Privacy Policy — Sun Pilot

Sun Pilot, Inc. ("Sun Pilot," "we," "our," or "us") operates the website sunpilot.ai and related services that help California homeowners evaluate their solar potential and connect with qualified solar installers. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have — including your rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

By using our website, submitting your address or contact information, or scanning a Sun Pilot QR code, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

1.1 Information You Provide Directly

When you use Sun Pilot services, you may provide us with:

Property address — entered into our address analysis form to generate a solar potential estimate for your home.
Full name — collected when you opt in to receive your solar report or connect with an installer.
Email address — used to deliver your personalized solar report and follow-up communications.
Phone number — collected when you consent to be contacted by phone or SMS regarding solar options for your property.

1.2 Information We Collect Automatically

When you visit sunpilot.ai or scan one of our QR codes, we automatically collect:

IP address — used to infer your general geographic location and for fraud prevention.
Device information — including browser type, operating system, screen resolution, and device identifiers.
Page view data — including pages visited, time spent, referral URL, and click paths.
QR scan events — when you scan a Sun Pilot physical postcard or marketing material, we record the scan timestamp and, where available, approximate location derived from IP address.
Cookies and localStorage — we use browser-based storage to track consent status, session analytics, and to remember your address entry across page reloads. See Section 5 for details.
UTM parameters and referral data — to understand how you found us and to attribute conversions to marketing campaigns.

1.3 Information From Third Parties

We may receive additional information about your property from public records and third-party data sources, including:

Property characteristics (roof size, age, tilt) from county assessor records and commercial real estate databases.
Solar irradiance and energy data from the National Renewable Energy Laboratory (NREL) and Google's Solar API.
Satellite and aerial imagery from mapping providers used to assess roof geometry.

2. How We Use Your Information

We use the information we collect for the following purposes:

Solar analysis: To generate an AI-powered estimate of your roof's solar potential, projected energy production, and estimated savings based on your property address and publicly available data.
Installer matching: To connect you with licensed solar installation companies in your area who may contact you with quotes and information about their services.
Delivering your report: To send your personalized solar analysis to the email address you provided.
Follow-up communications: With your consent, to contact you by phone, SMS, or email with information about solar incentives, installer options, and related solar topics.
Service improvement: To analyze aggregate usage patterns, improve our solar estimation models, and enhance user experience on our platform.
Fraud prevention and security: To detect and prevent fraudulent submissions, abuse of our systems, and other harmful activity.
Legal compliance: To fulfill our obligations under applicable law, respond to legal process, and enforce our Terms of Service.
Marketing analytics: To measure the effectiveness of our advertising campaigns and optimize our customer acquisition channels.

3. How We Share Your Information

3.1 Solar Installers

If you opt in to be connected with solar installers, we share your name, email, phone number, property address, and solar analysis results with one or more licensed solar installation companies operating in your area. These installers are independent third parties who may contact you directly. By requesting installer connections, you consent to being contacted by those installers.

3.2 Service Providers

We share your information with carefully selected third-party service providers who help us operate our platform and services. These providers are contractually required to use your data only to provide services to us and to protect it with appropriate security measures. Our current service providers include:

Google Solar API — provides rooftop solar potential data, irradiance maps, and roof geometry analysis based on property address.
NREL (National Renewable Energy Laboratory) — provides solar resource data and energy production calculations.
Resend — our email delivery provider. We send your solar report and follow-up emails through Resend's infrastructure.
Lob — our physical mail provider. We use Lob to send printed solar analysis postcards with QR codes to property addresses identified through our canvassing program.
Twilio — our voice and SMS communications provider. If you consent to phone or text contact, communications may be routed through Twilio's platform.
Cloud hosting and infrastructure providers — for secure storage and processing of our systems and data.
Analytics providers — to help us understand how users interact with our website.

3.3 Business Transfers

If Sun Pilot, Inc. is involved in a merger, acquisition, financing, reorganization, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

3.4 Legal Requirements

We may disclose your information if required to do so by law, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud.

3.5 What We Do Not Do

We do not sell your personal information to data brokers, advertising networks, or other third parties for their own marketing purposes without your explicit consent as described in this policy.

4. Data Retention

We retain your personal information for as long as necessary to provide our services, maintain our business records, and fulfill the purposes described in this policy. Specifically:

Contact and lead information is retained for up to 24 months from the date of collection, unless you request deletion earlier.
Installer referral records are retained for 36 months to support dispute resolution and quality assurance.
Server logs and IP address data are retained for up to 12 months.
Anonymized and aggregated analytics data may be retained indefinitely.

After the applicable retention period, we securely delete or anonymize your personal information.

5. Cookies and Browser Storage

We use cookies and browser localStorage for the following purposes:

Consent tracking: We store a record of your privacy consent choices in localStorage so we do not ask you again on return visits.
Session analytics: We use session-scoped cookies to understand how users navigate our website, which pages they visit, and where they drop off in the solar analysis flow.
Address persistence: We temporarily store the property address you enter in localStorage so it is not lost if you navigate between pages during your session. This data is cleared when you close your browser or complete your session.
Attribution: We use cookies to attribute your visit to the correct marketing channel, campaign, or QR code so we can measure the effectiveness of our outreach.

Most browsers allow you to control cookies through your settings. Disabling cookies may affect certain functionality of our website. We do not currently respond to "Do Not Track" browser signals, but we do honor opt-out requests submitted through the mechanisms described in this policy.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit using TLS, access controls limiting who can view personal data, and regular security reviews.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights, we will notify you and relevant authorities as required by applicable law.

7. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected personal information from a child under 18, we will promptly delete that information. If you believe we have inadvertently collected information from a minor, please contact us at privacy@sunpilot.ai.

8. Your CCPA / CPRA Privacy Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Your California Privacy Rights

Right to Know: You have the right to request that we disclose what personal information we have collected about you, including the categories of information, the sources, the purposes for which it is used, and the third parties with whom it is shared.
Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (such as information needed to complete a transaction or comply with legal obligations).
Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. While we do not sell your data in the traditional sense, sharing your contact information with solar installers for compensation may constitute a "sale" or "sharing" under California law. You may opt out at any time.
Right to Limit Use of Sensitive Personal Information: To the extent we collect sensitive personal information, you have the right to limit its use to purposes directly related to the services you requested.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, or provide a different level of service because you exercised your privacy rights.

How to Exercise Your Rights

To submit a privacy request, please visit our CCPA Rights Request page or contact us directly:

Email: privacy@sunpilot.ai
Phone: (833) 333-5831

We will verify your identity before processing your request. We respond to verifiable consumer requests within 45 calendar days. If we need additional time (up to 90 days total), we will notify you of the extension within the initial 45-day period.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written authorization signed by you, or you must directly confirm the request with us.

Shine the Light (California Civil Code Section 1798.83)

California residents may also request information about our disclosure of personal information to third parties for those parties' direct marketing purposes during the preceding calendar year. To make such a request, contact us at privacy@sunpilot.ai with "Shine the Light Request" in the subject line.

9. Links to Third-Party Sites

Our website may contain links to third-party websites, including solar installer websites, financing partners, and utility company resources. This Privacy Policy applies only to Sun Pilot's website and services. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing them with personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or by a prominent notice on our website. We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Sun Pilot, Inc.
Privacy Inquiries: privacy@sunpilot.ai
Phone: (833) 333-5831
Website: sunpilot.ai

For CCPA-specific requests, you may also use our dedicated Do Not Sell or Share My Personal Information page.