This Privacy Policy explains how SolarFlow ("we", "our", "us") collects, uses, discloses, and safeguards your information when you use our solar business and operations platform.
1. Information We Collect
- Account data: name, email, password hash, company information.
- Operational data: leads, quotations, projects, inventory, invoices, warranties you create within the platform.
- Usage data: log events, IP address, device, browser, and pages visited.
- OAuth data: if you sign in with Google, we receive your name, email, and profile image as authorized by you.
2. How We Use Information
- To provide, maintain, and improve the platform.
- To authenticate users and secure accounts.
- To send transactional emails (invitations, notifications, password resets).
- To comply with legal obligations and prevent fraud.
3. Sharing
We do not sell your personal data. We share data only with: (a) sub-processors necessary to operate the service (cloud hosting, email delivery), (b) authorities when legally required, and (c) parties you explicitly authorize.
4. Data Retention
We retain account and operational data for as long as your account is active. You may request deletion at any time; backups are purged within 30 days.
5. Security
Data is encrypted in transit (TLS) and at rest. Access is governed by role-based access control (RBAC) and audit logs.
6. Your Rights
You may access, correct, export, or delete your personal data. Contact privacy@solarflow.ph.
7. Changes
We may update this policy. Material changes will be communicated via email or in-app notice.