PRIVACY POLICY

Last updated August 27, 2026.

This Privacy Policy explains how Solarise Technologies d.o.o., registered with the Serbian Business Registers Agency under number 22021168, with tax identification number 114420359 and registered office at Fruškogorska 1, 21000 Novi Sad, Serbia (Solarise, we, us or our), collects, uses, discloses and protects personal data.

It applies to our public websites, business application, solar calculators and proposal tools, embedded widgets, AI assistants, communications and related services (the Services). It should be read with our Terms of Service, End-User Terms and, for business customers, our Data Processing Addendum.

CONTENTS

1. Our privacy roles
2. Personal data we collect
3. Sources of personal data
4. How and why we use personal data
5. AI, profiling and estimates
6. How we disclose personal data
7. Regional payment providers
8. International transfers
9. Retention, export and deletion
10. Security
11. Cookies and analytics
12. Your rights and choices
13. Children
14. Changes to this Policy
15. Contact and complaints

1. OUR PRIVACY ROLES

Solarise is a controller when we decide why and how to process personal data for account administration, billing support, security, our websites, product analytics, direct communications and our legal obligations.

When a solar business uses the Services to collect or process information about its leads, prospects or customers, that business generally decides the purpose of the processing and is the controller. Solarise acts as its processor or service provider under the Data Processing Addendum. Contact that business first if your request concerns information submitted to its calculator or proposal workflow. We will assist it as required by law.

2. PERSONAL DATA WE COLLECT

Depending on how you use the Services, we may collect:

• Account and business data: name, work email, telephone number, password hash, language, role, company, address, country, profile image and account preferences.
• Billing data: plan, billing interval, currency, transaction and subscription identifiers, tax and invoice details, payment status and limited payment-method information received from the checkout provider. We do not store full payment-card numbers.
• Lead, property and proposal data: contact information, property address and coordinates, building and roof characteristics, imagery, electricity use and bills, selected products, system designs, financing preferences, quote and proposal details, notes and status.
• AI and support content: chat messages, prompts, responses, uploaded business documents, support requests, feedback and communications. Do not submit sensitive data that is not needed for the requested feature.
• Technical and usage data: IP address, device and browser information, timestamps, authentication and security events, pages and features used, referring pages, cookie identifiers, campaign parameters and diagnostic logs.
• Integration data: information needed to connect an integration you enable, such as calendar, mapping, analytics, webhook or social-sign-in identifiers and tokens.

We do not intentionally ask for special-category or highly sensitive personal data such as health, biometric, political, religious or sexual information. Please do not upload it unless we have expressly agreed and you have a lawful basis.

3. SOURCES OF PERSONAL DATA

We receive personal data:

• directly from you when you register, configure or use the Services;
• from a Solarise business customer when it creates a record, imports data or embeds a calculator or AI assistant;
• automatically from browsers, devices, cookies, logs and security systems;
• from services you choose to connect and from mapping, imagery, geocoding and property-data providers; and
• from payment, communications, fraud-prevention and analytics providers.

4. HOW AND WHY WE USE PERSONAL DATA

We process personal data to:

• create and administer accounts, authenticate users and provide the requested Services;
• prepare solar calculations, preliminary estimates, proposals, documents, communications and customer workflows;
• process subscriptions, support checkout and maintain transaction and tax records;
• provide support, service messages, verification codes and requested marketing communications;
• secure the Services, prevent fraud and abuse, troubleshoot faults and enforce our agreements;
• understand usage, improve reliability and features, and develop new functionality using aggregated or de-identified information where practicable; and
• comply with law, respond to lawful requests and establish, exercise or defend legal claims.

Where European, UK or Serbian data-protection law applies, our legal bases are performance of a contract or steps requested before a contract, compliance with legal obligations, our legitimate interests in operating, securing and improving a business service, and consent where the law requires it. When we process for a business customer, that customer determines the legal basis and instructs us under the DPA.

You may unsubscribe from non-essential marketing at any time using the link in the message or by contacting us. We may still send account, security, billing and other transactional messages.

5. AI, PROFILING AND ESTIMATES

Some features use AI and machine-learning services, including Microsoft Azure OpenAI and Azure AI Search, to answer questions, analyse documents and property information, and support preliminary solar estimates. We may send the prompt, relevant conversation, selected customer documents and necessary context to those providers to generate a response.

AI responses and solar estimates can be inaccurate. They are intended to support a human-led sales and assessment process. Solarise does not use these features to make solely automated decisions that produce legal or similarly significant effects about an individual. Business customers must review outputs and are responsible for how they deploy and rely on them.

The AI assistant identifies itself as an AI system before interaction. For more information about acceptable use and responsibilities, see the Terms of Service and End-User Terms.

