Withdrawal of Consent: Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

State-Specific Notice: This Privacy Policy complies with applicable federal and state privacy laws. Where state law provides greater privacy protections, those provisions apply.