What data we keep, and why.

What is saved

• The address and the coordinates of the point picked on the map
• Power, panels and, for a configuration, the roof faces you drew (area, tilt, orientation)
• The estimated production, yearly and monthly, with the accuracy PVGIS returns
• The creation date

What is not saved

• Consumption, costs, battery and the other choices made in the summary: they stay in the open page
• The bill, when the company uploads it to compose your quote, as a PDF or a photo: it's read in their browser, including the text of photos and scans, and the file never leaves it

What is saved

• The coordinates of the chosen point
• The type (simulation or configuration) and whether Google's roof data was used
• The status (started or finished) and, if finished, which estimate it leads to

What is saved

• The email you sign in with
• A technical cookie that keeps you signed in (not readable by page scripts)
• The estimates you saved

What is saved

• Company name, VAT number, contacts, logo and headquarters: the headquarters is used to list it among nearby companies
• Price list, prices and the products it quotes with
• The quotes it composes and the proposals it sends: products, costs and, when it reads them from a bill or types them, the customer's month-by-month consumption and the average price they pay. They are used to redo the same sum when the customer opens the link; the bill document and the name are not there
• Its links and their counts: opens, estimates, requests. Without knowing who: at most the town, to tell the company someone is looking
• Who accepted the data processing agreement for the customers' data, when and which version: it's the Art. 28 GDPR agreement, and without this it can't be shown to exist

What is saved

• Name and email, written by the owner when adding the person
• What that person wants to receive by email: the alert on every estimate and the monthly summary, two switches of their own
• Where they want their alerts, if not at the email they sign in with: it only counts after tapping the confirmation link sent there, and of that link Sunnix keeps only a fingerprint, for two days
• Who made a link or a proposal: it serves to send the alert to them as well as to the owner, and to let them find their own things

What is not saved

• No password: you sign in with a link or a code sent to that address, and Sunnix stores none
• No performance counters per person: «who made it» is a technical fact, «how much they made» is a ranking Sunnix does not build

What is saved

• Until when Sunnix can enter: seven days from your request, two weeks after handover
• Every change Sunnix makes, with the time: you read it in "Company", under "What Sunnix did"
• For a company prepared and not yet handed over, who at Sunnix prepared it

What is not saved

• The content of the changes a second time: it's already in your company, and the log only says what changed and when
• The phone number you leave when asking for help: it reaches Sunnix by email, and isn't kept

What is saved

• The system's address and what kind it is: house, warehouse or land
• The name the company gives it to recognise it, if it gives one (“Rossi house”, “Via Roma warehouse”): one line that the company writes and changes
• Who in the company opened it, and who follows it if the company chooses
• The steps taken on the system — the estimate saved, the site visit, each installation stage — with the person who took them and the day
• How it is built, if the company writes it down: the roof sections with their modules, the module and inverter power, the batteries (how many and of what capacity) and the platform where its production is watched, for example the inverter's portal. They are data about the system, not about whoever lives there
• Whether it is archived
• Requests from links: when someone on a company's link asks for a quote, their estimate — address and power — appears among that company's requests, with the day of the request

What is not saved

• No customer data: no name, phone or email. The system is recognised by its address, or by the name the company gives it
• No free notes: there is no field to write them in
• No ranking of people: the history says who took a step, not who takes the most
• We keep neither the name nor the contact details of whoever asks for a quote: they go only to the company, in the request email

What is saved

• Google's orthophoto around the address (140 metres), the heights of the same place, which points are roof and how much sun each gets, in the company's folder, when the company picks it in the editor or opens the pre-filled roof
• Pitch and direction of the roof sections measured on those heights, when the company draws on the orthophoto: they are kept in the estimate, like those typed by hand
• The company's flight orthophotos: the photo straightened with north up, the heights if it uploads them, its four sides on the ground, the flight date and who uploaded it
• The piece of photo that goes under the panels of a quote, saved with the estimate

What is not saved

• The original drone file: the browser reads it on the uploader's computer and sends only the straightened photo and the heights
• No data about whoever lives in the house: the photo is found from the address
• The editor's map imagery: it never leaves Google Maps

What is saved

• The estimate, like those on the site
• If the company emails you a proposal: your address, encrypted, to recognise you when you reply
• Your reply to the proposal and any comment
• If you ask for a job from the system check, or from the panel cleaning check, without booking: address, type and size of the system, the suggested service and one line on what the check found, among the company's requests. Not your name or phone: those only go in the email to the company

What is not saved

• The name, phone and email you write to ask for a quote: they go to the company by email, and Sunnix doesn't keep them
• The consumption you type in the estimate, if you send it with the request: you see it before sending, it goes to the company by email, and Sunnix doesn't keep it
• Your name on the PDF: it stays in your browser

What is saved

• The quote: items, prices, what's included, notes and the system's address
• The photos the company adds, in a private space: they open only with a link that expires within hours, and whoever has the quote link can see them
• Your answer and any comment, as for the other proposals; with the «yes», the optional items you chose and — if you're a private customer — whether you asked to start before the 14-day withdrawal period

What is not saved

• Your name: the company writes it on the sheet, and it stays in their browser and in the link they send you, after the # sign
• The location inside the photos: the phone saves it in the file, and we remove it before uploading
• Your system's production on the link, unless you signed in with the email the quote was sent to

What is saved

• What you booked, the day, time and length of the appointment, and whether it is confirmed, moved or cancelled
• The address of the appointment, and the estimate you started from, if there was one
• The fingerprint of the code that moves or cancels it: the actual code is only in your link
• If you come from the system check: what kind of system it is and one line on what the check found (for example «13% drop, never washed»), which the company finds in the system's folder when it confirms

What is not saved

• Name, phone and email: they go to the company by email, and Sunnix doesn't keep them
• Reminders: your phone's calendar does them, from the file you download. Sunnix doesn't write to you

What is not saved

• Who looked at which companies: the search leaves no trace, and companies know nothing until you write

What is not saved

• The report does not go into any table: it sits in Sunnix's inbox, where we decide and reply
• Your name and email are not given to the reported company, unless strictly necessary

What is saved

• The plant: coordinates, power, roof faces, panels and inverter
• Daily production read from the inverter's portal. Portal credentials are encrypted (AES-256-GCM) and never go back to the browser
• Each day's estimate, the weather used, the alerts and the notes you write in the log
• Your phone notification subscription, if you turn it on

What is saved

• Price, power, area and, if you like, details of the plant and what was included

What is not saved

• Who sent it: no name, email or phone

• Google Maps receives the address you type and the map's coordinates
• The Solar API receives the building's coordinates, and Sunnix keeps the answer (roof shape, sun hours) tied to those coordinates: it's data about the building, not about you
• For a company's estimates, if it picks it in the editor, the Solar API also provides the roof orthophoto and the heights of the same place: see «Orthophotos»
• Tag Manager and Google Analytics only start if you accept analytics cookies

What is saved

• The subscription status and the dates of the paid period
• For the electronic invoice: SDI code (or PEC), VAT number and, for a natural person, the tax code. These stay with Stripe alongside billing, ten years as accounting law requires

What is not saved

• Card details: Stripe handles them and they never pass through Sunnix

Here are all the average cost items on Sunnix

• Supabase: the database, sign-in and the files companies upload, on servers in Europe
• Vercel: the site and the API, on servers in Europe
• Twilio SendGrid: emails
• Stripe: payments
• Upstash: anti-abuse limits, with the IP address encrypted, on servers in Europe
• Google: map, roof data and, with consent, analytics
• Open-Meteo and PVGIS: weather and yield, and they only receive coordinates
• CookieYes: your cookie choice