Privacy Policy
This Privacy Policy describes how Calisgroup LLC ("we," "us," or "Solvera") collects, uses, stores, and shares information when you install or use the Solvera Solar Kit Configurator app (the "App") from the Shopify App Store, or when shoppers interact with the App on a Shopify store that has installed it.
If you have questions about this policy, contact us at solvera@calisgroup.com.
1. Who we are
Solvera is operated by Calisgroup LLC, a limited liability company. Our contact email is solvera@calisgroup.com. Our business address is [Calisgroup LLC business address - to be added].
The Solvera Solar Kit Configurator is a Shopify app that lets merchants offer a guided solar system configurator on their Shopify store. The App generates live bills of materials and quotes that shoppers can email, share, or add to cart for checkout.
2. Information we collect
2.1 Information we collect from Shopify merchants
When a merchant installs the App, we receive the following information through Shopify's APIs and through your interactions with the App:
- Shop information: shop domain, shop name, contact email, country, currency, locale, plan name, and timezone.
- Product catalog data: products, variants, prices, images, and metafields that the merchant has chosen to use in the configurator.
- App configuration: settings the merchant enters in the App admin, including configurator structure, customer-facing questions, branding (logo, colors), pricing tiers, custom variables, formulas, and customizations to text and images on the storefront configurator.
- Quote and order data: quotes generated through the App, including line items, quantities, prices, and any sales-mode edits made by the merchant's team.
- Subscription and billing data: information related to the merchant's App subscription, which is processed through Shopify's billing system.
- Support communications: any messages or information a merchant sends us when contacting support.
2.2 Information we collect from a merchant's customers (shoppers)
When a shopper uses the Solvera configurator on a merchant's storefront, we may collect:
- Quote form information: the shopper's email address, first name, last name, and optional ZIP code, submitted when the shopper requests a quote by email.
- Configuration data: the shopper's selections within the configurator (e.g., chosen panels, racking, inverters), and the resulting bill of materials.
- Session data: technical information needed to deliver the configurator experience, such as session identifiers and the configurator state.
We collect this information on behalf of the merchant operating the storefront. The merchant is the data controller for their own customers' information, and we act as a data processor.
2.3 Information we collect automatically
The App generates technical logs related to its operation, including timestamps of requests, error logs, and basic usage information. These logs are used to operate, secure, and improve the App.
3. How we use information
We use the information we collect to:
- Provide, operate, and maintain the App and its features;
- Generate bills of materials, quotes, and other outputs requested by the merchant or shopper;
- Send transactional emails to shoppers who request a quote by email, and to merchants for account- and billing-related notifications;
- Respond to merchant support requests;
- Detect, prevent, and address technical issues, fraud, and abuse;
- Improve the App's features and reliability;
- Comply with our legal obligations.
We do not sell personal information. We do not use shopper personal information to send marketing communications outside of what the merchant has set up through the App.
4. Legal basis for processing (EEA / UK)
If you are located in the European Economic Area or the United Kingdom, our legal bases for processing your personal data are:
- Performance of a contract: when we process information to deliver the App's services to a merchant or to fulfill a shopper's quote request.
- Legitimate interests: when we process information to secure, debug, and improve the App, where these interests are not overridden by your rights.
- Consent: where required by applicable law, we will obtain consent before processing.
- Legal obligation: when we process information to comply with applicable laws.
5. How we share information
We share information only as described below:
- With Shopify: we exchange data with Shopify's platform as needed to deliver the App's services, in accordance with Shopify's terms.
- With sub-processors: see Section 6 below.
- To comply with law: we may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety.
- In a business transfer: if Calisgroup LLC is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction.
We do not sell or rent personal information to third parties.
6. Sub-processors
We use the following third-party service providers to operate the App. Each sub-processor is bound by data protection obligations and processes data only as needed to provide their service:
| Sub-processor | Purpose | Data location |
|---|---|---|
| Shopify, Inc. | App platform, merchant authentication, billing | Global |
| Vercel Inc. | App hosting and serverless execution | United States |
| Neon Inc. | PostgreSQL database for App and quote data | United States |
| Resend, Inc. | Transactional email delivery (quote emails) | United States |
7. Data retention
We retain merchant and shopper information for as long as the merchant's App subscription is active and for as long as is needed to provide the App's services.
When a merchant uninstalls the App, we receive a shop/redact request from Shopify approximately 48 hours after uninstall. Within 30 days of receiving that request, we permanently delete the merchant's shop data, configuration, quotes, and related records from our systems.
When a merchant requests deletion of a specific customer's data (for example, in response to a privacy request), we receive a customers/redact request from Shopify and delete that customer's data from our systems within 30 days.
We may retain limited information after deletion where required by law (for example, billing records for tax and accounting purposes), or as anonymized statistics that cannot identify any individual.
8. Security
We use industry-standard security measures to protect the information we process, including encryption in transit (HTTPS/TLS), encryption at rest for database storage, access controls limiting who can access systems and data, and regular security review of our infrastructure. No system is perfectly secure, but we work to maintain appropriate safeguards.
9. International data transfers
Calisgroup LLC is based in the United States, and our sub-processors process data in the United States and other jurisdictions. If you are located outside the United States, your information will be transferred to and processed in the United States.
Where required by applicable law (for example, transfers from the EEA, UK, or Switzerland), we rely on appropriate safeguards such as Standard Contractual Clauses to protect the information.
10. Your rights
Depending on where you live, you may have rights regarding your personal information, including:
- The right to access the personal information we hold about you;
- The right to correct inaccurate information;
- The right to request deletion of your information;
- The right to restrict or object to certain processing;
- The right to data portability;
- The right to withdraw consent where processing is based on consent;
- The right to lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us at solvera@calisgroup.com. If you are a shopper on a merchant's store, you can also contact the merchant directly. We will respond to verifiable requests within the timeframes required by applicable law.
11. Cookies and tracking
The Solvera configurator may use browser session storage and similar technologies to maintain the shopper's configuration state during a session. We do not use third-party advertising cookies or cross-site tracking. The merchant's storefront may use its own cookies and trackers separate from the App; those are subject to the merchant's own privacy practices.
12. Children's privacy
The App is intended for use by merchants and adult shoppers. We do not knowingly collect personal information from children under the age of 13 (or the equivalent minimum age in the relevant jurisdiction). If you believe we have collected information from a child, contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If we make material changes, we will notify merchants through the App admin or by email.
14. Contact us
If you have questions, concerns, or requests related to this Privacy Policy or our handling of your personal information, contact us at:
Calisgroup LLC
Email: solvera@calisgroup.com
Address: [Calisgroup LLC business address - to be added]