Privacy Policy

Last updated: 6 October 2026 · Effective: 6 October 2026

This policy explains what personal data PitchSun collects, why, who else handles it, how long we keep it and what you can do about it. It covers:

the website, pitchsun.com;
the web app, app.pitchsun.com;
the PitchSun Android app on Google Play (com.pitchsun.app).

The Android app shows the same app as app.pitchsun.com, so everything in this policy applies to both. On a phone it can also use the camera, location, notifications and file saving, explained under Android app permissions.

"PitchSun", "we" and "us" mean the PitchSun service and the people who run it. PitchSun is built for solar installers and EPC companies in India. Questions: hello@pitchsun.com.

Two kinds of data

Your data. The details of you, your company and your team, and how you use PitchSun. For this data PitchSun is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). We decide how it is used, and this policy explains how.

Your customers' data. The leads, customers, bills, site photos, documents, designs, proposals and project records your business puts into PitchSun. This data belongs to your business, which is its Data Fiduciary. PitchSun is your Data Processor: we store and process it only to run PitchSun for you, on your instructions, and never use it for anything else. Your business is responsible for telling its customers how their data is used and for having their consent. If one of your customers asks us about their data, we pass the request to you.

What we collect

Your account: name, email address, mobile number, profile photo (if you add one), password (stored only as a one-way hash, never in readable form), company name and details such as address, GSTIN and PAN if you add them, state and city, language and display settings, and the details of team members you invite.
Your customers and projects: whatever you and your team enter or upload. This includes customer and lead names, phone numbers, email and postal addresses, and the site's position on the map; electricity bill details (electricity company, consumer number, sanctioned load, monthly units and bill amounts) and photos or PDFs of bills; survey answers; designs, proposals, payments received, project and service records, inventory, and supplier details (including the bank details you add to pay them).
PM Surya Ghar subsidy checks: the customer's name as written on the electricity bill, on Aadhaar and on the bank account, so PitchSun can warn you when they do not match. We store these names, not Aadhaar or bank account numbers. If you upload KYC documents for a subsidy application (Aadhaar card, PAN card, cancelled cheque or passbook), we store those files like any other document.
Photos: site survey photos and documents you take with the camera or pick from your phone or computer.
Precise location: only when you allow it. The phone's GPS position is saved with survey photos and documents (PM Surya Ghar needs geotagged photos) and when a job is started or finished. The designer's "use my location" button reads your position only to centre the map. We never track location in the background.
Voice (web app): if you use the microphone button in the designer, the short recording is sent for transcription to text and then thrown away. It is not stored. The Android app does not ask for the microphone.
Notifications (Android app): if you turn on alerts, your phone's push token (an identifier Google Firebase gives the app on that phone), the platform and the app version, linked to your account. A copy of each alert is also kept in your account.
WhatsApp messages: if your business connects its own WhatsApp Business number, the messages sent and received through PitchSun, with the customer's phone number.
Payments to PitchSun: the plan or credits you buy, invoices and payment status. Card, UPI and bank details are entered on Razorpay's or Cashfree's own checkout and never reach us.
Technical data: IP address, browser or device type, app version, and a log of changes made in your workspace (who changed what, and when). On a proposal or status page you send a customer, we record when it was first viewed, how many times, and the name typed when it is accepted.
Website forms: if you ask for a call back on pitchsun.com, the name, email, phone number, company, team size, city and notes you type.

What we do not collect. PitchSun has no analytics, crash-reporting or advertising SDK. We do not read your contacts, SMS, call log or other apps' files, and we do not use your phone's advertising ID.

How we use it

to run PitchSun: surveys, designs, quotes, proposals, projects, messaging and the other features you use;
to create and secure your account, and to send sign-in codes, invitations, password resets, invoices and the alerts you turn on;
to bill you and keep the records Indian tax law requires;
to answer support requests and fix problems. PitchSun staff can open your workspace read-only for this; every such visit is logged;
to measure our own advertising (see Cookies and advertising).

We collect your data with your consent: you give it when you create an account, and when you allow a permission such as camera, location or notifications. Where the DPDP Act allows it without consent, for example to keep tax records the law requires, we rely on that. We do not sell personal data, and we never use your customers' data to market to them.

