SOLSAT cares about your privacy. This policy explains how we collect, use and protect your personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019).
Data controller information
SOLSAT ("the Company", "we") is the data controller under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) for all personal data collected through the SOLSAT service at solsat.dev.
Contact: privacy@solsat.dev
Data we collect
We collect the following personal data when you use SOLSAT:
- Account data: name, email, password (encrypted), phone number
- LINE OAuth data: LINE User ID, display name, profile picture (only what you allow)
- Property data: home address and geographic coordinates used for satellite image analysis
- Energy usage data: average monthly electricity bill (entered by you)
- Device and usage data: IP address, browser type, pages visited, time spent (through Mixpanel analytics)
- Cookies: necessary cookies, and analytics cookies (only with your consent)
We collect the above categories of personal data when you register, submit a pre-registration form, or browse the SOLSAT platform.
Purpose of use
- Analyse rooftop solar potential using satellite imagery and AI
- Match homeowners with solar installers in their area (only with consent)
- Create and manage user accounts
- Send notifications and service updates
- Analyse and improve the user experience (analytics)
- Comply with applicable laws and regulations
Legal basis for processing (PDPA)
We process personal data under the following legal bases, in line with Sections 24 and 26 of the PDPA:
| Data | Purpose | Legal basis |
|---|---|---|
| Account data | Create and manage the account | Performance of a contract (Section 24(3)) |
| Property data and electricity bill | Analyse solar potential | Performance of a contract (Section 24(3)) |
| LINE User ID | Sign in with LINE | Performance of a contract (Section 24(3)) |
| Customer data to installers | Match with an installer | Consent (Section 19) |
| Analytics (Mixpanel) | Improve the service | Consent (Section 19) |
Disclosure to third parties
We may disclose personal data to the following third parties:
- Mixpanel, Inc. (United States) provides usage analytics. Data is sent to servers in the United States under Standard Contractual Clauses (SCCs).
- LINE Corporation (Japan/Thailand) for sign-in through LINE OAuth. The data received is limited to what the user allows.
- Satellite imagery providers. The home address is sent to retrieve satellite imagery for the analysis.
- Solar installers in our network. Only when you give explicit consent during registration, we share your name, phone number and property data with installers in your area.
- Government authorities when required by a legal order or by law.
We do not sell personal data to any third party.
Retention and deletion
- Account data: for as long as the account exists, plus 3 years after the account is deleted
- Property and electricity data: for as long as the account exists
- Data sent to installers (leads): removed from SOLSAT systems within 30 days of sending
- Analytics data: according to Mixpanel's retention policy (up to 36 months)
- Cookies: session cookies are deleted when the browser closes; persistent cookies are deleted when they expire
You can ask us to delete your data at any time under your right in Section 33 of the PDPA.
Your rights under the PDPA
As a data subject you have the following rights under the PDPA. To exercise them, contact privacy@solsat.dev. We will respond within 30 days:
- Right of access (Section 30): request a copy of your personal data
- Right to rectification (Section 35): ask us to correct inaccurate data
- Right to erasure or anonymisation (Section 33): ask us to delete or anonymise your data
- Right to data portability (Section 31): receive your data in a machine-readable format
- Right to object (Section 32): object to processing in certain cases
- Right to restriction (Section 34): ask us to temporarily restrict processing
- Right to withdraw consent: withdraw consent at any time, without retroactive effect
- Right to complain: lodge a complaint with the Personal Data Protection Committee (PDPC)
Data security
We apply appropriate security measures: HTTPS/TLS encryption for data in transit, bcrypt password hashing, role-based access controls, and regular security reviews. However, no system is 100% secure. In the event of a data breach, we will notify affected data subjects and the PDPC within the legally required timeframe.
Minors
SOLSAT is intended for users aged 20 and above, the age of legal majority in Thailand. If you are aged 10 to 19, use of the service requires the consent of a parent or legal guardian. We do not knowingly collect data from anyone under 10.
Changes to this policy
We may update this policy from time to time. For material changes, we will notify you by email or by an on-site notice at least 30 days before they take effect. Continued use of the service after the effective date means you accept the updated policy.
Contact and data protection
If you have questions about this policy or want to exercise your rights, contact us at:
- Email: privacy@solsat.dev
- Website: solsat.dev/contact
If you do not receive a response within 30 days, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) at pdpc.or.th.