Privacy Policy

Solesca Energy, Inc. is a Delaware corporation with its principal office at 4809 N. Ravenswood Ave., Suite 421, Chicago, IL 60640, United States. We provide software for the design, simulation and engineering of solar projects to businesses such as developers, EPCs and engineering firms.

This policy applies to personal information we handle as a controller: information about visitors to our website, about the people who create and use accounts on the platform, and about the business contacts we correspond with.

Much of the data in the platform is content our customers create or upload: site boundaries, equipment selections, project addresses, drawings and similar material (“Customer Content”). Where Customer Content contains personal information about third parties (for example, a landowner’s address), the customer is the controller of that information and we process it only on the customer’s instructions as a processor (or “service provider” under US state law). That relationship is governed by our Data Processing Addendum rather than by this policy. If you are an individual whose information appears in a customer’s project data, please contact that customer first; we will help them respond.

Our Terms of Service govern use of the Services, and our Cookie Policy describes the cookies and similar technologies used on our website.

2.1 Information you give us:

2.2 Information we collect automatically:

2.3 Information we receive from others:

3.1 Purposes:

3.2 Legal bases (EEA, UK and Switzerland):

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (providing the Services and billing to the organization you represent, and responding to your requests); legitimate interests (securing and improving the Services, understanding how our website is used, and marketing to business contacts, in each case balanced against your interests and rights); consent (non-essential cookies on our website and any marketing that requires it; you can withdraw consent at any time); and legal obligation (financial record-keeping and responding to lawful requests).

Our website uses cookies and similar technologies for analytics and to measure whether our advertising leads to demo requests. Our Cookie Policy lists each cookie, its purpose and how long it lasts.

If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics and marketing tools do not load until you accept them in the cookie banner, and you can change your choice at any time through the “Cookie settings” link in the site footer. We honor the Global Privacy Control browser signal as a request to disable marketing cookies.

The platform itself uses only the cookies and local storage needed to keep you signed in and remember your preferences. It does not use analytics, session-recording or advertising cookies.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as described here.

We are based in the United States and store customer data in Amazon Web Services facilities in the US East (Ohio) region, with backups kept in the United States. If you use the Services from outside the United States, your information is transferred to and processed in the United States, where privacy laws may differ from those in your country.

For personal information transferred from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, supplemented by the UK International Data Transfer Addendum and Swiss requirements where applicable. Customers that are controllers can enter into these clauses with us through our Data Processing Addendum.

Customer data is encrypted at rest with AES-256 and in transit with TLS 1.2 or newer. Administrative access to our infrastructure requires multi-factor authentication and is logged. Our container images, dependencies and cloud environment are scanned continuously for vulnerabilities. When a support engineer needs to see a customer’s account, that access runs through a signed, time-limited mechanism and every session is recorded. More detail is available on our security overview, and full documentation is available to customers under NDA.

No system is completely secure. If we learn of a breach affecting your personal information, we will notify you and any relevant authorities as the law requires. You are responsible for keeping your account credentials confidential.

9.1 Everyone:

You can update your name and email address in your account settings, and organization owners and administrators can manage members and billing details. You can opt out of marketing email through the link in any marketing message, in your account settings, or by emailing privacy@solesca.com. Operational messages about your account, invoices, security and changes to our terms are part of the Services and cannot be opted out of while you hold an account.

9.2 European Economic Area, United Kingdom and Switzerland:

You have the right to request access to the personal information we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority (in the United Kingdom, the Information Commissioner’s Office). To exercise these rights, contact privacy@solesca.com; we respond within one month.

9.3 United States:

Depending on the state you live in, you may have the right to know what personal information we collect and how we use and share it, to access and receive a copy of it, to correct inaccurate information, to delete it, to opt out of the sale of personal information, of sharing for targeted advertising and of certain profiling, and to not be discriminated against for exercising these rights. We do not sell personal information or share it for targeted advertising. We treat the Global Privacy Control signal as an opt-out for marketing cookies on our website.

To exercise these rights, email privacy@solesca.com. We will confirm receipt within ten business days and respond within 45 days, extending once by a further 45 days if necessary. If we deny your request, you may appeal by replying to our response; we will explain the outcome of the appeal and, where required, how to contact your state attorney general.

9.4 Verification and authorized agents:

To protect your information, we verify requests by confirming control of the email address associated with your account or, for website visitors, by asking for information that matches our records. An authorized agent may submit a request on your behalf if they provide your written authorization or other proof of authority, and we may still confirm the request with you directly.

If your personal information is contained in a customer’s Customer Content, we will refer your request to that customer and assist them, as described in our Data Processing Addendum.

The Services are business tools intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact privacy@solesca.com and we will delete it.

We send two kinds of email. Operational email covers invoices and payment notices, security alerts, support replies, and notices about changes to our terms and policies. These are part of providing the Services and do not include an unsubscribe link. Marketing email covers product news, events and similar content for business contacts; every marketing message includes an unsubscribe link, and you can also opt out in your account settings or by emailing us. When you opt out, we add your address to a suppression list within ten business days.

12.1 Changes:

We may update this policy as our Services, our providers or the law change. We post every revision, with a summary of what changed, at /legal/updates and update the “last updated” date above. For changes that materially affect how we use your personal information, we will notify account holders by email before the change takes effect.

12.2 Contact:

Privacy questions and requests: privacy@solesca.com. Legal notices: legal@solesca.com. Post: Solesca Energy, Inc., 4809 N. Ravenswood Ave., Suite 421, Chicago, IL 60640, United States.