Privacy Policy
Last updated: October 2026
1. Who we are
SolarFleet is operated by InspireGreen Ltd (company number 08057676), registered in England and Wales. Our registered office is Abacus House, Caxton Place, Cardiff, CF23 8HA.
Data protection enquiries: hello@solarfleet.io.
If you have any questions about this privacy policy or how we handle your data, contact us at hello@solarfleet.io.
2. What data we collect
When you use SolarFleet, we may collect the following information:
- Account information: Name, email address, and company name when you register. Sign-in and credentials are handled by our identity provider (WorkOS) — we don't store your password ourselves.
- Site data: Solar site details including location, system specifications, inverter data, and energy production data retrieved from monitoring APIs (e.g. SolarEdge and Solis).
- Usage data: How you interact with the platform, including pages viewed, features used, and timestamps.
- Website visit data: When you visit our public website, the page address (including any query string), referrer, page title, screen size, browser language and your IP address are received by the website services listed in section 5. We use this to understand which pages are read and how visitors — including AI search tools — find us. These services set no cookies on the public website.
- Device and browser data: IP address, browser type, operating system, and device type for security and performance purposes.
- Communications: Emails and support messages you send to us.
3. How we use your data
We use your data to:
- Provide and operate the SolarFleet platform
- Monitor your solar sites and generate alerts
- Generate maintenance reports and compliance documentation
- Send service notifications, alerts, and updates
- Improve the platform and fix issues
- Respond to your support requests
- Comply with legal obligations
4. Legal basis for processing (GDPR)
We process your data under the following lawful bases:
- Contract: Processing necessary to provide the service you signed up for.
- Legitimate interests: Improving our service, security monitoring, and fraud prevention.
- Consent: Where you have opted in to marketing communications.
- Legal obligation: Where we are required by law to retain or share data.
5. Data sharing and sub-processors
We do not sell your data. We use the following sub-processors and recipients to operate the service (the maintained list is on our sub-processors page):
- PlanetScale: UK-region managed Postgres database where your operational data is stored.
- WorkOS: Authentication and identity (sign-in, sessions, organisation membership). We do not store your password ourselves.
- Cloudflare: Edge network/CDN, the Hyperdrive connection layer in front of our database, transactional email, and Workers AI (document categorisation).
- Stripe: Subscription billing and payment processing.
- PostHog (EU region): Product analytics within the authenticated application only (not the public website).
- Plausible (Plausible Insights OÜ, EU): Cookieless analytics on our public website. Receives your IP address and browser details with each page view; Plausible states it doesn't store IP addresses or set cookies.
- Ahrefs (Ahrefs Pte. Ltd., Singapore): Ahrefs Web Analytics, cookieless page-view analytics on our public website. Receives the page address including any query string, referrer, page title, screen size, browser language and your IP address.
- Rutt.io: A monitoring script on our public website that records page views so we can see which AI crawlers and AI search tools visit and refer people to the site. Receives the page address, referrer, browser details and your IP address.
- Google Fonts (Google LLC, US): Serves the typefaces used on our public website and some public report and quote pages. Your browser requests the fonts directly from Google, which receives your IP address, browser details and the referring page.
- Open-Meteo: Weather and irradiance data. No personal data is shared.
- Monitoring API providers: SolarEdge and Solis, to retrieve your site data at your direction. Other inverter brands are on our roadmap.
- People you share with: If you send a report, quote or visit link to a client or other third party, they can see what that link contains.
- Legal authorities: If required by law, regulation, or valid legal process.
6. Cookies
Our full cookie disclosure, including the cookies we set, the cookieless analytics on our public website and how to control them, is in our Cookie Policy.
7. Data retention
We retain your data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required by law to retain it. Residual copies in routine encrypted backups are overwritten on the backup-rotation cycle.
Site monitoring data (energy production, alerts) may be retained in anonymised form for statistical purposes.
8. Data security
We take data security seriously. Your data is:
- Encrypted in transit (TLS/HTTPS)
- Stored in a UK-region managed Postgres database (PlanetScale), accessed via Cloudflare Hyperdrive
- Isolated per organisation, with query-level tenant isolation verified by a continuous cross-tenant test
- Accessible only to authorised personnel
- Protected by authentication and access controls
More detail is on our security page. Business customers can request our Data Processing Agreement.
9. Your rights (GDPR)
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Port your data to another provider
- Object to processing based on legitimate interests
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at hello@solarfleet.io. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
10. International data transfers
Your operational data is stored in a UK region. Where data is transferred outside the UK in the course of using the sub-processors listed in section 5, we rely on an appropriate transfer mechanism (UK adequacy regulations, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum, as applicable).
11. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Your continued use of the platform after changes constitutes acceptance.
12. Contact
InspireGreen Ltd
Abacus House, Caxton Place, Cardiff, CF23 8HA
Company number 08057676 · Registered in England and Wales
Email: hello@solarfleet.io