Privacy Policy

Information you provide directly:

• Identifiers: first name, last name, email address, phone number, and home address (including city, state, ZIP code, and county)
• Property information: whether you own your home, property type, and whether you have existing solar
• Energy information: your electric utility provider and average monthly electric bill
• Solar preferences: what you are looking to accomplish (new installation, battery storage, upgrade, service, etc.)

Information collected automatically:

• Device and browser data: IP address, browser type, operating system, device identifiers, and referring URL
• Usage data: pages viewed, form steps completed, time on page, and interaction patterns
• TCPA compliance data: form session metadata collected by TrustedForm and LeadiD (both operated by ActiveProspect) to document the circumstances and terms of your consent to be contacted
• Location data: approximate location inferred from IP address, and precise location derived from the address you enter into our form

Information from third-party data sources:

• Satellite roof analysis and solar potential data from the Google Solar API
• Solar energy production estimates from the NREL PVWatts API
• Address geocoding, validation, and autocomplete from the Google Places API
• Electric utility identification from publicly available EIA and NREL OpenEI data
• State and local solar incentive data from DSIRE and other public sources

We use the information we collect for the following purposes:

• To deliver our core service: matching you with vetted residential solar installers in your area and facilitating and booking direct appointments between you and your selected installers
• To generate your solar fit analysis: using satellite roof data, solar irradiance estimates, and local electricity rates to provide preliminary solar potential information for your home
• To display relevant incentive information: showing federal, state, utility, and local solar incentive programs that may apply to your situation
• To send transactional communications: confirmation and informational messages related to your consultation request
• To document and maintain TCPA compliance records: preserving consent certificates that record the specific terms under which you agreed to be contacted by installers
• To operate, improve, and secure our Sites: including fraud prevention, performance monitoring, and service improvements
• To measure the effectiveness of our marketing: understanding which channels and campaigns drive qualified appointment bookings
• To comply with applicable laws and legal obligations

Solar installers you select: When you review installer profiles and choose one or more installers to schedule a consultation with, we share your name, email address, phone number, home address, electric utility, monthly bill amount, and solar-related needs with those specific installers to enable you to book an appointment with them. We share your information only with installers you have explicitly selected. The specific names of the installer(s) receiving your information are clearly displayed to you at the time you choose to book your appointment.

Scheduling and calendar service providers: To facilitate direct appointment booking, installer scheduling is managed through third-party calendar tools, including Calendly, provided by your selected installer. When you book an appointment, your name and email address are shared with Calendly to pre-populate your booking and generate a calendar confirmation. Calendly's use of your information is governed by their own privacy policy. Core Solar facilitates these bookings as a lead-referral service and may receive a fee from the installer for each appointment successfully booked through our platform. This transaction may constitute a "sale" or "sharing" of information under California law, which is why we provide the "Do Not Sell or Share" rights described in Section 10.

TCPA compliance vendors: We share form session data with TrustedForm and LeadiD (both operated by ActiveProspect) to generate consent certificates. These certificates document the page content, consent language, and interaction metadata at the time you submitted your information. This data is retained for compliance purposes and is not used for marketing.

Platform service providers: We use third-party vendors to operate our Sites and business, including cloud hosting (Vercel), database services (Supabase), transactional email delivery (Resend), and payment processing (Stripe). These vendors access only the information necessary to perform their services and are prohibited from using your data for their own purposes.

Google Maps Platform: We share address information with Google Maps Platform APIs (Places API, Solar API) to provide address autocomplete and satellite roof analysis. Google's use of this data is governed by Google's Privacy Policy.

Business transfers: If Core Solar is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Sites before your information is transferred and becomes subject to a different privacy policy.

Legal requirements: We may disclose your information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We do not sell your personal information to data brokers, lead aggregators, or unrelated third parties.

We use cookies and similar technologies to operate and improve our Sites:

• Essential technologies: Session management and form state technologies necessary for our Sites to function correctly. These cannot be disabled without impairing Site functionality.
• TCPA compliance scripts: TrustedForm and LeadiD scripts that run on our forms to generate consent certificates. These record form interaction metadata including time on page, fields completed, and consent language displayed. They do not collect payment information or sensitive personal data.
• Analytics: We may use web analytics tools to understand how visitors use our Sites in aggregate. Analytics data is used to improve our services and is not linked to individual identities for marketing purposes.
• Advertising and remarketing pixels: We may use advertising pixels from platforms such as Google and Meta to measure the performance of our marketing campaigns and to display relevant advertisements to users who have visited our Sites. If and when we implement such pixels, they will be disclosed in an updated version of this policy. You can opt out of interest-based advertising at any time through the Digital Advertising Alliance at optout.aboutads.info or through your browser's Global Privacy Control setting.

