Online Privacy Policy

Effective Date: October 26, 2023

This Privacy Policy (“Privacy Policy” or “Policy”) describes how Solerro (“Company,” “we,” “us,” or “our”) collects, uses, and shares personal information. This Policy applies to visitors of our website at www.solerro.com (the “Site”), users of our internal web application for managing residential solar project site surveys (the “Application”), and other individuals (“you”) whose personal information we collect.

This Policy also describes your rights and choices regarding your personal information. It does not apply to third-party sites, products, or services, even if they link to our Site or Application. We encourage you to read the privacy policies of any third-party site with which you choose to interact.

1. Collection of Personal Information

We collect personal information directly from you, automatically through your use of our Site and Application, and potentially from third parties. The types of personal information we collect depend on your interactions with us:

Contact Information: When using our Site (e.g., to inquire about services) or Application (e.g., as an employee or contractor), we may collect your name, email address, phone number, and potentially home address or work location.

Communications Information: If you communicate with us (e.g., via email, support requests), we may collect details about the communication and any information you provide.

Utility Usage Information (Site Visitors): For visitors inquiring about our services via the Site, we may collect information about electric utility usage to assess qualification for solar products and services.

Application Usage Data: When you use the Application, we may collect information about your interactions, such as features used, actions taken, and technical data like IP address, browser type, and device information for operational and security purposes.

Information via Google Calendar Integration (Application Users): If you choose to connect your Google Calendar to our Application, we access specific information from your Google account necessary to schedule and manage site survey appointments, as detailed in Section 5 below.

2. How We Use Your Personal Information

We use the personal information we collect for purposes including:

Providing and improving our Site and Application.

Facilitating the scheduling and management of site surveys (using Google Calendar data as described below).

Communicating with you (e.g., responding to inquiries, providing support, sending service-related notifications).

Assessing qualification for our products and services (for Site visitors).

Analyzing usage trends to improve user experience and functionality.

Maintaining security and preventing fraud.

Complying with legal obligations.

For internal operational purposes.

3. How We Share Your Personal Information

We do not sell your personal information. We may share your personal information with the following categories of third parties under specific circumstances:

Vendors and Service Providers: We may share information with third-party vendors who perform services on our behalf, such as website hosting, data analysis, IT services, customer support, and email delivery. These vendors are contractually obligated to protect your information and use it only for the services they provide to us.

Within Solerro (for Application Data): Information within the Application may be accessible to authorized personnel within Solerro who need access for operational purposes (e.g., scheduling coordinators, managers).

Business Transactions: If Solerro is involved in a merger, acquisition, financing, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you if such a transaction results in a material change to the handling of your information.

Legal Compliance and Harm Prevention: We may disclose your information if required by law, subpoena, or other legal process, or if we have a good faith belief that disclosure is necessary to protect the rights, property, or safety of Solerro, our users, or the public; to prevent fraud or illegal activity; or to enforce our policies.

Google Calendar Data Sharing Limitations: Information accessed via Google APIs (specifically Google Calendar data) is subject to strict limitations. We do not share this data except as necessary to provide the core scheduling functionality within the Application, comply with applicable law, or as part of a merger, acquisition or sale of assets (in which case users will be notified). We do not use Google Calendar data for advertising purposes. See Section 5 for more details.

4. Cookie Policy

Our Site and potentially our Application may use cookies and similar technologies (like web beacons or local storage) to enhance user experience, analyze usage, and ensure functionality. Cookies are small text files stored on your device.

Types of Cookies: We may use session cookies (expire when you close your browser) and persistent cookies (remain until deleted or expired). These can be first-party (set by us) or third-party (set by service providers like analytics tools).

Purpose: Cookies help us remember preferences, understand how users interact with our services, maintain security, and troubleshoot issues.

Your Choices: Most web browsers allow you to control cookies through settings. You can typically refuse or delete cookies. Please note that blocking essential cookies may impair the functionality of our Site or Application. You can find instructions for managing cookies in common browsers via their help documentation or websites (links provided in the previous version are generally applicable).

5. Handling of Google Calendar Data (Application Users)

Our internal Application integrates with Google Calendar to streamline the booking and management of site survey appointments. This section details how we handle data accessed from your Google account via this integration.

Information We Access: With your explicit authorization (granted when you connect your Google account), the Application accesses the following information from your Google Calendar:

Your basic profile information (Email Address) - Used solely to identify the connected account.

Read/Write access to your Google Calendar events - Used to check your availability, create new calendar events for site surveys you are assigned to, update details of those survey events (like time or location), and potentially remove survey events from your calendar if canceled or rescheduled through the Application.

