Privacy Policy

Last updated: 1 April 2026 · Effective date: 1 April 2026

Plain English summary: Solar IOT connects to your solar inverter (SunSynk) and smart-home platforms to automate your devices. We collect only what we need to make the service work, we never sell your data, and you can delete your account at any time.

Contents

  1. Who We Are
  2. Data We Collect
  3. How We Use Your Data
  4. Third-Party Services & Integrations
  5. Data Storage & Security
  6. Cookies & Local Storage
  7. Data Retention
  8. Your Rights
  9. Children's Privacy
  10. International Data Transfers
  11. Billing & Payment Data
  12. Changes to This Policy
  13. Contact Us

1. Who We Are

Solar IOT ("we", "our", "us") is a software-as-a-service platform that enables homeowners and solar-energy enthusiasts to automate smart-home devices based on real-time solar generation data.

The service is operated by the Solar IOT team. Our primary contact email is support@solariot.app.

By using the Solar IOT website at solariot.app (or any Heroku-hosted subdomain we operate) and the associated API, you agree to this Privacy Policy. If you do not agree, please do not use the service.

2. Data We Collect

We collect the following categories of personal and operational data:

Account Information Third-Party API Credentials Automation & Job Configuration Usage & Technical Data Billing Data

3. How We Use Your Data

We use the data we collect only to provide and improve the Solar IOT service:

We do not use your data for advertising, profiling, or sale to third parties.

4. Third-Party Services & Integrations

Solar IOT integrates with several third-party platforms. When you connect an integration, data flows between Solar IOT and that platform according to their own privacy policies. We recommend reviewing their policies:

We access your third-party accounts only to the extent necessary to perform the automations you have configured. We do not read, store, or transmit any data from those accounts beyond what is required for that purpose.

5. Data Storage & Security

Your data is stored in a Neon PostgreSQL database with encrypted connections (TLS). The database is hosted in a secure, access-controlled cloud environment.

Security measures we apply include:

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we apply reasonable industry-standard measures. If you become aware of any security issue, please contact us immediately at support@solariot.app.

6. Cookies & Local Storage

Solar IOT does not use tracking cookies or advertising cookies.

We use browser localStorage to store your authentication token (JWT) so you stay logged in between sessions. This token is only readable by the Solar IOT domain.

Our hosting provider (Heroku) may set technical cookies required for session and load-balancing purposes. These are operational and not used for tracking.

7. Data Retention

You can request deletion of your account and all associated personal data at any time by contacting us (see Section 13).

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, email us at support@solariot.app with the subject line "Privacy Request". We will respond within 30 days.

If you are located in the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

Solar IOT is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will promptly delete that information.

10. International Data Transfers

Solar IOT is operated globally. Your data may be stored and processed in countries outside your own (including the United States, where Heroku and Neon are based). By using Solar IOT, you consent to the transfer of your data to these locations.

Where required, we rely on standard contractual clauses or equivalent mechanisms to ensure your data receives adequate protection when transferred across borders.

11. Billing & Payment Data

Subscription payments are processed by Stripe, Inc. We never receive your full card number, CVV, or bank account details. Stripe returns a customer ID and subscription status, which we store to determine your account tier.

Stripe is PCI-DSS Level 1 certified. For details on how Stripe handles payment data, see stripe.com/privacy.

Your subscription status (free trial, pro, cancelled) is stored in our database and used to determine feature access.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Continued use of the service after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us:

We aim to respond to all privacy-related enquiries within 30 days.