← Back to SolarPlan Pro

Privacy Policy

Last updated: 2026 · Controller: [COMPANY LEGAL NAME], [address]

This policy explains what personal data SolarPlan Pro processes, why, and your rights. We are the data controller.

1. What we collect

  • Account data — name, email, hashed password or Google OAuth identity, and consent records (age confirmation, terms acceptance time).
  • Project data — the solar designs, roof sections and settings you create, stored against your account when you save to the cloud.
  • Billing data — handled by Stripe; we receive subscription status and identifiers, never your full card number.
  • Technical data — IP address and basic request logs at our host (Netlify) for security and availability. We do not run advertising trackers or session-recording scripts.

2. Location and solar data

When you enter a location we send the place name or coordinates to OpenStreetMap Nominatim (geocoding) and to PVGIS (EU) or NREL PVWatts (US) for irradiance. For US locations the request may be proxied through our servers with our NREL key. These requests contain the location, not your identity.

3. Fonts, analytics and cookies

Web fonts are self-hosted — no request is made to Google Fonts, so your IP is not shared with Google for this purpose. Product analytics use Plausible, which is cookieless, does not fingerprint or record sessions/keystrokes, and stores aggregate statistics only. We do not use session-replay or advertising cookies.

4. Legal bases (GDPR)

  • Contract — to provide the Service and manage your account/subscription.
  • Legitimate interests — security, abuse prevention, service improvement (aggregate analytics).
  • Consent — where required (e.g. marketing email); you can withdraw it at any time.
  • Legal obligation — tax, accounting, and responding to lawful requests.

5. Processors and recipients

ProcessorPurpose
SupabaseAuthentication and database hosting
NetlifyHosting and serverless functions
StripePayments and subscriptions
Resend / Google (Gmail SMTP)Transactional and lifecycle email
PlausibleCookieless product analytics
OpenStreetMap, PVGIS (JRC), NREL, Google MapsGeocoding, solar and satellite data

6. International transfers

Some processors are outside the EEA (e.g. US). Where required we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

7. Retention

Account and project data are kept while your account is active and for a reasonable period after, then deleted or anonymised. Billing records are kept as long as tax law requires.

8. Your rights

You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent. Contact support@solarplanpro.com. You may also complain to your local supervisory authority.

9. Children

The Service is for users aged 18+ and is not directed to children. We do not knowingly collect data from children; if you believe a child has registered, contact us and we will remove the account.

10. Email preferences

Every marketing or lifecycle email includes an unsubscribe link and our postal address. Transactional messages about your account may still be sent.

This page is a template and not legal advice. Replace the bracketed placeholders and have it reviewed by a qualified lawyer before relying on it.