Privacy Policy

Last updated: 28 August 2026

Solar Engine is a service operated by Reneww Ltd (“Solar Engine”, “we”, “our” or “us”). We are committed to protecting the privacy of everyone who visits our website and uses our platform. This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.

1. Who we are

Solar Engine is a white-label quote engine for renewable energy installers. References to “we”, “us” and “our” in this policy are to Reneww Ltd, the data controller responsible for your personal information.

• Registered office: Bartle House, Oxford Court, Manchester M2 3WQ
• Company number: 15565528
• ICO registration: ZB747551

2. Information we collect

• Contact and business details (such as your name, email address, phone number and company) when you enquire, request a demo, or create an account.
• Information you or your customers provide about properties and projects when using the quote engine.
• Technical and usage information (such as device, browser and pages visited) collected automatically when you use our website and platform.
• Any other information you choose to provide to us.

3. How we use your information

• Provide, operate and improve the Solar Engine platform and website.
• Respond to your enquiries and provide support.
• Set up and administer accounts.
• Send service messages and, where you have consented, marketing communications.
• Analyse and improve our products and services.
• Meet our legal and regulatory obligations.

4. Sharing your information

• We share information with trusted service providers who help us run our platform (for example hosting, email and communications providers). They are contractually required to keep it confidential and to use it only for the purposes we specify.
• We do not sell your personal data to third parties.
• We may disclose information where we are required to do so by law.

5. Google user data (Gmail and Google Calendar)

Solar Engine lets an installer connect their own Google Workspace or Gmail account, so that customer email and site-survey appointments can be handled inside the platform. This section explains exactly what we do with data obtained through Google APIs, and applies in addition to the rest of this policy.

What Google user data we access. Only with the account holder’s explicit consent, and only these scopes:

• gmail.send — to send quotes, replies and booking confirmations from the connected mailbox, in the existing customer thread.
• gmail.modify — to read the customer replies that belong to a Solar Engine customer record, and to mark a message read and apply the “Solar Engine” label once it has been handled in the platform. We never delete mail.
• calendar.events.owned — to create, update and cancel the installer’s own site-survey and demonstration appointments on their own calendar, with the customer invited, and to read those appointments back when the installer changes them in Google Calendar.
• calendar.freebusy — to read free/busy information only, so the platform offers only appointment times that are free. We do not read the detail of any other event.
• admin.directory.user.alias — only when a Google Workspace administrator presses “Create alias” during setup, and asked for at that moment: to add the one alias they typed (such as enquiries@) to their own connected account. We never list the directory or touch another user.
• openid and userinfo.email — to identify the connected account and show which mailbox is in use.

The data we receive is: the email address of the connected account; the headers, body text and attachments of the messages in conversations that belong to a customer record; and the times, titles and attendees of calendar events.

How we use it. Solely to provide and improve the user-facing features above — sending and threading customer email, showing customer replies on the customer record, keeping the mailbox and the record consistent, and booking appointments without clashes. We do not use Google user data for advertising, for lending or credit decisions, for profiling, or for any purpose the account holder has not asked for.

Who we share it with. We do not sell Google user data, and we do not transfer it to data brokers, advertisers or any other third party for their own purposes. It is processed on our behalf by the infrastructure providers who host the platform (Amazon Web Services and Vercel, in the United Kingdom and the EU) under contract, and disclosed otherwise only where the law requires it. Aggregated or anonymised data derived from Google user data is treated under this same restriction.

How we protect it. OAuth refresh tokens are encrypted at rest with AES-256-GCM under a per-value envelope key. All traffic runs over TLS. Message and calendar data is stored in our EU/UK-hosted database, is separated by tenant, and is visible only to the account holder’s own organisation. Staff access is restricted to the smallest number of people needed to operate and support the service.

How long we keep it, and how it is deleted. Disconnecting the account in Settings → Integrations revokes the grant at Google and deletes the stored tokens immediately. Message and event data held against a customer record is deleted when that record is deleted, and all of an organisation’s Google user data is deleted within 30 days of the account being closed, or within 30 days of a written deletion request to the address in section 10. Users may also revoke our access at any time at myaccount.google.com/permissions.

Limited Use. Solar Engine’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Raw and derived Google user data is not used to develop, improve or train generalised artificial-intelligence or machine-learning models, and is not transferred to any third-party service that would use it for that purpose.

6. Cookies

This website sets no cookies of its own and uses no analytics or advertising trackers. Content we embed — such as the booking calendar — may set its own cookies. Our Cookie Policy explains this in full, including how to control cookies in your browser.

7. Data security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, use or disclosure.

8. Your rights

Under UK data protection law you have rights including the right to access, correct or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk).

9. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page, and your continued use of our website and services indicates your acceptance of the updated policy.

10. Contact us

If you have any questions about this policy or how we handle your personal information, contact us at:

• Email: matt@solarengine.co.uk
• Post: Bartle House, Oxford Court, Manchester M2 3WQ