Privacy Policy

When you submit an inquiry (a “lead”) or otherwise use our services, we may collect:

• Your name, phone number and email address
• Your PIN code, district and state (to match you with installers near you)
• Details of your solar inquiry and any comments you provide
• Your electricity bill, if you choose to upload one, so installers can prepare an accurate quote
• Limited technical and usage data (e.g. pages visited) where you have consented to analytics cookies
• Messages you send to our chatbot

We use your personal data to connect you with solar installers in your area, to enable those installers to respond to your inquiry, to operate and improve our website, to communicate with you about your inquiry, and to comply with our legal obligations. We process your data only for these specified, lawful purposes.

We process your personal data on the basis of the consent you give when you submit a lead form and tick the consent checkbox, in accordance with Section 6 of the DPDP Act. Your consent is free, specific, informed, and unambiguous. You may withdraw your consent at any time by contacting our Grievance Officer (Section 9) or by using our Data Deletion Request page; withdrawal does not affect processing carried out before withdrawal.

When you consent, we share your contact details with one or more solar installers in your area so that they can follow up on your inquiry. These installers are independent Data Fiduciaries (controllers) in their own right, not our processors. This means that once your details are transferred to an installer, the installer is independently responsible for how it handles your data under applicable law. Installers accept binding data-handling obligations — including using your details solely to respond to your inquiry, not selling or onward-transferring them, and deleting them on request — before they are permitted to receive any lead.

We do not sell your personal data, and we do not share it with any third party other than the installers you have consented to connect with and the service providers listed in Section 5.

We use a small number of trusted service providers to operate our platform. They process personal data only on our instructions and under data protection agreements:

We retain unclaimed lead data for a maximum of six months from the date of collection, after which it is automatically and securely deleted from our systems along with any uploaded electricity bill. Where a lead has been claimed by an installer, the installer becomes responsible for retention of the copy it holds as an independent Data Fiduciary.

Under the DPDP Act, 2023 you have the following rights in respect of your personal data:

• Right to access: obtain a summary of the personal data we hold about you and who it has been shared with, via our Request My Data page. We will respond within 30 days.
• Right to correction: request correction of inaccurate or incomplete data by contacting our Grievance Officer.
• Right to erasure: request deletion of your personal data via our Data Deletion Request page. We will process your request within 30 days.
• Right to data portability: request a copy of the data you provided in a structured, commonly used format. On request, our team will send you a CSV export of your data.
• Right to grievance redressal: raise any concern with our Grievance Officer (Section 9).
• Right to nominate: nominate another individual to exercise your rights in the event of your death or incapacity.

We do not load any analytics or tracking cookies until you give consent through the cookie banner shown on your first visit. If you decline, no analytics scripts are loaded. You can change your choice at any time by clearing your browser storage for this site.

In accordance with the DPDP Act, 2023 and the Information Technology Act, 2000, you may contact our Grievance Officer with any question, concern, or complaint regarding your personal data:

Messages you send to our support chatbot are processed by OpenAI solely to generate a response to you. These messages are not used to train AI models. Please avoid sharing sensitive personal information in the chatbot.

As a Data Fiduciary, we process personal data lawfully and transparently, collect only what is necessary for the stated purposes, keep it accurate, retain it only as long as needed, secure it with appropriate technical and organisational measures, and act on the rights you exercise. We comply with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the rules made thereunder.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit, access controls, and authenticated, time-limited access to uploaded files.

Our services are intended for adults. We do not knowingly collect personal data of children without verifiable parental or guardian consent as required by the DPDP Act, 2023.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date shown at the top.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at admin@solarvipani.com.