Privacy Policy

1. Data Controller

Mohammed Ismail Pasha — PVMath
Straubinger Strasse 1, 93055 Regensburg, Germany
Email: contact@pvmath.com
Phone: +49 15 901 482 999

2. What Data We Collect

Account Data

When you create an account at app.pvmath.com, we collect your email address, optional name, and a hashed password. This is required to provide access to the platform.

Saved Project Data

If you save a project, we store project metadata you provide (project name, country, location label, site boundary coordinates, workflow settings, and analysis snapshots) in Supabase so you can reopen projects later. You can delete saved projects from your account.

Usage Data

We store a monthly count of how many project analyses you have run on the platform. One analysis is charged when LayoutIQ runs for a site; TerrainIQ, YieldIQ, and RevenueIQ on the same project in the same month do not consume additional credits. This enforces plan limits (Free: 5/month; paid plans as published on pvmath.com).

Contact Form Data

If you submit the contact form on pvmath.com, your email address and message are transmitted via Formspree and delivered to contact@pvmath.com. We do not store this data beyond the email inbox.

Data We Do NOT Collect

• No advertising or tracking cookies
• No tracking pixels or advertising identifiers
• No sale of personal data to third parties

3. Legal Basis (GDPR Art. 6)

• Art. 6(1)(b) — Processing necessary for the performance of a contract (account access, free tier enforcement)
• Art. 6(1)(f) — Legitimate interest in preventing abuse of the free tier
• Art. 6(1)(a) — Your consent, where explicitly given (e.g. contact form submission)

4. Third-Party Services

Supabase (Authentication, Database & Project Storage)

Account data, saved projects, and usage counts are stored in Supabase (Supabase Inc., US). Supabase is GDPR-compliant and offers EU data residency options. Privacy policy: supabase.com/privacy

Cloudflare Pages (React App Hosting)

The PVMath-Solar Site Intelligence Platform web app (app.pvmath.com) is hosted on Cloudflare Pages. Standard CDN and security logs may apply. Privacy policy: cloudflare.com/privacypolicy

Railway (API Hosting)

The PVMath API (api.pvmath.com) is hosted on Railway (Railway Corp., US). Analysis requests are processed server-side; only account and project data you save are persisted. Privacy policy: railway.app/legal/privacy

GitHub Pages (Website Hosting)

pvmath.com is hosted via GitHub Pages (GitHub Inc., US). GitHub may log IP addresses for security purposes. Privacy policy: GitHub Privacy Statement

PVGIS JRC (Solar Data API)

Solar irradiation data is fetched from the EU Commission's PVGIS API. Only site coordinates (latitude/longitude) are sent — no personal data. Operated by the EU Joint Research Centre.

OpenTopoData / Copernicus DEM (Terrain Data API)

Terrain elevation data is fetched from OpenTopoData using the Copernicus EU-DEM and SRTM datasets. Only site coordinates are sent — no personal data.

Nominatim / OpenStreetMap (Geocoding)

Location search by name uses the Nominatim geocoding API, operated by the OpenStreetMap Foundation. Only search text is sent — no personal data. Privacy policy: osmfoundation.org/wiki/Privacy_Policy

Formspree (Contact Form)

The contact form on pvmath.com uses Formspree to route submissions to our inbox. Your email and message are processed by Formspree (Formspree Inc., US). Privacy policy: formspree.io/legal/privacy-policy

5. Data Retention

Account and saved project data are retained for as long as your account is active. You may request deletion at any time by emailing contact@pvmath.com. Accounts inactive for more than 24 months may be deleted automatically.

6. Your Rights (GDPR Art. 15–21)

Under GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and all associated data
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at contact@pvmath.com. We will respond within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority. In Bavaria, Germany: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), lda.bayern.de

7. Security

Passwords are hashed and never stored in plain text. All data transmission between your browser and our services is encrypted via HTTPS/TLS. We do not sell, rent, or share personal data with third parties for marketing purposes.