BETA 0.9.0 Public beta — your data may be reset on each deployment. Please keep an external copy of any project you can't afford to lose. Rate the app → Release notes →
🔒

Privacy Policy

Last updated: 30 May 2026  |  Effective for all accounts

We take your privacy seriously. This Policy explains what personal data we collect, how we use it, and your rights. We do not sell your personal data to third parties.

1. Who We Are

SolarPro Design / AI App Invent ("we", "us", "our") operates the platform at https://solarpro.aiappinvent.com. For privacy enquiries: support@aiappinvent.com.

2. Data We Collect

2.1 Account Data — When you register, we collect: full name, email address, username, company/organisation name, and country.

2.2 Project Data — Solar system design inputs you submit: site location, load schedules, appliance data, system sizing parameters, and financial inputs.

2.3 Payment Data — When you purchase a subscription, payment is processed by Paystack or Stripe. We store only a transaction reference and subscription status. We do not store full card numbers, CVV codes, or bank account details.

2.4 Usage Data — We automatically collect: IP address, browser type, pages visited, time of access, and error logs. This is used to diagnose issues and improve the Platform.

2.5 Communications — If you contact us (support ticket, email), we retain the content of your communication to resolve your enquiry.

2.6 Feedback — Feedback submitted through the Platform's beta feedback widget is stored and attributed to your account.

3. How We Use Your Data
PurposeLegal Basis
Providing and operating the PlatformContract performance
Processing payments and managing subscriptionsContract performance
Sending transactional emails (welcome, password reset, invoices)Contract performance
Sending marketing newsletters (if opted in)Consent (withdrawable)
Responding to support ticketsLegitimate interest
Detecting fraud and enforcing these TermsLegitimate interest
Improving the Platform via analytics and feedbackLegitimate interest
Complying with legal obligationsLegal obligation

We will not use your personal data for any purpose incompatible with those listed above without your prior consent.

4. Third-Party Services

We share data with the following third parties only to the extent necessary to provide the Service:

ProviderPurposeData SharedPrivacy Policy
Render.comCloud hosting & databaseAll platform data (encrypted at rest)render.com/privacy
PaystackPayment processingName, email, payment detailspaystack.com/privacy
StripePayment processingName, email, payment detailsstripe.com/privacy
Resend / NamecheapTransactional email deliveryName, email addressresend.com/privacy
AnthropicAI assistant featuresMessage content (not linked to identity)anthropic.com/privacy

We do not sell, rent, or trade your personal data with any party for marketing purposes.

5. Data Retention

Active accounts: We retain your data for as long as your account is active.

Deleted accounts: Upon account deletion, personal data is removed within 90 days, except where retention is required by law (e.g., financial transaction records may be retained for up to 7 years).

Anonymised analytics: Anonymised usage data may be retained indefinitely for research and product improvement.

6. Data Security

We implement industry-standard security measures including:

  • HTTPS/TLS encryption for all data in transit
  • Password hashing using Werkzeug's PBKDF2-SHA256 algorithm
  • CSRF protection on all form submissions
  • Rate limiting on authentication endpoints
  • Encrypted environment variables for all API keys and secrets

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.

7. Cookies and Tracking

Session cookies: We use a single session cookie to keep you logged in. This is strictly necessary for the Platform to function and does not require your consent.

No tracking cookies: We do not currently use third-party advertising cookies, analytics cookies (e.g., Google Analytics), or tracking pixels.

Local storage: We use your browser's local storage to remember your display preferences (theme, font size). No personal data is stored in local storage.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access
Request a copy of the personal data we hold about you.
Rectification
Request correction of inaccurate or incomplete data.
Erasure
Request deletion of your personal data ('right to be forgotten').
Restriction
Request that we limit processing of your data in certain circumstances.
Portability
Request your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent
Withdraw consent for newsletter emails at any time via unsubscribe link.

To exercise any of these rights, email support@aiappinvent.com. We will respond within 30 days.

9. Children's Privacy

The Platform is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. International Transfers

Your data may be stored and processed in countries other than your own (including the United States and the European Union) via our cloud infrastructure provider (Render.com). Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you by email or via a prominent notice on the Platform at least 14 days before the change takes effect. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

12. Contact and Complaints

For privacy enquiries or complaints:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.