Data Protection

Privacy policy

October 2026

1. Introduction

SOLARSPLIT SA ("we", "our", "us") is committed to protecting the privacy of users of our platform, mobile applications (iOS and Android), and website. This privacy policy explains how we collect, use, store, and protect your personal data, in accordance with the Swiss Federal Act on Data Protection (nFADP) and the General Data Protection Regulation (GDPR).

Did you receive a letter inviting you to join a solar group? Everything about your answer is in section 13.

2. Data Controller

SOLARSPLIT SA
c/o Microcity SA
Rue de la Pierre-à-Mazel 39
2000 Neuchâtel, Switzerland
Email: info@solarsplit.com

3. Data Collected

We collect the following categories of data:

3.1 Account Data

  • Identification information (first name, last name, email address)
  • Contact information (postal address, phone number)
  • Authentication data (encrypted password, sessions)

3.2 Solar Project Data

  • Building address and geolocation
  • Roof characteristics (surface area, orientation, inclination)
  • Declared energy consumption data
  • Production simulations and ROI calculation results

3.3 Monitoring Data

  • Real-time energy production data (via your inverters)
  • Login credentials for manufacturer platforms (stored encrypted)

3.4 Technical and Usage Data

  • Anonymous device identifier (IDFV on iOS, Android ID) — this identifier is specific to our application and does not allow tracking across other applications
  • Platform (iOS/Android), app version, operating system version
  • Timezone and language preferences
  • Usage milestones: we record the first occurrence of certain key actions (e.g., first simulation started, first project sent) to improve the user experience. This data is aggregated and is not subject to individual profiling

3.5 Geolocation Data

  • Addresses entered during simulations (GPS coordinates, postal code, EGID identifier)
  • Approximate location for finding nearby installers (only with your permission)

4. Legal Basis for Processing

We process your data on the following legal bases:

  • Contract performance: provision of our simulation, installer matching, and monitoring services
  • Legitimate interest: improvement of our services, aggregated usage analysis (milestones), platform security
  • Consent: sending newsletters, sharing your data with third-party installers
  • Legal obligation: retention of data required by Swiss law

5. Use of Data

Your data is used to:

  • Provide our solar simulation and profitability calculation services
  • Connect you with qualified installers from our network
  • Ensure the monitoring of your solar installations
  • Improve the user experience through aggregated journey analysis (without individual profiling)
  • Send you communications related to your project
  • Ensure the security and proper operation of our services
  • Comply with our legal obligations

6. Data Sharing

We share your data only with:

  • Partner advisors: if you use the partner code of an advisor (partner insurance agency), that advisor is informed of the progress of your request (first name, locality, steps reached), never of your contact details
  • Qualified installers from our network (only with your explicit consent, as part of your project)
  • Hosting: our servers are hosted in Europe (Heroku/Salesforce)
  • File storage: Amazon Web Services (AWS S3), Europe region
  • Transactional emails: Mailgun (for confirmations, password resets)
  • Push notifications: Firebase Cloud Messaging (Google) — only the notification token, no analytical data
  • Call transcription and summary: ElevenLabs and OpenAI, only for a call recorded with your consent (see section 12)
  • Technical visit routes: when we schedule a technical visit, we compute travel times on the OpenStreetMap map with our own routing service, hosted by Modal, and with Google Maps (Routes API) only if that service does not answer. Only the GPS positions of the buildings to be visited and of the technical office's starting point are sent, with the planned departure time for Google, without your name or contact details. We keep the travel times with positions rounded to about a hundred metres, without any link to your file, those of Google for 24 hours at most. Modal and Google may process this data in the United States, with the safeguards provided for by the nFADP (Swiss-U.S. Data Privacy Framework or standard contractual clauses)
  • Ad measurement: when you arrive from one of our ads and leave your contact details, we send Meta a cryptographic fingerprint (irreversible hash) of your email address and phone number to measure campaign effectiveness. No cookie is set and your contact details never leave our servers in clear text
  • Google ads: when you arrive from one of our Google ads, the click identifier that Google adds to the page address is saved with your request. We then send Google Ads this identifier and the stage your request has reached (request sent, visit accepted, signature), without your name or contact details, to measure the effectiveness of our ads. No advertising tag is loaded on our site and no cookie is set
  • Solar groups: for people invited to join a group, the representative of the group and the grid operator only receive what section 13 describes
  • Competent authorities if required by law

