Privacy Policy

1. Information We Collect

Account information: Name, email address, company name, and password hash when you register.

Usage data: Energy consumption data, compliance records, utility bill information, training records, and other data you enter into the platform.

Technical data: IP address, browser type, device information, and usage analytics to improve the Service.

2. How We Use Your Information

We use your information to: (a) provide and maintain the Service; (b) authenticate your identity; (c) send transactional emails (password resets, invitations, alerts); (d) generate compliance reports and analytics; (e) improve the Service based on usage patterns; (f) comply with legal obligations.

3. Data Storage & Security

Your data is stored on secure cloud infrastructure (Turso/LibSQL on AWS ap-south-1). We use encryption in transit (TLS) and at rest. Passwords are hashed using bcrypt with industry-standard salt rounds. We implement role-based access controls to ensure multi-tenant data isolation.

4. Data Sharing

We do not sell your personal data. We may share data with: (a) infrastructure providers (Vercel, Turso) as required to operate the Service; (b) email service providers (Resend) for transactional emails; (c) law enforcement if required by law. Shareable compliance views are only accessible via unique tokens you explicitly generate.

5. Multi-Tenant Data Isolation

VoltSpark is a multi-tenant platform. Each client workspace is isolated at the database query level. Users can only access data for client workspaces they have been granted access to. Consultant organizations can manage multiple client workspaces, but each workspace's data is strictly segregated.

6. Cookies & Analytics

We use essential cookies for authentication (session tokens). We may use analytics services to understand platform usage. You can disable non-essential cookies in your browser settings.

7. Your Rights

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your account and data; (d) export your data (available via the platform's data export feature); (e) withdraw consent for optional data processing. Contact us to exercise these rights.

8. Data Retention

We retain your data for as long as your account is active. After account deletion, we may retain anonymized, aggregated data for analytics. Backup copies may persist for up to 30 days before being permanently removed.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The latest version will always be available on this page.

Contact

For privacy-related questions, contact us at hello@voltspark.in.