Privacy
What we do with your information
Written to be read rather than to be defensible. If something here is unclear, ask — an explanation nobody understands protects nobody.
Last updated Oct 30, 2026.
Who is responsible
Power & Sun decides what happens to the information described here. Questions, corrections and deletion requests go to [email protected].
This notice is written to meet the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. The regulator for that law is the UAE Data Office.
The open estimator
You can use the estimator without an account and without telling us who you are. The answers you give it — a location, a roof area, a tariff, how much power you use — are used to work out the figure and are not stored. Close the page and they are gone.
Two things are kept, briefly and for a reason. Our server keeps ordinary web logs, including your IP address, so we can tell whether the site is working and stop somebody scripting thousands of estimates. We also count estimates per address for the same reason. Neither is used to build a profile of you and neither is sold.
If you ask us to get in touch
The enquiry form is the only place on the open site that asks who you are. What you type there — your name, your email address, optionally a phone number, your town, and anything you write in the box — is stored so that an engineer can answer you. We also keep the site details you had already entered, so nobody has to ask you twice. The form is only sent once you tick the box to say you have read this notice, and we record when you did.
We use it to reply to your enquiry and, if it becomes a job, to carry out that job. We do not use it to market anything unrelated, and we do not pass it to anyone who is not working on your enquiry.
An enquiry that does not turn into work is deleted after 24 months. If it becomes a project, the records are kept for as long as we are required to keep business records, and then deleted.
If you have an account
Accounts are for solar engineers and the people they work with. We hold your name, email address, employer, role and professional details you gave at registration, the declarations you agreed to, which version of the Terms of Use you accepted and when, when you last signed in, and the work you do in the tool. Passwords are stored only as a hash and cannot be read back, by us or by anyone else.
What you record about your own customers — their contact details, their sites, their bills — is yours. We hold it so the tool works. You are responsible for having a lawful reason to put it here, and for telling those people that you have.
How the tool uses AI
The AI features are switched off on this installation, so nothing is sent to an AI provider. The tool works fully without them. If an administrator switches them on, this section will name the provider and say exactly what is sent to it. Whether AI is on or off, AI never produces a figure: every number in a design, a report or a proposal comes from the calculation engine.
Who else sees anything
The design engine works entirely offline. These are the outside services this installation is currently configured to use, and exactly what reaches each of them. Nothing else leaves.
| Service | What it receives | When |
|---|---|---|
| PVGIS (European Commission) To fetch the measured solar irradiance for that point. It is the largest single input to any estimate. |
The latitude and longitude of the site being estimated or designed. Nothing else — no name, no contact details, no account. | Always, unless another weather source is configured. No key is needed, and results are cached so a location is only ever sent once. |
| NASA POWER A fallback weather record where PVGIS has no coverage. |
Latitude and longitude only. | Only where PVGIS returns nothing for the location. |
Each of these has its own privacy terms, which apply to what it does with the data once it arrives. Several are operated outside the country you are in.
What we never do
- Sell your information, or share it for anyone else's advertising.
- Run advertising trackers, analytics scripts or social-media pixels. There are none on this site.
- Make a decision about you automatically that has a legal or similarly significant effect.
What you can ask for
About the information we hold on you, you can ask us to:
- give you a copy of it;
- correct anything that is wrong or incomplete;
- delete it, where we no longer need to keep it;
- limit what we do with it while a question about it is settled;
- stop using it, if you object to how we use it;
- send it to you or another organisation in a common electronic format; and
- withdraw consent you gave, such as for an enquiry, at any time.
To use any of these, write to [email protected] from the address we know you by, or tell us enough to find your records. We may ask you to confirm who you are before we act, so nobody else can make a request in your name. We will answer within a month. You do not have to give a reason, and asking costs nothing.
If your details were entered by one of our users about their own customer, we will pass your request to them, because the information is theirs.
If you think we have handled your information badly and we have not put it right, you can complain to a data protection supervisory authority — the UAE Data Office. We would rather you told us first, but you are not obliged to.
Cookies
Short version: there are no tracking cookies here, and nothing to consent to. The longer version is on its own page.
Security
Traffic is encrypted in transit. Passwords are hashed. Keys for the outside services above are stored encrypted and can be revoked without a deployment. Accounts have to be approved by an administrator before they work, which is why signing up does not let you straight in.
None of that makes a system unbreakable, and we would rather say so than imply otherwise. If you find a weakness, please tell us at [email protected] before you tell anyone else.