Privacy Policy

1About Us & Scope

Sunlife Solar Energy Solution ("we", "us", or "our"), founded on 11 December 2021 by Rahul Kumar Bamne and headquartered in Narmadapuram, Madhya Pradesh, India, operates as an authorized rooftop solar EPC (Engineering, Procurement, and Construction) enterprise.

This Privacy Policy explains how we collect, process, store, and safeguard personal information when you use our website, request solar quotes, submit inquiries, or install and interact with our mobile application available on Google Play.

2Information We Collect

Depending on how you interact with our services, we collect the following categories of information:

3Device Permissions Requested by Mobile App

The Sunlife Solar Android application requests runtime permissions only when directly needed for user-initiated actions:

• Camera Permission: Used to capture live photos of the rooftop, electricity meter, or panel mounting structure during site surveys.
• Photos / Storage Permission: Used to select and upload electricity bill PDFs or site photographs from your device.
• Location Permission (ACCESS_FINE_LOCATION): Used solely by registered field agents to record authenticated attendance and verify geographic proximity to solar project installation sites.
• Internet & Network State: Used to communicate securely via HTTPS with the Sunlife CRM backend API.

4How We Use Your Information

We process your data for legitimate business purposes:

• Secure Authentication: Generating and verifying cryptographically signed One-Time Passwords (OTPs) sent via SMS or WhatsApp.
• Solar Engineering & Installation: Estimating required solar panel wattage, selecting inverters, creating project blueprints, and tracking milestone stages.
• PM Surya Ghar Subsidy Processing: Submitting verified consumer numbers, project completion reports, and inspection certificates to the National Solar Portal and DISCOM.
• Customer Service & Notifications: Sending status updates, warranty certificates, generation reports, and responding to maintenance tickets.
• Operational Audit & Security: Maintaining immutable server-side audit logs of project updates and preventing unauthorized access.

5Data Sharing & Disclosures

We do not sell or monetize your data. Information is shared only with authorized partners necessary to execute our service:

• Government & Utility Bodies: Ministry of New and Renewable Energy (MNRE) and Madhya Pradesh Madhya Kshetra Vidyut Vitaran Company Limited (MPMKVVCL) for net-metering sanctions and subsidy disbursement.
• Secure Cloud Infrastructure: Neon PostgreSQL (encrypted relational database storage) and Google Drive Workspace (encrypted file storage for customer installation documents).
• Transactional Notification Providers: Secure SMS and WhatsApp gateways used strictly for delivery of authentication OTPs and milestone notifications.

6Data Security & Retention

We implement industry-standard technical measures:

• All web and API traffic is encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS).
• Authentication tokens are cryptographically signed using HMAC-SHA256 with strict expiration windows.
• Document storage uses access-controlled cloud repositories with strict role-based separation.

Retention: Project specifications, warranty details, and commissioning records are retained for the duration of the 25-year panel warranty to service ongoing maintenance claims. Non-essential temporary data (such as transient OTP challenge records) is purged automatically within minutes.

8Children's Privacy

Our website and mobile application are intended exclusively for property owners, businesses, and adults aged 18 and older. We do not knowingly solicit or collect personal information from individuals under the age of 18.