Privacy Policy

1. Who we are

UPPOWER Solar ("we", "us") is operated by UPPOWER SOLAR, an authorised solar rooftop channel partner registered in Uttar Pradesh, India. Our operations office is at 105A Tambeshwar Chauraha, Jail Road, Fatehpur, Uttar Pradesh 212601.

2. Data we collect

3. Why we collect it

1. Subsidy application — Submit your KYC + roof + bill data to the National Portal for Rooftop Solar (National Portal for Rooftop Solar / MNRE) on your behalf, with your explicit consent.
2. Installation coordination — Share the minimum necessary details with your assigned vendor and DISCOM (electricity distribution company) so they can schedule the site survey, install, and complete net-metering.
3. Financing — On your explicit consent, share limited details with our bank loan partners (Bank of Baroda, SBI, PNB, Union Bank, HDFC) so they can pre-approve an EMI.
4. Complaint resolution — Track and resolve any post-installation issues.
5. Security — Detect unauthorised access, prevent fraud, and audit staff logins.
6. Product improvement — Anonymised, aggregate metrics only (no personal data).

4. Data we do NOT collect

• ❌ Contacts, call logs, SMS content, microphone or camera access outside a photo-upload action you initiate.
• ❌ Any biometric identifier (facial recognition, fingerprint).
• ❌ Precise real-time location tracking (staff attendance is coarse GPS + only during punch-in).
• ❌ Data from third-party accounts or social media.

5. Who we share data with (and only when needed)

We never sell your data to advertisers, data brokers, or any marketing platform.

6. How long we keep it

• Approved subsidy applications: 7 years (regulatory requirement — enables warranty, subsidy audit, DISCOM records).
• Rejected/withdrawn applications: 2 years.
• Complaint records: 3 years post-closure.
• Payment receipts: 7 years (Indian Income Tax Act).
• Session cookies + login audit: 90 days.

7. How we protect it

• All traffic is over HTTPS/TLS 1.2+.
• Passwords are stored using industry-standard bcrypt hashing (never plaintext).
• Session tokens are httpOnly cookies, safe from XSS attacks.
• Sensitive documents (Aadhaar, PAN) are encrypted at rest.
• Access to production data is restricted to authorised staff and every access is audit-logged.
• We follow the "Reasonable Security Practices" framework under Indian IT Rules 2011.

8. Your rights under the Digital Personal Data Protection Act, 2023

Regardless of where you live, you may exercise the following rights by emailing support@uppower.in:

1. Right to access — get a copy of all data we hold on you.
2. Right to correction / erasure — fix inaccurate data or ask us to delete data no longer needed. (We may need to keep some data for statutory/regulatory reasons — see §6.)
3. Right to data portability — receive a machine-readable export of your data.
4. Right to grievance redressal — see §11 for our Grievance Officer.
5. Right to nominate — nominate a family member to exercise your rights if you are unable to.
6. Right to withdraw consent — anytime for optional data (photos, GPS). Withdrawing consent for required data will terminate the service.

9. Children

UPPOWER Solar is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified via in-app banner and email to the address associated with your account, at least 15 days before the change takes effect. The "Last updated" date at the top of this page will always reflect the current version.

11. Contact us — Grievance Officer

हिंदी सारांश (Summary in Hindi)

UPPOWER Solar केवल वही data इकट्ठा करता है जो PM सूर्य घर योजना के आवेदन, rooftop installation, और खाते की सुरक्षा के लिए ज़रूरी है। हम आपका data कभी बेचते नहीं। पूरी policy ऊपर English में उपलब्ध है — या हमें support@uppower.in पर लिखें, हम आपको Hindi में भेज देंगे। आपका data आपकी अनुमति से ही MNRE portal, DISCOM, vendor, या bank के साथ share किया जाता है। किसी भी समय आप अपना data delete करवाने का request कर सकते हैं।