You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our Sites.

• Appointment records and associated lead data are retained for a minimum of five years for TCPA compliance documentation purposes
• TCPA consent certificates (TrustedForm, LeadiD) are retained in accordance with those vendors' retention policies, currently five years
• When we have no ongoing legitimate business need to process your information, we will delete or anonymize it

We implement reasonable technical and organizational measures to protect your personal information, including encrypted data transmission (HTTPS), access controls, and secure database storage. However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and transmission of information to and from our Sites is at your own risk. If you believe your information has been compromised, please contact us immediately at privacy@coresolarsolutions.com. In the event of a data breach affecting your personal information, we will notify affected individuals in accordance with California's data breach notification laws (California Civil Code § 1798.82), including the nature of the breach, the information involved, and steps we are taking to address it.

Our Sites are intended for adults who are homeowners and are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@coresolarsolutions.com and we will take prompt steps to delete such information.

Withdrawing consent: If you have submitted your information and wish to withdraw your consent to be contacted by an installer, you may contact us at privacy@coresolarsolutions.com. Note that withdrawal of consent does not affect the lawfulness of any processing that occurred before your withdrawal, and we may not be able to recall information already transmitted to an installer prior to your request.

Opting out of marketing communications: You can opt out of any marketing emails from Core Solar by clicking the unsubscribe link in any email we send, or by contacting us directly. You will still receive transactional messages related to any active appointment requests.

Accessing, correcting, or deleting your information: You may request access to, correction of, or deletion of your personal information by contacting us at privacy@coresolarsolutions.com. We will respond within 45 days.

California residents have additional specific rights described in Section 10 below.

Global Privacy Control (GPC): We honor the Global Privacy Control browser signal. If your browser or browser extension broadcasts a GPC signal, we treat this as a valid opt-out of the sale or sharing of your personal information for advertising purposes under CCPA/CPRA, and we will not activate advertising or remarketing pixels for your session. A banner will appear on our Sites to confirm that your GPC preference has been detected and honored.

Do-Not-Track (DNT): Some browsers include a Do-Not-Track feature. There is currently no uniform standard for how websites should respond to DNT signals. We do not currently respond to DNT signals but do honor the GPC signal described above. California law requires us to disclose this practice.

If you are a California resident, the CCPA and CPRA provide you with specific rights regarding your personal information.

Categories of personal information we collect:

Your rights under CCPA/CPRA:

• Right to Know: You may request information about what personal data we collect, how we use it, and with whom we share it
• Right to Access: You may request a copy of the personal information we hold about you
• Right to Correct: You may request that we correct inaccurate personal information. If your property details, contact information, or other data change after booking, please email privacy@coresolarsolutions.com so we can update our records and notify your selected installer(s) of the correction.
• Right to Delete: You may request deletion of your personal information, subject to legal retention requirements
• Right to Opt Out: You may opt out of the sale or sharing of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights
• Right to Limit Use of Sensitive Information: We do not collect sensitive personal information as defined under CPRA

How to opt out:

• Visit our Do Not Sell or Share My Personal Information page
• Email privacy@coresolarsolutions.com with subject line "Do Not Sell Request" and your name, email address, and phone number
• Enable Global Privacy Control in your browser — we honor this signal automatically

Please note that opting out means we will be unable to enable you to book an appointment with solar installers, as this service requires sharing your information with installer partners.

How to exercise your rights: Contact us at privacy@coresolarsolutions.com. We will verify your identity before processing your request and respond within 45 days. You may designate an authorized agent to submit requests on your behalf with written authorization. If we decline your request, you may appeal by e us with the subject line "Privacy Rights Appeal."

Shine the Light: California Civil Code Section 1798.83 permits California residents to request, once per year and free of charge, information about categories of personal information shared with third parties for direct marketing purposes. Contact us at privacy@coresolarsolutions.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of our Sites after any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

Core Solar Solutions, LLC
2549 Irving St #1112
San Francisco, CA 94122
Privacy inquiries: privacy@coresolarsolutions.com
General inquiries: admin@coresolarsolutions.com