Your privacy, our responsibility.
We believe in full transparency about how Solar CRM collects, uses and protects your data. This policy explains everything — in plain English.
Key highlights
We never sell your data
Your data is yours. We never sell or rent personal information to third parties.
AWS Mumbai region
All data stored in India (ap-south-1) with AES-256 encryption and daily backups.
Your rights matter
Access, correct, export or delete your data at any time — no friction.
Access controls
TLS 1.3 in transit, RBAC and audit logs so only authorised people reach your data.
Information we collect
We collect information you provide directly and information generated automatically when you use Solar CRM:
Account & profile data
- Name, email address, phone number, company name and job title provided during registration.
- Profile photo (optional), team and role assignments.
Usage & behavioural data
- Pages visited, features used, button clicks and session duration (via Mixpanel).
- Search queries and filters applied within the app.
Device & log data
- IP address, browser type, operating system, referrer URL and device identifiers.
- Error logs and crash reports to help us improve stability.
Payment data
- Billing address and last 4 digits of your payment card.
- Full card details are processed by Stripe or Razorpay and never stored on our servers.
Customer data you upload
- Leads, contacts, project files, quotes, invoices and any other data you import into Solar CRM.
- You own this data. We process it only to deliver the service.
How we use your information
We use the information we collect to:
- Provide, operate, maintain and improve the Solar CRM platform.
- Process transactions and send receipts, invoices and renewal reminders.
- Send product updates, security alerts and support messages.
- Send marketing communications — you may opt out at any time.
- Personalise your experience and recommend relevant features.
- Detect, investigate and prevent fraudulent or abusive activity.
- Comply with legal obligations.
Data storage & security
- AES-256 encryption at rest for all stored data.
- TLS 1.3 for all data in transit.
- Automated daily backups with 30-day retention in a separate AWS region.
- Role-based access control (RBAC) — only authorised personnel access your data.
- Data isolation — each company's data is kept separate.
- Annual penetration testing and mandatory employee security training.
Report vulnerabilities to [email protected].
Your rights
- Access: Request a copy of all personal data we hold.
- Correction: Ask us to fix inaccurate data.
- Deletion: Request erasure at any time.
- Portability: Export data in machine-readable format (Settings → Export Data).
- Objection: Object to marketing or profiling.
- Restriction: Ask us to pause processing while a dispute is resolved.
Email [email protected]. We respond within 30 days. EU/EEA users may also contact their local data protection authority. See our GDPR page for more.
Data retention
- Account data retained while account is active; purged within 90 days after deletion.
- Financial records retained for 7 years under Indian law.
- Backups follow a rolling 30-day deletion cycle.
- Log data anonymised after 12 months.
International data transfers
Solar CRM is headquartered in India. For EU/EEA users, we transfer data only under Standard Contractual Clauses (SCCs) approved by the European Commission. A full sub-processor list is available on request at [email protected].
Children's privacy
Solar CRM is not directed at children under 16. We do not knowingly collect data from children. Contact [email protected] if you believe we have done so inadvertently.
Changes to this policy
We will notify you of material changes by email and in-app notice at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.
Contact our privacy team
- Email: [email protected]
- Post: Solar CRM Technologies Pvt. Ltd., Koramangala, Bengaluru 560034, Karnataka, India.
- Response time: within 30 days of receipt.