Privacy Policy

When you submit an enquiry form. We collect your name, email, phone number (required), and — where you choose to provide them — city, property type, approximate monthly electricity bill, company or society name, your message, the page you submitted from, and a timestamp. This site deliberately runs without a customer database: your enquiry is delivered to our team inbox by email (via our email provider, Resend) and handled from there, together with an automated acknowledgement to your address.

Usage data. Standard server-side request logs (IP address, user agent, referrer, timestamp) plus client-side analytics via Vercel Analytics, Vercel Speed Insights, Google Analytics 4, and Plausible Analytics (see §4 for what each collects). We do not run behavioural advertising trackers or audience-sharing with ad products.

Respond to enquiries. Names, emails, phone numbers, and the details you share about your property and electricity usage are used to assess your solar/subsidy situation, respond to your outreach, and follow up on active conversations — including, where you engage us for installer quotes, sharing relevant project details with the vetted installers who quote your project.

Improve the site. Usage logs help us debug errors, tune performance, and detect abuse.

We do not sell personal data, and we do not share it for advertising purposes. Installer sharing happens only for your own project, and only when you have asked us to obtain quotes.

We rely on two principal grounds for processing: (a) your explicit consent, given when you submit a form; and (b) the legitimate uses recognised under Section 7 of the DPDP Act — including where processing is necessary to respond to an enquiry you have initiated or comply with law. Where consent is the basis, you may withdraw it at any time by writing to us (see §9).

Resend (email).Enquiry notifications and acknowledgement emails run through Resend. Resend’s privacy policy is at resend.com/legal/privacy-policy.

Vercel (hosting).The website is deployed on Vercel. Vercel’s privacy policy is at vercel.com/legal/privacy-policy.

Cloudflare Turnstile (spam protection). Our forms may use Cloudflare’s Turnstile captcha to block automated abuse; it processes limited request data to distinguish humans from bots, per Cloudflare’s privacy policy.

Google Maps (embed). We embed Google Maps iframes on our contact page to show office locations. Google may collect your IP address and other data per its policy.

Google Analytics 4.We use GA4 to understand aggregate site usage — pages viewed, traffic sources, device and country breakdown, and conversion funnels. GA4 collects usage data with IP addresses used transiently for geo-derivation and not retained, and assigns a pseudonymous client identifier stored in first-party cookies (see §5). We do not enable Google Signals, advertising features, or audience-sharing with ad products. Google’s privacy policy is at policies.google.com/privacy; opt out across all sites via tools.google.com/dlpage/gaoptout.

Plausible Analytics.We also run Plausible alongside GA4 while we evaluate which product to keep. Plausible is cookieless, sets no persistent identifiers, collects no personal data, and performs no cross-site tracking; aggregated metrics are derived from a one-way hashed daily-rotating salt. Plausible’s privacy policy is at plausible.io/privacy.

We do not use third-party ad networks, session-replay tools, or A/B-testing platforms.

We set only the cookies strictly necessary for the site, plus Google Analytics 4’s first-party measurement cookies (_ga and a per-property _ga_<id> cookie), which carry a pseudonymous client identifier and expire 2 years after the last visit. We do not set advertising or third-party tracking cookies. Google Maps embeds may set cookies within the iframe scope.

Enquiries live in our team mailbox and are retained for up to 3 years from last contact, or longer where required for legal, tax, or contractual reasons.

Usage logs are retained for a shorter operational window (typically 90 days).

We apply reasonable security practices under Rule 8 of the IT Rules, 2011 — encryption in transit, access controls on our mailboxes and provider accounts, and monitoring for unauthorised access. No system is perfectly secure; we promptly notify affected Data Principals and the Data Protection Board of India of any personal-data breach as required under DPDP Act §8(6).

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and the processing we carry out.
• Have errors in your personal data corrected or updated.
• Request erasure of your personal data, subject to our overriding legal or contractual obligations.
• Nominate another person to exercise rights on your behalf.
• Withdraw any consent you have given.
• File a grievance with us (see §9) — and escalate to the Data Protection Board of India if unresolved.

We respond to verified rights requests within a reasonable time consistent with the DPDP framework and typically within 30 calendar days.

For any privacy questions, grievances, or rights requests, write to us:

If we are unable to resolve a grievance to your satisfaction, you may approach the Data Protection Board of India established under the DPDP Act.

Our services are not directed at Data Principals under 18. We do not knowingly collect personal data of children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

We update this policy as our practices evolve. Material changes will be accompanied by a revised “Last updated” date at the top of this page and, where required, direct notice to affected Data Principals.