Privacy Policy

1. Information We Collect

Contact and Service Information:

• Contact Forms: Name, phone number, email address, and property details when you request services
• Service Location: Property address, solar system specifications, and access requirements
• Service History: Cleaning schedules, maintenance records, and service preferences
• Communication Records: Records of our phone calls, emails, and service notes
• Visual Documentation: Photos of panels before/after cleaning (with your permission)
• Payment Information: Billing details and transaction records (processed securely)

Website Analytics and Technical Information:

• Usage Analytics: Page views, session duration, and interaction data via Google Analytics
• Device Information: IP address, browser type, device type, operating system
• Marketing Attribution: How you found our website (search, referral, direct)
• Local Storage: Browser storage for preferences and improved experience

Business Relationship Information:

• Commercial Clients: Business name, contact persons, multiple property locations
• Service Agreements: Contract terms, service levels, and maintenance schedules
• Performance Data: Energy production improvements and cleaning effectiveness metrics

2. How We Use Your Information

• Service Delivery: Schedule and perform solar panel cleaning services, track maintenance needs
• Safety & Quality: Ensure safe access, appropriate equipment, and service quality documentation
• Customer Communication: Service confirmations, reminders, follow-ups, and satisfaction surveys
• Billing & Records: Process payments, maintain financial records, and service history
• Business Development: Analyze service areas, optimize routes, and improve operations
• Marketing: Send service reminders and seasonal promotions (with your consent)
• Legal Compliance: Comply with laws, protect our rights, and ensure safety

3. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your information only in these circumstances:

• Service Providers: Scheduling software, payment processors, and service partners (all bound by confidentiality)
• Safety Requirements: Emergency services if safety concerns arise during service
• Legal Requirements: When required by law, court order, or legal process
• Business Transfers: In connection with merger, acquisition, or sale of assets
• Aggregated Data: Anonymized industry insights that cannot identify individuals

4. Your Data Rights and Choices

• Access & Update: Request access to your personal information and correct inaccuracies
• Data Deletion: Request deletion of your personal information (subject to legal retention)
• Communication Preferences: Opt-out of marketing while maintaining service communications
• Data Portability: Request your data in a structured, machine-readable format
• Consent Withdrawal: Withdraw consent for specific data processing activities

To exercise these rights, contact us at (833) 444-4173 or through our contact form.

5. Regional Privacy Rights

California Residents (CCPA/CPRA):

• Right to Know: Request information about data collection, sources, and sharing
• Right to Delete: Request deletion within 30 days (subject to legal requirements)
• Right to Opt-Out: We do not sell personal information
• Right to Non-Discrimination: No different pricing for exercising privacy rights
• Right to Correct: Request correction of inaccurate information
• Authorized Agents: Designate agents to make requests on your behalf

Response Timelines:

• Standard Response: 30 days for most requests (may extend 60 days for complex requests)
• Identity Verification: Reasonable verification to protect against fraud
• Free Exercise: No charge unless excessive or repetitive

6. Data Security and Retention

Security Measures:

• Encryption: SSL/TLS encryption for all data transmission
• Access Controls: Limited access to authorized personnel only
• Secure Storage: Protected servers with multiple security layers
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff trained on data protection practices
• Vendor Standards: Third parties must meet security requirements

Retention Policies:

• Active Customers: Retained during service relationship plus 7 years for records
• Prospects: Retained 36 months from last contact unless withdrawn
• Website Analytics: Google Analytics data retained 26 months
• Legal Requirements: Some data retained longer for compliance

Data Breach Response:

In the event of a data breach, we commit to:

• 72-Hour Notification: Report to authorities within 72 hours as required
• User Notification: Notify affected users without undue delay
• Transparent Communication: Provide clear information about the breach
• Remediation: Immediate measures to contain and prevent future breaches

7. Cookies and Tracking

Types of Cookies:

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: Google Analytics for usage understanding
• Functional Cookies: Remember your preferences
• No Marketing Cookies: We don't use advertising or cross-site tracking

Cookie Control:

• Browser Settings: Control cookies through your browser
• Google Analytics Opt-Out: Install the opt-out browser add-on
• Do Not Track: We respect DNT signals where feasible

8. Third-Party Services

Service Providers:

• Google Analytics: Website analytics (subject to Google's privacy policy)
• Payment Processors: Secure payment handling (PCI DSS compliant)
• Scheduling Software: Appointment management systems
• Communication Tools: Email and SMS service providers
• Airtable (Formagrid Inc.): Lead form submissions and customer data storage. Subject to Airtable's privacy policy at airtable.com/privacy.
• Google Maps (Google LLC): Address autocomplete and property mapping on our Contact page. Subject to Google's privacy policy at policies.google.com/privacy.

Data Processing Agreements:

All third-party providers must:

• Sign data processing agreements meeting legal standards
• Implement appropriate security measures
• Process data only for specified purposes
• Notify us of breaches within 24 hours

9. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect information from children under 18. If we become aware of such collection, we will delete it promptly.

10. International Data Transfers

Your information is processed and stored in the United States. If accessing from outside the US, your information may be transferred to the US, which may have different privacy laws than your country. We ensure appropriate safeguards for international transfers.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be posted with a new effective date. For significant changes, we may provide additional notice through email or website notice.

12. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact us: