Privacy Policy

1. Data Controller

Mohammed Ismail Pasha — PVMath
Straubinger Strasse 1, 93055 Regensburg, Germany
Email: contact@pvmath.com
Phone: +49 15 901 482 999

1a. Controller, Not Processor

We act as the controller for all personal data described in this policy. PVMath does not process personal data on behalf of its business customers.

The project data you store on the Platform — site coordinates, parcel boundaries, slope and terrain figures, layout geometry, capacity, yield and economic parameters — is geospatial and technical, and does not identify natural persons. We do not collect landowner names, addresses, or other third-party personal data. Please do not enter such data into free-text fields.

Because we do not act on a customer’s instructions in respect of personal data, no data processing agreement under Article 28 GDPR arises in the ordinary course. See Terms § 9b for the full position.

Wir sind Verantwortlicher für alle in dieser Erklärung beschriebenen personenbezogenen Daten. PVMath verarbeitet keine personenbezogenen Daten im Auftrag seiner Geschäftskunden. Projektdaten sind geografisch-technischer Natur und nicht personenbezogen. Ein Auftragsverarbeitungsvertrag nach Art. 28 DSGVO ist daher im Regelfall nicht erforderlich — siehe AGB § 9c.

2. What Data We Collect

Account Data

When you create an account at app.pvmath.com, we collect your email address, optional name, and a hashed password. This is required to provide access to the platform.

Saved Project Data

If you save a project, we store project metadata you provide (project name, country, location label, site boundary coordinates, workflow settings, and analysis snapshots) in Supabase so you can reopen projects later. You can delete saved projects from your account.

Usage Data

We store a monthly count of how many project analyses you have run on the platform. One analysis is charged when LayoutIQ runs for a site; TerrainIQ, YieldIQ, and RevenueIQ on the same project in the same month do not consume additional credits. This enforces plan limits (Free: 1 screening analysis/month — exports require paid plan; see pvmath.com pricing).

Contact Form Data

If you submit the contact form on pvmath.com, your email address and message are transmitted via Formspree and delivered to contact@pvmath.com. We do not store this data beyond the email inbox.

Data We Do NOT Collect

• No advertising or tracking cookies
• No tracking pixels or advertising identifiers
• No sale of personal data to third parties

3. Legal Basis (GDPR Art. 6)

• Art. 6(1)(b) — Processing necessary for the performance of a contract (account access, free tier enforcement)
• Art. 6(1)(f) — Legitimate interest in preventing abuse of the free tier
• Art. 6(1)(a) — Your consent, where explicitly given (e.g. contact form submission)

4. Third-Party Services

Supabase (Authentication, Database & Project Storage)

Account data, saved projects, and usage counts are stored in Supabase, hosted in the eu-central-2 (Zurich, Switzerland) region — a jurisdiction the European Commission recognizes as offering an adequate level of data protection under the GDPR. Privacy policy: supabase.com/privacy

Cloudflare Pages (Website Hosting)

The pvmath.com marketing website is hosted on Cloudflare Pages. Standard CDN and security logs may apply. Privacy policy: cloudflare.com/privacypolicy

Cloudflare Pages (React App Hosting)

The PVMath Pre-Engineering Automation Platform web app (app.pvmath.com) is hosted on Cloudflare Pages. Standard CDN and security logs may apply. Privacy policy: cloudflare.com/privacypolicy

Railway (API Hosting)

The PVMath API (api.pvmath.com) is hosted on Railway (Railway Corp., US). Analysis requests are processed server-side; only account and project data you save are persisted. Privacy policy: railway.app/legal/privacy

PVGIS JRC (Solar Data API)

Solar irradiation data is fetched from the EU Commission's PVGIS API. Only site coordinates (latitude/longitude) are sent — no personal data. Operated by the EU Joint Research Centre.

OpenTopoData / Copernicus DEM (Terrain Data API)

Terrain elevation data is fetched from OpenTopoData using the Copernicus EU-DEM and SRTM datasets. Only site coordinates are sent — no personal data.

Nominatim / OpenStreetMap (Geocoding)

Location search by name uses the Nominatim geocoding API, operated by the OpenStreetMap Foundation. Only search text is sent — no personal data. Privacy policy: osmfoundation.org/wiki/Privacy_Policy

Formspree (Contact Form)

The contact form on pvmath.com uses Formspree to route submissions to our inbox. Your email and message are processed by Formspree (Formspree Inc., US). Privacy policy: formspree.io/legal/privacy-policy

5. Data Retention

Account and saved project data are retained for as long as your account is active. You may request deletion at any time by emailing contact@pvmath.com. Accounts inactive for more than 24 months may be deleted automatically.

6. Your Rights (GDPR Art. 15–21)

Under GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and all associated data
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at contact@pvmath.com. We will respond within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority. In Bavaria, Germany: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), lda.bayern.de

7. Security

Passwords are hashed and never stored in plain text. All data transmission between your browser and our services is encrypted via HTTPS/TLS. We do not sell, rent, or share personal data with third parties for marketing purposes.