7. Data Retention

  • Account data: retained as long as your account is active, then deleted within 90 days of account deletion
  • Project data: retained for the duration of your project and 5 years after completion (legal obligations)
  • Usage data (milestones): retained in aggregate form, anonymised after account deletion
  • Monitoring data: retained as long as the monitoring configuration is active
  • Call recordings: audio deleted once transcribed, at the latest 7 days after upload, transcript deleted after 90 days, approved summary kept with your request (see section 12)
  • Joining a solar group: bill kept while the home takes part, question deleted six months after our answer, everything deleted three months after a group that is not formed is abandoned (see section 13)

8. Data Security

We implement appropriate technical and organisational measures to protect your data:

  • Data encryption in transit (TLS/HTTPS)
  • Authentication via secure tokens (JWT)
  • Passwords stored as hashes (never in plain text)
  • Restricted data access following the principle of least privilege

9. Your Rights

In accordance with the nFADP and the GDPR, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate data
  • Right to erasure: request the deletion of your data
  • Right to data portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to withdraw your consent at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact us at info@solarsplit.com. We will respond within 30 days.

If you believe that the processing of your data violates your rights, you may file a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or the competent supervisory authority in your country of residence.

10. Cookies and Similar Technologies

Our website currently does not use tracking cookies or third-party analytics tools. Only strictly necessary technical cookies may be used for the operation of the site. We will inform you and request your consent should this change.

When you arrive from an ad, the campaign parameters of the address (source of the visit, click identifier) are kept in your browser's session storage, which is cleared when you close the tab, so they can be attached to your request. This is not a cookie and no third party can access it.

11. YouTube API Services

SOLARSPLIT publishes its own videos on its YouTube channel using YouTube API Services, from its internal publishing tools. These tools are reserved for the SOLARSPLIT team: they are not offered to the public and do not request access to anyone else's YouTube account.

By using the YouTube features of these tools, their users agree to be bound by the YouTube Terms of Service. Data processed by Google in this context is subject to the Google Privacy Policy.

  • Data accessed: information about the SOLARSPLIT YouTube channel (identifier, name, list of our videos and their publication status), to check that a video has been published
  • Data sent: our own videos, with their title, description and publication settings
  • Retention: the identifier and link of each published video are kept in our publication history for as long as the access authorization remains valid. The authorization token is kept in our systems and is accessible only to authorized staff
  • Sharing: this data is not shared with any third party other than Google, which provides YouTube API Services
  • Users' devices: for YouTube purposes, these tools set no cookies and collect no information from their users' devices
  • Third-party content: these tools do not allow any third party to display content or advertising

SOLARSPLIT's access to a YouTube account can be revoked at any time from the Google Account permissions page. Data obtained through this access is then deleted from our systems within 7 days.

For any question or complaint about this use, contact us at info@solarsplit.com.

12. Recording of Calls with an Advisor

When a SOLARSPLIT advisor calls you about your request, they may ask you at the start of the call whether you agree to it being recorded. The call is only recorded with your consent. If you decline, the advisor takes notes and your request is handled in the same way.

  • Purpose: to write the summary of the call. The advisor reviews and corrects it before adding it to the notes of your request. No decision is made by automated means
  • Legal basis: your consent, given orally at the start of the call
  • Transcription: the recording is transcribed by ElevenLabs, which deletes its copy of the transcript as soon as it has been delivered to us
  • Summary: the transcript is sent to OpenAI, which suggests a summary to the advisor
  • Transfer abroad: ElevenLabs and OpenAI may process this data in the United States, with the safeguards provided for by the nFADP (Swiss-U.S. Data Privacy Framework or standard contractual clauses)
  • Retention: the audio is deleted once transcribed, at the latest 7 days after upload. The advisor also deletes the recording from their device once uploaded. The transcript is deleted after 90 days. The approved summary remains in the notes of your request

You may withdraw your consent at any time and exercise the rights described in section 9 by writing to info@solarsplit.com.

