Privacy
In force from [launch date]. Provisional text, to be reviewed by a lawyer before launch. The French version prevails.
The simulation and the PDF report work without an account. The account only serves to save and share projects. No data is sold, and no advertising or third-party analytics is used.
Data controller
Quintiro, publisher of SolarClair.com (see the legal notice). For any request about your data: info@solarclair.com.
What we process, and why
| Data | Why | How long | | ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Address typed in the search | Finding the place. It goes through our server, which queries the IGN Géoplateforme (France) or Photon (elsewhere) without passing on your IP address. | In-memory cache of 10 minutes | | Map and building (France) | Showing the aerial photo and finding your building. Your browser queries the IGN Géoplateforme (photo, building height, LiDAR HD survey of the roof) and the French national building register, RNB (buildings near the point), directly: they receive your IP address and the area shown. The chosen building is kept only in the page address. | Nothing on our side; at these public services, under their own rules | | Coordinates and settings | Calculating production. Our server queries PVGIS with rounded coordinates; the place's weather data are cached. | The time of the calculation; weather cached with no time limit | | Scenario of the PDF report: address, settings, consumption, quote prices | Printing the PDF when you click "Download the PDF". It is never given as a link. | 24 hours | | Imported consumption curve | Calculating self-consumption. Kept only with a saved project, or 24 hours if you add it to the PDF. Never shown to the people you share with. | With the project, otherwise not kept | | Account: e-mail address, passkeys, sessions (IP address, browser) | Signing you in without a password and protecting the account. | Until the account is deleted; a session ends after 7 days without a visit; a sign-in link after 5 minutes | | Saved projects (2 in the free version) | Finding, editing and sharing them. | Until they or the account are deleted | | Shares, e-mail addresses of invited people | Showing the project to the people you choose; sending them the invitation. | 3 months of sharing; deleted with the project | | Comments and reports | Discussing a shared project; handling reports (LCEN). | With the project; a deleted comment keeps only its date | | Quote sent for analysis (PDF or photos), with SolarClair Plus | Checking its figures and its promised production. The file goes to Mistral AI, which reads it and sends us back the installation's figures (see "Service providers"). Mistral receives the whole file, with your name and address if it shows them; we do not extract them. | The file: kept neither by us nor by Mistral after the reading. The figures read, those you confirm and the verdict: until the account is deleted, even if the project is deleted (they count towards the limit of quotes per address) | | Simulations stored through the public API | Serving and exporting them. | 3 months | | Server technical logs (IP address, requested page) | Security and proper operation. | [Duration set at deployment] |
Legal basis: performing the service you ask for, and our legitimate interest in securing it. E-mails (sign-in link, invitation) are sent by Scaleway (see "Service providers").
Cookies
Two cookies, exempt from consent under the CNIL guidelines: NEXT_LOCALE remembers the chosen language; better-auth.session_token keeps you signed in, only if you have an account. While a passkey is created or used, better-auth-passkey keeps the check for a few minutes. No other tracker.
Your rights
From "My account", you download all your data as JSON (portability) and delete your account with everything it holds; your comments on other people's projects become "comment deleted". For any other request (access, correction, objection): info@solarclair.com. You can also complain to the CNIL (cnil.fr).
Service providers
They process data on our behalf, under contract:
- OVHcloud (OVH SAS, Roubaix): the server that runs the site, the API and the database, in Gravelines (France).
- Scaleway (Paris): sending e-mails, and the database's encrypted backups, in Paris. A backup is made every day and kept 30 days: deleted data leaves the backups at most 45 days later.
- Mistral AI (Paris): reading quotes, and only when you send one. We use its European endpoint: the quote is read in data centres of the European Union and the European Economic Area (EFTA included), at Mistral's and its sub-processors' (Microsoft in Sweden and Norway, Mistral Compute in France, CoreWeave and Google in the European Economic Area). Cloudflare, which routes Mistral's traffic, may carry it outside Europe. We refused that what we send be used to train its models. Mistral keeps nothing we send it beyond the time needed to answer us: it granted us zero data retention on 2 November 2026.