Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, request a demo, subscribe to our newsletter, or contact us for support. This includes:

• Account information: name, email address, company name, job title, and password.
• Usage data: how you interact with our platform, including features accessed, queries made, and actions taken.
• Device data: collected through SolarKey hardware, including energy production metrics, sensor readings, and device performance data.
• Communications: any messages or feedback you send us.

We also collect information automatically when you use our services, including log data, IP addresses, browser type, and cookies.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services.
• Process transactions and send related information.
• Send technical notices, updates, and support messages.
• Respond to your comments and questions.
• Send marketing communications (where permitted by law and with your consent).
• Monitor and analyze trends, usage, and activities in connection with our services.
• Detect, investigate, and prevent fraudulent transactions and other illegal activities.

3. Data Security

We implement industry-standard security measures to protect your information, including:

• AES-256 encryption for data at rest.
• TLS 1.3 for data in transit.
• SOC 2 Type II certified infrastructure.
• ISO 27001 compliant security management system.
• Role-based access controls and mandatory multi-factor authentication.
• Regular third-party penetration testing.

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Telemetry data from renewable assets is retained according to your subscription tier (standard: 5 years; enterprise: configurable up to 15 years). You may request deletion of your personal data at any time by contacting privacy@solar-key.com.

5. International Transfers

SolarKey operates globally. Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission and participation in the EU-US Data Privacy Framework.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data.
• Object to or restrict processing of your personal data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact privacy@solar-key.com.