6. HOW WE DISCLOSE PERSONAL DATA

We disclose personal data only as needed for the purposes above, on a customer's instructions, or where law permits or requires it. Recipients may include:

• cloud hosting, database, storage, backup and cybersecurity providers;
• Microsoft Azure OpenAI, Azure AI Search and selected document parsing and AI observability providers for enabled AI features;
• Twilio SendGrid, Twilio and Infobip for email, telephone and SMS communications;
• Google, Apple, Microsoft Azure Maps, Mapbox, IPinfo and selected aerial imagery providers for maps, geocoding, imagery and regionalisation;
• analytics, diagnostics, customer-support and fraud-prevention providers;
• payment providers described below and professional advisers, auditors, insurers and authorities where necessary; and
• a buyer, investor or successor in a merger, financing, reorganisation or sale, subject to appropriate confidentiality and privacy safeguards.

We do not sell personal data for money. If applicable law treats certain analytics or advertising-cookie disclosures as a "sale" or "sharing", you may use available cookie controls or contact us to exercise an opt-out right.

7. REGIONAL PAYMENT PROVIDERS

The payment provider depends on region, product and checkout route. Your checkout will identify whether Paddle, Lemon Squeezy or Stripe applies. A provider may act as an independent controller and merchant of record for payment, tax, invoicing, fraud prevention, refunds and chargebacks. Its privacy policy applies to the data it collects directly:

• Paddle Privacy Policy
• Lemon Squeezy Privacy Policy
• Stripe Privacy Policy

Solarise receives transaction status, customer and subscription identifiers, billing contact details and limited payment-method metadata needed to administer the account. We do not receive or store full card details.

8. INTERNATIONAL TRANSFERS

Solarise is established in Serbia and our providers may process data in Serbia, the European Economic Area, the United Kingdom, the United States and other countries. Where personal data is transferred from a country that restricts international transfers, we use an approved transfer mechanism where required, such as an adequacy decision, the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, together with supplementary safeguards where appropriate. Contact us for information relevant to a specific transfer.

9. RETENTION, EXPORT AND DELETION

We keep personal data only as long as reasonably needed for the purposes described here, including to provide an active account, comply with tax, accounting and legal duties, resolve disputes, prevent fraud and enforce agreements. Retention depends on the data and context. Security logs are generally shorter-lived than account and transaction records, while legally required billing records may be kept for the applicable statutory period.

After a business account terminates, Customer Data remains available for retrieval for at least 30 days as described in the Terms. We then delete or irreversibly de-identify it from active systems within a reasonable period, subject to legal holds, required records and time-limited backup cycles. Data in backups is isolated from ordinary use and deleted as the backups rotate.

We may retain an objection or suppression record so that we can honour a marketing opt-out, and may retain evidence of consent, acceptance and account security events where necessary to demonstrate compliance.

10. SECURITY

We use technical and organisational measures designed to protect personal data, including access controls, authentication, encryption in transit, environment separation, logging, backups, supplier controls and incident response procedures. No service can guarantee absolute security. You are responsible for protecting account credentials and promptly reporting a suspected compromise to [email protected].

11. COOKIES AND ANALYTICS

We use necessary cookies and similar storage for authentication, security, language, preferences and core functionality. Subject to your choices and applicable law, we may also use analytics and marketing technologies to measure site and campaign performance. Browser settings can block cookies, but blocking necessary cookies may prevent parts of the Services from working. Where a consent tool is available, use it to change non-essential cookie choices.

12. YOUR RIGHTS AND CHOICES

Depending on your location and the processing, you may have rights to access, correct, delete, restrict or object to processing; receive a portable copy; withdraw consent; opt out of certain marketing, targeted advertising, sale or sharing; and appeal a refused request. Withdrawing consent does not affect processing that was lawful before withdrawal.

To exercise a right concerning a Solarise business account, email [email protected]. If your data was submitted to a solar business's calculator or proposal, contact that business because it is normally the controller. We may ask for information needed to verify identity and authority. Authorised agents must provide appropriate proof. We will respond within the period required by applicable law.

You may complain to the data-protection authority in your country. In Serbia, the supervisory authority is the Commissioner for Information of Public Importance and Personal Data Protection. EEA and UK residents may contact their local supervisory authority.

13. CHILDREN

The business Services are not directed to children, and people must be at least 18 to create a Solarise business account. We do not knowingly collect children's personal data through our public websites for our own purposes. If you believe a child has provided data inappropriately, contact us. A business customer remains responsible for the audience and lawful configuration of its embedded calculator.

14. CHANGES TO THIS POLICY

We may update this Policy to reflect product, provider or legal changes. We will update the date above and, for a material change, provide reasonable advance notice through email, the Services or another durable medium where required. Earlier versions may be requested from us.

15. CONTACT AND COMPLAINTS

For privacy requests and questions:
Solarise Technologies d.o.o.
Fruškogorska 1, 21000 Novi Sad, Serbia
[email protected]

For general service questions, email [email protected].