1. Who we are
SunSolarOne is a software service for rooftop solar installers and EPC companies in India: CRM, site survey, rooftop design, proposals, project tracking, invoicing, inventory and operations & maintenance. It is operated by Atharva Green Energy Solution Pvt Ltd, a company registered in India with its registered office at The Corporate Park, Office No. 902, 9th Floor, Plot No. 14/15, Sector 18, near Warna Dairy, Vashi, Navi Mumbai, Maharashtra 400705, referred to here as "SunSolarOne", "we" or "us".
2. Our two roles
We handle personal data in two different capacities, and the rules differ for each.
As a Data Fiduciary (we decide)
For data about the people who visit our website, contact us, sign up for an account, or use SunSolarOne as part of an installer's team, and for subscription billing, we decide why and how the data is used. This policy applies in full.
As a Data Processor (the installer decides)
Installers use SunSolarOne to manage their own customers and leads — names, phone numbers, addresses, electricity bills, site photos, proposals, invoices and project records. For that data, the installer (our customer) is the Data Fiduciary and we process it only on their instructions, under our Data Processing terms. If you are the installer's customer and want to access, correct or delete your data, please contact the installer directly. If you contact us, we will pass your request to the installer and help them respond.
3. What we collect
Account and team data
- Name, work email, mobile number, role and password (stored only as a secure hash by our authentication provider).
- Company details you enter: company name, GSTIN, address, logo, bank details for your invoices, and team invitations.
- Phone numbers used for one-time-password (OTP) sign-in for field staff.
Data you put into the service
- Leads and customers: names, phone numbers, emails, addresses, notes and activity history.
- Electricity bills (photos or PDFs) and the details read from them, such as consumer number, DISCOM, tariff and units consumed.
- Site survey data: roof outlines, measurements, photos, and the location and time recorded with photos.
- Proposals, e-signatures (name, OTP verification and the time and IP-derived record of signing), invoices, payments, projects, subsidy and DISCOM steps, inventory and service tickets.
When customers use a shared link or the customer portal
- When a proposal link is opened, we record that it was viewed, with a one-way hash of the IP address rather than the address itself.
- Phone number and OTP verification when a customer signs a proposal or logs in to the customer portal.
- Loan eligibility enquiries a customer chooses to submit (name, phone, loan amount and tenure). These go only to the installer; we do not send them to lenders.
The SunSolarOne mobile app
- Camera, only when you take a site photo or scan an electricity bill. Photos are uploaded to your company's workspace.
- Precise location, only while the app is open and only when you use it: to find the house you are standing at and to stamp survey photos with where and when they were taken. We do not track location in the background.
- Photos you pick from the gallery, only the ones you choose.
- Leads, surveys and photos are kept on the phone until they reach the office, so the app works offline. They are removed when you sign out or delete your account, or when you uninstall the app.
- The app has no advertising, analytics or third-party tracking.
Website and contact form
- What you type into the contact or demo form: name, email, role and message.
- Technical data our hosting provider logs to keep the service secure and working: IP address, browser type, pages requested and error reports.
Billing
Subscription payments are handled by Razorpay. We receive the payment status, amount and a reference; we do not see or store full card numbers, UPI PINs or net-banking passwords.
4. How we use it
- To provide the service: create your account, store and display your records, generate designs, proposals, invoices and PDFs, and send the messages you ask us to send.
- To read electricity bills with AI when you upload one, so the system can be sized (see OpenAI and Anthropic in section 6). The AI providers process the bill only to return the figures and do not use it to train their models.
- To sign you in and keep accounts secure, including OTPs, rate limiting and abuse prevention.
- To bill you for your subscription and keep tax records.
- To answer support requests and demo enquiries.
- To send service emails (account, security, billing and important product changes). We will only send marketing emails if you agree, and every one will have an unsubscribe link.
- To meet legal obligations, such as tax law, lawful requests from authorities and incident reporting to CERT-In.
We do not sell personal data. We do not use the data installers store in SunSolarOne for advertising, and we do not use it to train AI models.
5. Consent and legitimate uses
Under the DPDP Act we process your personal data either with your consent, given when you sign up, submit a form or accept these terms, or for a "legitimate use" the Act allows, such as data you voluntarily provide for a specific purpose, or compliance with law. You can withdraw consent at any time by writing to support@sunsolarone.com or closing your account; this does not affect processing already done, and we may need to stop providing the service if the data is essential to it.
7. Where data is stored
The SunSolarOne database and file storage are hosted in India, in the AWS Mumbai region. Some providers above process limited data outside India — for example, an uploaded electricity bill is sent to OpenAI (or Anthropic) in the United States to be read, and message delivery passes through global networks. We transfer data abroad only to countries not restricted by the Government of India under section 16 of the DPDP Act, and with contractual safeguards.
8. How long we keep it
- Account and service data: for as long as your subscription is active.
- After cancellation: we keep your workspace for 30 days so you can export it or change your mind, then delete it from our live systems. Backups roll over and are erased within a further 30 days.
- Invoices and billing records: 8 years, as required by Indian tax law.
- Contact-form and demo enquiries: up to 2 years after our last conversation.
- Security and access logs: one year, as the DPDP Rules, 2025 require, or longer where CERT-In directions or an investigation require it.
- Deleted accounts: the sign-in is deleted at once; see Delete your account for what else happens.
Installers can delete individual customer records at any time, and can export all their data from Settings → Export.
9. Security
We use encryption in transit (HTTPS/TLS) and at rest, row-level security that keeps each company's data separate, private storage with short-lived links, and access controls on our own team. See our Security page for details. No system is perfectly secure; if a personal data breach occurs we will inform affected people without delay and the Data Protection Board of India (with a detailed report within 72 hours) as the DPDP Act and the DPDP Rules, 2025 require, report to CERT-In where applicable, and, where we act as processor, tell the installer without undue delay.
10. Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with;
- have inaccurate or incomplete data corrected or updated;
- have your data erased when it is no longer needed for the purpose it was collected, unless the law requires us to keep it;
- withdraw consent;
- have your grievances redressed by us, and then complain to the Data Protection Board of India if you are not satisfied; and
- nominate another person to exercise these rights if you die or become incapable.
You can delete your own account at any time from the app or the website; see Delete your account. To use the other rights, write to support@sunsolarone.com or our Grievance Officer below. We may need to verify your identity first. For data an installer holds about you, please contact the installer; we will help them respond.
12. Children
SunSolarOne is a business service and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as the service or the law changes. We will change the "Last updated" date above, and for significant changes we will tell account owners by email or in the app before they take effect.
14. Grievance Officer and contact
In line with the Information Technology Act, 2000, the rules made under it and the DPDP Act, our Grievance Officer is:
- support@sunsolarone.com
- Address
- The Corporate Park, Office No. 902, 9th Floor, Plot No. 14/15, Sector 18, near Warna Dairy, Vashi, Navi Mumbai, Maharashtra 400705
We acknowledge complaints within 24 hours and aim to resolve them within 15 days, and in any case within the time the law allows. For anything else about this policy, write to support@sunsolarone.com.