We only access calendar data necessary for scheduling and managing site survey appointments facilitated through the Application. We do not access your Google account password.

Purpose of Using Google Calendar Data: We use the information accessed from your Google Calendar solely for these purposes within the Application:

To check your availability for potential site survey appointments.

To automatically create calendar events in your connected Google Calendar for surveys assigned to you.

To update these specific calendar events if survey details change.

To remove these specific calendar events if a survey is canceled.

Data Retention of Google Calendar Data:

Access Tokens: Secure tokens required to interact with your Google Calendar are stored securely and retained until you disconnect your Google Calendar from the Application, your access is revoked, the tokens expire, or you delete your Application account.

Event Data: Details of calendar events created or managed by our Application may be stored temporarily or logged within our Application systems as part of the survey record for operational and auditing purposes. This associated event information is retained only as long as necessary for the management of the specific site survey project or as required for our internal record-keeping, and typically no longer than the retention period for the overall survey record itself. This data is deleted when you delete your Application account or when it is no longer needed for the stated purposes. We do not continuously store or sync your entire calendar.

Deletion Trigger: We retain Google Calendar data (tokens and associated event information stored in our systems) only until it's no longer needed for the purposes described above, or until you actively disconnect your Google account from the Application via the Application settings, or you request deletion of your Application account.

Data Deletion of Google Calendar Data: You have control over the Google Calendar data accessed by our Application. You can request its deletion by:

Disconnecting your Google Calendar integration within the Application settings [Specify where, e.g., "in your User Profile settings within the Application"].

Deleting your user account for the Application.

Contacting Solerro support at [email protected] with a specific request to delete your Google Calendar integration data.

Upon receiving a valid request or detecting disconnection/account deletion, we will initiate the process to securely delete the relevant Google Calendar access tokens and any associated event data stored in our active systems within a reasonable timeframe, typically within [Specify timeframe, e.g., 30 days]. Data may persist in backups for a limited period (e.g., up to [Specify backup retention, e.g., 90 days]) before permanent deletion, but will not be used operationally.

Compliance with Google Policies: Our use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar data accessed by the Application will not be used for serving advertising, will not be sold, and will not be transferred to third parties except as necessary to provide or improve the scheduling functionality, comply with applicable law, or as part of a merger, acquisition, or sale of assets (with user notification).

6. Data Security and Retention

We implement technical, administrative, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Measures include [Optional: Mention specific measures if comfortable, e.g., encryption, access controls, secure networks]. However, no internet transmission or electronic storage method is 100% secure.

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. For Google Calendar data, specific retention and deletion practices are described in Section 5. For other data, retention periods depend on the context (e.g., duration of your account, length of a project, legal requirements). You can request deletion of your information as described in Section 9.

7. International Data Transfers

Our Site and Application are operated primarily in the United States and intended for users located in the U.S. If you access them from outside the U.S., your information may be transferred to, stored, and processed in the United States. We take steps to ensure that any international transfers comply with applicable data protection laws.

8. Use by Children

Our Site and Application are not directed toward individuals under the age of 16 (or a higher age threshold if required by applicable law). We do not knowingly collect personal information from children without appropriate parental consent. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

9. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information:

Access: You may have the right to request access to the personal information we hold about you.

Correction: You may have the right to request correction of inaccurate personal information.

Deletion: You may have the right to request the deletion of your personal information, subject to certain exceptions (e.g., legal obligations, ongoing service provision). This includes the Google Calendar data as detailed in Section 5.

Opt-Out of Marketing: You can opt out of receiving electronic marketing communications from us by following the unsubscribe instructions in the emails or contacting us. You may still receive essential transactional or service-related communications.

Google Account Control: You can manage or revoke our Application's access to your Google account at any time through your Google account security settings (https://myaccount.google.com/permissions). Revoking access via Google will prevent the Application from accessing your calendar data going forward. You can also disconnect the integration within the Application settings.

To exercise applicable rights, please contact us using the information in Section 12. We will respond to your requests in accordance with applicable law. We may need to verify your identity before processing your request.

California Residents: If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), such as the right to know, delete, correct, and limit the use of sensitive personal information. California's "Shine the Light" law also permits residents to request certain details about information shared with third parties for direct marketing purposes (though we state we do not do this).

Nevada Residents: Nevada residents have the right to request to opt-out of the "sale" of their personal information (as defined by Nevada law). As stated, we do not sell personal information.

10. Links to Other Sites

Our Site or Application may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing them with any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on this page and indicate the "Effective Date" of the revision. For material changes, we may provide more prominent notice, such as through the Application interface or via email. We encourage you to review this Policy regularly.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Solerro

Email: [email protected]

Phone: 208-888-3900