Android app permissions

Android asks you before the app can use the camera, location or notifications. You can say no, or turn a permission off later in your phone's Settings → Apps → PitchSun → Permissions; only the feature that needs it stops working.

Camera: to take site survey photos and photos of documents inside the app.
Precise and approximate location: to geotag survey photos and documents, to record where a job was started or finished, and to centre the designer map on where you are. Used only while you are using the app.
Notifications (Android 13 and newer): to alert you when a customer opens or accepts a proposal, pays, sends a WhatsApp message, or a new lead arrives. The app asks only when you tap the button to turn alerts on.
Storage (Android 10 and older only): to save proposals and other files you download to your phone's Documents folder. Newer Android versions do not need this permission.
Internet and network state: to connect to PitchSun and to know when you are offline, so surveys can be saved on the phone and sent later.
Vibration and push delivery: for small haptic feedback and to receive alerts through Firebase Cloud Messaging. These do not ask and do not access personal data.

Services we use

Some of the work is done by other companies acting for us. Each receives only what it needs for its job:

DigitalOcean — the main server that runs the app and its database and stores uploaded files, in Bengaluru, India.
Hetzner Online — a standby server in Ashburn, Virginia, USA. It keeps a continuously updated copy of the database and uploaded files, and is used only if the main server fails.
Cloudflare — all traffic to pitchsun.com and app.pitchsun.com passes through Cloudflare's network for security. Cloudflare also hosts the website, stores website call-back requests, and stores our encrypted nightly backups (Cloudflare R2, Asia-Pacific region).
Google — sends our email (Google Workspace); turns addresses into map positions and looks up roof and sunlight data (Google Maps Platform: Places, Geocoding, Solar and Map Tiles APIs, which receive addresses and coordinates, not names or phone numbers); delivers push alerts to the Android app (Firebase Cloud Messaging, which receives the push token and the alert text, and alert text can include a customer's name, phone number or the start of a WhatsApp message); serves the fonts the app uses; and distributes and updates the Android app (Google Play).
Esri — satellite map images (our server asks only for the map square to show).
European Commission Joint Research Centre (PVGIS) — solar generation estimates (receives the site's coordinates only).
Anthropic and OpenAI — AI features. When you scan an electricity bill or an equipment datasheet, the image or PDF is sent to one of them to read the figures. When you type a command in the designer's command bar, the command and a summary of the design (roof shapes, panels, system size and monthly bill amount, not the customer's name or phone) are sent. Voice recordings from the designer go to OpenAI for transcription. OpenAI also receives your company details to draft the welcome text in a new workspace. Both process this under their business API terms.
Razorpay and Cashfree — take payment when you buy a plan or credits.
Meta — advertising measurement on the website (see Cookies and advertising). Not used in the Android app.

Services you connect. If your business connects its own WhatsApp Business (Meta's WhatsApp Cloud API), Razorpay, IndiaMART, Meta Lead Ads or inverter-monitoring account (SolisCloud, Solarman, iSolarCloud), data moves between PitchSun and that service on your instructions. For example, a customer's name and phone number go to your Razorpay account to create a payment link, and WhatsApp messages go through Meta. That service's own terms and privacy policy then apply.

We may also disclose data when the law requires it, or to protect the rights and safety of our users or of PitchSun.

Where your data is stored

The app's database and uploaded files are stored on our main server in Bengaluru, India. A standby copy is kept in the USA (Hetzner, Ashburn, Virginia), and encrypted backups are kept with Cloudflare. Some of the services above, including Google, Anthropic, OpenAI, Meta, Esri and the European Commission's PVGIS, process data outside India. We transfer data outside India only as the DPDP Act permits, and never to a country the Government of India has restricted.