13. Participants in a Solar Group

This section is for people invited to join a solar group, that is a virtual self-consumption group (RCPv), by a personal letter that carries a code. The group is proposed by your landlord, your condominium or a neighbour, and organised with SOLARSPLIT. You answer on a web page opened by this code, without an account or an app.

13.1 Data Collected

  • Your answer, its date and the version of the text shown
  • To take part: the first and last name of the holder of the electricity contract, their phone number (required), their email (optional) and whether they are a tenant or an owner. Between neighbours, the email is also required, as the contract of the group is signed with a code received by email
  • Your electricity bill, as a photo or a PDF, or the number of your metering point typed in
  • Your agreement that your grid operator sends the metering data of your meter to the group and to SOLARSPLIT
  • If you do not take part: an optional reason, chosen from a list
  • For a question: your question, and a phone number or an email to answer you
  • We do not ask for an identity document, a date of birth or bank details

13.2 Use

  • Single purpose: forming the group, registering it with your grid operator, then preparing the statements. This data is never used for marketing or advertising
  • Bill: reading the metering point number, the grid operator, the consumption and the tariff on it, to register your home and refine the estimate of your benefit
  • Phone: reaching you if a document is missing, if the metering point does not match, or about the document to sign
  • Email: sending you the documents of the group and, between neighbours, signing the contract of the group
  • Reason for declining: only read in aggregate, to improve the offer
  • No tracking: the answer page uses no tracking cookies and no analytics tools

13.3 Who Sees What

  • The representative of the group (your landlord, the administrator of the condominium or the neighbour who organises it): for your home, your answer, the declared name and whether you are a tenant or an owner. Never your bill, your metering point, your phone number, your email, a reason for declining or your questions
  • Other participants: the tenants of a building do not see each other. Between neighbours, you become visible to the other members of the group when you take part, and the page says so before you send your answer. In a condominium, the participating units are known to the assembly of co-owners
  • Your grid operator: the number of your metering point, and the name of the contract holder when its registration form asks for it. It then sends the metering data of your meter with your agreement
  • SOLARSPLIT: all of this data, accessible only to the people in the team who handle the groups. Your bill is kept in private, encrypted storage
  • Your personal code: it only shows the status of your answer. The page never shows your name, your contact details or your bill again, so that someone who finds your letter cannot read them

13.4 Retention Periods

  • Bill: kept while your home takes part, then deleted when it leaves (end of the lease, choice to stay supplied by the grid operator, exclusion) or when the group is dissolved
  • If you do not take part: the information and the bill already sent for your home are deleted with your answer
  • Reason for declining: deleted when the group is formed
  • Question: deleted six months after our answer
  • Answer and agreement on metering data: kept while you take part, then for the legal retention period of the billing records
  • Group that is not formed: everything is deleted three months after it is abandoned
  • Building not confirmed by the grid operator: your answers and documents are deleted as soon as its answer arrives

13.5 Your Rights

  • You can ask for access to your data, its correction or its deletion by writing to info@solarsplit.com, as described in section 9
  • If your letter got lost or was put in another letterbox, write to us: we stop the old code and create a new one for your home

14. Changes

We reserve the right to modify this privacy policy at any time. The date of the last update is indicated at the top of this page. In the event of a substantial change, we will inform you by email or through our applications.

15. Contact

For any questions regarding your personal data or this privacy policy, contact us at: info@solarsplit.com

SOLARSPLIT SA · c/o Microcity SA · Rue de la Pierre-à-Mazel 39 · 2000 Neuchâtel, Suisse