Privacy & cookies

1. Who controls your data

Wattlas Ltd ("we", "us") is the data controller for the personal data described below, for the purposes of UK GDPR and the Data Protection Act 2018.

2. What we collect

Account data - your email address, used to sign in.
System data - your panel/battery specification, rough location (latitude/longitude, used only to model sun position and local weather), and tariff details you enter in Setup.
Generation & usage data - if you connect a Plus integration, the generation, battery, and EV charging data your own equipment reports.
Billing data - handled directly by Stripe; we don't store your card details ourselves.
Support data - anything you send us via the in-app bug report tool or by emailing us.
Roof calculator searches - on the website's roof panel calculator, the address you enter and the spot you tap on the map, used only to find your roof. We don't store them on our servers; your browser keeps your recent searches for up to 30 days so you can come back to them.

3. Why we use it, and our legal basis

To provide the Service you've signed up for (contract).
To bill your subscription, if you're on Plus (contract).
To respond to support requests (legitimate interest).
To send account/service emails, and marketing emails only if you've opted in (consent, where required).

4. Who we share it with

We use a small number of processors to run the Service:

Supabase - authentication and database hosting (EU-region).
Stripe - subscription billing.
Open-Meteo - weather forecasts, queried by location only; no personal data is sent.
Google - the roof panel calculator sends the address you enter and the spot you tap to Google Maps Platform to find your home, measure its roof and show the satellite map. Google handles it under its privacy policy.
Google AdSense - may show adverts on some pages of this website (not in the app). See Adverts on this website below.
Whichever inverter/battery/charger manufacturer you choose to connect (e.g. SolarEdge, GivEnergy, myenergi, Ohme, Hypervolt, Easee, Tesla) - only if and when you set that connection up yourself.

Some of these providers are based outside the UK/EEA. Where that's the case, we rely on the UK's standard safeguards for international transfers (such as the UK International Data Transfer Addendum). We don't sell your data to anyone.

5. How long we keep it

We keep your account and generation history for as long as your account is open. You can permanently delete your account and its data at any time from Profile > Account deletion in the app - this isn't a soft delete, it's a real deletion.

6. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data (most of this you can edit yourself in Setup/Profile).
Erase your data (via the in-app account deletion flow, or by asking us).
Export your data in a portable format.
Object to, or restrict, certain processing.
Complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've got something wrong.

To exercise any of these, contact us.

7. Cookies

The app sets one cookie by default - it keeps you signed in, and it's exempt from consent because the Service can't function without it. Everything else is optional and off by default until you choose otherwise, in the app's cookie settings (Profile > Cookies):

Strictly necessary - keeps you signed in and remembers this choice. Always on.
Preferences - remembers things like your chosen theme.
Analytics - aggregated, non-identifying stats on how the app is used. Not currently in use.
Marketing - would measure advertising or referral campaigns. Not currently in use.

This marketing site itself doesn't set any cookies of its own - cookie choices for the app are made inside the app, once you're signed in.

Adverts on this website

Some pages of this website may show adverts from Google AdSense. The app never shows adverts.

Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website or other websites.
Google's use of advertising cookies lets it and its partners serve ads to you based on your visits to this site and/or other sites on the internet.
Before any advertising cookies are used, a consent message from Google asks for your choice. You can change it at any time from the privacy link that message leaves on the page.
You can opt out of personalised advertising in Google's Ads Settings, and out of other vendors' use of cookies for personalised advertising at aboutads.info.
How Google uses information from sites that show its adverts: policies.google.com/technologies/partner-sites.

8. Changes to this policy

We may update this policy as the Service changes. Material changes will be flagged in the app or by email.

9. Contact

Questions about your data, or want to exercise a right above? Get in touch.