How long we keep it

Account and workspace data: while your account is open. After you ask us to delete it, see Delete your account.
Backups: database copies on our server are kept 14 days. Encrypted off-site backups are kept up to 90 days for the database and 14 days for uploaded files, so deleted data has left every backup within 90 days.
Push tokens: until you sign out on that phone, the token stops working, or your account is deleted.
Workspace change log: 2 years by default (the workspace owner can change this).
Invoices and payment records: as long as Indian tax law requires, which can be up to 8 years.
Roof and sunlight data from Google: 30 days, unless it is saved inside a design or proposal.
Voice recordings: not stored.
Survey data on your phone: up to 7 days (see On your phone and in your browser).

Security

All traffic between your phone or browser and PitchSun is encrypted (HTTPS/TLS).
Off-site backups are encrypted before they leave our server, with a key that is not kept on any server.
Each workspace can see only its own data. Team access follows the roles the workspace owner sets, and uploaded files open only through links that expire.
Our servers accept web traffic only through Cloudflare, and server access is limited to PitchSun's administrators using SSH keys.

No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.

On your phone and in your browser

The app keeps your sign-in and a few settings (such as theme) in the browser's or app's local storage. So surveys work without signal, it keeps survey drafts, photos waiting to upload, and recently opened customer and survey details on the device for up to 7 days. The logged-in app uses no advertising or analytics trackers and sets no cookies. Signing out removes the sign-in and stops push alerts to that phone.

Cookies and advertising

We advertise on Facebook and Instagram. To measure those ads and show them to people who have already visited, pitchsun.com and the sign-up pages of app.pitchsun.com in a web browser use the Meta Pixel and Meta's Conversions API. They record which pages you view, when you tap WhatsApp, ask for a call back, create an account or buy credits, together with your IP address, browser details and the Meta cookies _fbp and _fbc. When you create an account or pay, we also send Meta your email address, phone number, first name, city, state and country in hashed (SHA-256) form, so it can match the action to an ad. Meta Platforms, Inc. processes this data under its own privacy policy.

We do not use these tools inside your workspace, never on the proposal pages you send to your customers, and never in the Android app: nothing about you is sent to Meta from the app.

To opt out, turn on Global Privacy Control in your browser (we then send nothing to Meta from the browser), or clear the cookies above. You can also manage ad preferences in your Facebook or Instagram settings, or email hello@pitchsun.com and we will stop sending your sign-up and purchase events to Meta.

Your rights

Under the DPDP Act you can:

access a summary of the personal data we hold about you and how we use it, and who we have shared it with;
correct, complete or update it. Most details you can change yourself in the app, in your profile and settings;
erase it, unless the law requires us to keep it;
withdraw consent at any time (below);
nominate someone to exercise these rights for you if you die or become unable to;
raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied with our answer.

To use any of these rights, email hello@pitchsun.com from the address on your account. We may ask you to confirm it is you. We reply within 30 days.

If you are a customer of a solar business that uses PitchSun, please contact that business first: it decides how your data is used. You can also write to us and we will pass your request on.

Withdrawing consent

Camera, location, notifications: turn them off in your phone's settings, or in your browser's site settings, at any time.
Push alerts: turn individual alerts off in your profile in the app, or sign out on that phone.
Advertising measurement: see Cookies and advertising.
Everything else: email us. Withdrawing consent does not affect what was done before, and if you withdraw consent for data PitchSun needs to work, we will have to close your account.

Deleting your account

In the app, open your profile and tap Delete account. It opens an email to us; you can also email hello@pitchsun.com directly from the address you sign in with. We confirm it is you and finish the deletion within 30 days. We delete your account and, if the workspace owner closes the workspace, all of its data: customers, leads, bills, photos, documents, designs, proposals, projects, messages and push tokens. We keep invoices and payment records for plans or credits you bought from PitchSun as long as tax law requires, and the workspace change log for up to 2 years. Deleted data drops out of our backups within 90 days. Full details: Delete your account.

You can also delete a single customer (with their files) from Leads, or a single document from its project, without closing your account.

Children

PitchSun is a tool for businesses. It is not meant for anyone under 18, and we do not knowingly collect children's data. If you think a child has given us data, email us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of this page. Before a significant change takes effect, we will tell account owners by email.

Grievance Officer and contact

For privacy questions, requests and complaints, write to:

Grievance Officer, PitchSun
Email: hello@pitchsun.com

We reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.