Privacy Policy

1. Who we are

Rooftop Urja Private Limited provides technology-enabled rooftop solar services and related project experiences for consumers, businesses, institutions, partners and other authorised users.

2. Personal data we may collect

Depending on how you use Rooftop Urja, we may collect or process information such as:

• name, mobile number, email address, account and contact details;
• property address, rooftop information, site details, GPS or location information and rooftop/site photographs;
• electricity consumption, electricity bills, sanctioned load, connection information and related energy information;
• identity, address, business or eligibility information provided directly by you or obtained through supported verification services;
• proposal, order, application, agreement, eSign and project records;
• payment status and transaction metadata received from payment providers. We do not intend to store complete card credentials or similar payment authentication secrets;
• installation, commissioning, service-ticket, warranty, plant-performance and monitoring information;
• partner or business onboarding information where you use Rooftop Urja in a business or partner capacity; and
• device, browser, IP address, security, diagnostic, log, cookie and advertising-attribution information such as campaign parameters where applicable.

3. How we obtain information

We may receive information directly from you, from the Rooftop Urja App, from photographs or location permissions you provide, from authorised users acting for you, and from service providers or verification systems used to complete a transaction or project.

Where a government, DISCOM, identity, payment, eSign, communication or other third-party service is used, that provider may separately process information under its own legal terms and privacy practices.

4. Why we use personal data

We may use personal data to provide and improve the Rooftop Urja experience, including to:

• prepare and present rooftop solar proposals and system information;
• evaluate rooftop, electricity and project requirements;
• verify identity, property, site or business information;
• process onboarding, orders, agreements, eSign and payments;
• coordinate design, installation, logistics, commissioning, service, warranty and plant support;
• support applicable subsidy, DISCOM or government processes where requested and eligible;
• operate service tickets, grievance handling and customer support;
• secure our systems, prevent misuse, investigate incidents and comply with legal obligations; and
• understand website/App usage and improve our services, communications and acquisition performance.

5. Consent and lawful processing

We process personal data on the basis of consent and other lawful grounds or permitted uses available under applicable law. Where consent is required, you may withdraw it through the mechanism made available by Rooftop Urja, subject to information that must still be retained or processed for contracts, transactions, legal obligations, dispute resolution or other lawful purposes.

Withdrawing consent may prevent us from continuing a service where the relevant information is necessary to provide it.

6. Location information and photographs

Rooftop Urja may use location information and rooftop/site photographs for functions such as site identification, rooftop verification, proposal preparation, project planning, installation records and quality or service evidence.

You should provide location, photographs and property information only where you are authorised to do so.

7. Sharing of information

We may share relevant information only as reasonably necessary with parties involved in providing or supporting the service, including installation, structural-design, service and other authorised partners; technology and cloud providers; payment, identity, verification, eSign and communication providers; professional advisers; insurers; DISCOMs; government authorities; and other entities where required for a project or by law.

Access should be limited to information reasonably required for the relevant function. Rooftop Urja does not sell personal data to advertisers.

8. Subsidy and government processes

Where you request assistance with PM Surya Ghar or another government/DISCOM process, relevant information and documents may need to be submitted to the applicable portal, authority, DISCOM or authorised participant.

Eligibility, subsidy approval and disbursement remain subject to the applicable scheme, authority and DISCOM requirements.

9. Cookies, analytics and acquisition information

Our website or App may use essential storage, cookies, analytics and campaign-attribution information to maintain sessions, secure the service, understand usage and measure the source of consumer or partner acquisition.

Advertising or analytics providers, where used, may process information subject to their own policies and applicable law.

10. Data retention

We retain information for as long as reasonably necessary for the purpose for which it was collected and for project, warranty, service, accounting, tax, audit, contractual, regulatory, fraud-prevention, dispute-resolution and other lawful requirements.

Retention periods may therefore differ depending on the category of information and the stage of the solar project.

11. Security

We use administrative, technical and organisational measures intended to protect information against unauthorised access, alteration, disclosure, loss or misuse.

No internet or information system can be guaranteed to be completely secure. Users must also protect their devices, passwords, authentication methods and account access.

12. Your choices and rights

Subject to applicable law and its commencement, you may have rights relating to access to information about processing, correction, completion, updating, erasure, grievance redressal, withdrawal of consent and nomination.

Requests may require reasonable identity verification before we act on them. Certain information may continue to be retained where retention is necessary under law or for a permitted purpose.

13. Children

Rooftop Urja is intended for persons capable of entering into the relevant transactions or for persons acting with appropriate parent, guardian or legal authority where required.

Where applicable law requires verified parental or guardian consent for processing a child's personal data, the required process will apply.

14. Third-party services and links

Rooftop Urja may connect to external websites, payment systems, identity services, government portals, DISCOM systems or other third-party services. Their privacy practices are governed by their respective terms and policies.

15. Updates to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal requirements or operating practices. The current version and effective date will be published here.

16. Privacy questions and grievances

Privacy questions and formal grievances may be addressed to:

Project, installation and service matters should ordinarily be raised as a Service Ticket in the Rooftop Urja App so that the matter can be tracked. This does not restrict any statutory grievance or other legal remedy available to you.