Solar 360 · Legal
Privacy Policy
How Novaxion Systems LTD collects, uses, and protects your data across the Solar 360 Quote and Solar 360 Store apps.
On this page
- 1. Who we are and what this policy covers
- 2. Definitions
- 3. Data we collect
- 4. How we collect data
- 5. How we use your data
- 6. Our legal basis for processing
- 7. Sharing your data
- 8. International data transfers
- 9. How long we keep data
- 10. How we protect your data
- 11. Your rights
- 12. Children's privacy
- 13. Data stored on your device
- 14. Cookies and tracking
- 15. Changes to this policy
- 16. Contact us and complaints
1. Who we are and what this policy covers
This Privacy Policy is issued by Novaxion Systems LTD (“Novaxion”, “Solar 360”, “we”, “us”, or “our”), a company registered in Nigeria (RC number to be inserted), with its registered office at [registered office address to be inserted].
It explains how we handle personal data across the Solar 360 product family:
- Solar 360 Quote — the mobile app used by solar installers to build quotations and invoices, manage customers and materials, and apply for installer verification.
- Solar 360 Store — the mobile app where end customers buy solar equipment directly from Solar 360, browse a directory of verified installers, and request quotes from them.
- The shared backend services, notification system, and support channels that power both apps.
This policy applies to installers, business owners, consumers/buyers, referees, and anyone else whose personal data we process through these services. We process personal data in accordance with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (NDPR) 2019, as administered by the Nigeria Data Protection Commission (NDPC).
2. Definitions
- Installer / Business
- A person or company registered on Solar 360 Quote to create quotations/invoices and, optionally, apply for installer verification and appear in the Solar 360 Store installer directory.
- Consumer / Buyer
- A person using Solar 360 Store to purchase equipment and/or request quotes from installers.
- Consultant
- A Solar 360 team member or engaged technical reviewer who provides expert review of a quotation or system design when a customer requests one.
- Lead
- A request from a Consumer for a quote or installation, routed by Solar 360 to one or more Installers.
- Job
- An installation project that results from an accepted Lead, tracked from acceptance through completion.
- Personal Data
- Any information relating to an identified or identifiable natural person, as defined under the Nigeria Data Protection Act 2023.
3. Data we collect
We collect the following categories of data. Not every category applies to every user — an Installer using Solar 360 Quote only will not have Consumer order data, for example.
3.1 Account and business data
- Your name, email address, and password (stored as a salted hash — we never store your plain-text password).
- For Installers: business name, business phone, business WhatsApp number (kept separate from your business phone), business email, the name of the person behind the business, and business address.
- For Consumers: full name and email at registration; delivery details added at checkout (see 3.6).
3.2 Financial and payment-related data
- Bank name, account number, and account name that you choose to add to your own invoices/quotations for your customers’ reference. This stays within Solar 360’s systems (on your device and, if you enable cloud sync, on our servers) — we never send it to a payment processor and it is never used by us to move money.
- Payment records for subscriptions, verification fees, and Store orders. We do not receive or store your card details ourselves — these are handled directly by Google Play Billing and Paystack (see Section 7).
3.3 Installer verification (KYC) data
If you apply for installer verification, we additionally collect:
- Your National Identification Number (NIN), International Passport number, or Driver’s Licence number, and the corresponding document image.
- Professional registration/certification numbers and dates, and any certificate documents you upload.
- Whether your business is CAC-registered, years of experience, service areas, brands, and site-survey fee.
- Referee details you provide about a third party who can vouch for you: their full name, email, phone, registration number, organisation, and your relationship to them, plus a reference letter document. By submitting a referee, you confirm you have that person’s permission to share their details with us — see Section 8 (Terms of Service) for the corresponding obligation.
This data is reviewed by authorised Novaxion staff to decide on your verification badges. It is never made publicly visible (see Section 3.7 for what is public).
3.4 Customer and lead data
- Customers you add in Solar 360 Quote: name, phone, email, address — stored on your device and, if sync is enabled, on our servers, associated with your business account.
- If you request an Expert Review of a quotation: the customer’s name, email, phone, state, installation type, solar capacity, existing equipment, backup-hours need, budget range, appliance/load list, any notes, and optional photos you upload — shared with the reviewing Consultant. You confirm consent for this sharing at the point of submission.
- If you submit a Lead as a Consumer through Solar 360 Store: your state, LGA, service category, project description, and contact phone. Your name, email, and phone are masked from the Installer until they accept your request (see Section 7.3).
3.5 Quotation and invoice data
The line items, pricing, notes, and terms you enter into quotations/invoices, together with the customer details snapshotted onto each document.
3.6 Store order and delivery data
- Delivery address: full name, phone, state, LGA, street address, and landmark.
- Cart contents, order history, and your chosen fulfilment method (pickup, doorstep, or motor-park delivery).
- Product and installer reviews you submit (rating, comment) — reviews are shown publicly with your reviewer name.
3.7 Publicly visible data
If you are an Installer and switch on public visibility, the following appears in the Solar 360 Store installer directory to any visitor: business name, business contact details (phone, WhatsApp number, email, and the address you registered), the name of the person behind the business, state/LGA and service areas, years of experience, services/brands offered, availability, site-survey fee (unless you hide it), warranty summary, verification badges, average rating, review count, and any photos you upload. These are your business’s own public contact details, shown so customers can reach you directly — they are separate from the Lead-masking described in Section 7.3, which protects a customer’s contact details until you accept their request. Your NIN/ID numbers, uploaded verification documents, referee details, and bank details are never made public.
3.8 Device and technical data
- A push-notification device token (via Google Firebase Cloud Messaging), your platform (Android/iOS), and which app you’re using.
- Standard request metadata (such as IP address) incidentally logged by our servers and by Google’s and Paystack’s infrastructure when you use their services through our apps.
We do not collect precise device location (GPS). State and LGA fields are typed by you, not detected automatically. We do not use any analytics or crash-reporting SDK in either app at this time.
3.9 Photos and documents
Your business logo, signature, hero/portfolio photos, installer verification documents, referee reference letters, and any photos attached to an Expert Review request — uploaded from your device’s photo library or camera via the standard system picker.
4. How we collect data
- Directly from you — when you register, fill in your profile or business details, add customers, create quotations, apply for verification, submit a lead, place an order, or contact support.
- Automatically — technical data described in Section 3.8, generated by your use of the apps.
- From third parties — Google (subscription/purchase confirmation from Play Billing), Paystack (payment confirmation), and a referee you nominate (who may respond directly regarding your verification application).
5. How we use your data
We use your data to:
- Provide the quotation, invoicing, and offline business-management features of Solar 360 Quote.
- Review and manage installer verification applications and badges.
- Operate the Solar 360 Store marketplace: process orders, payments, delivery, reviews, and the installer directory.
- Route Leads between Consumers and Installers, and track Jobs through to completion (including independent job inspections).
- Provide Expert Review / consultant services when you request them.
- Process subscription payments via Google Play Billing and verify your entitlement to Solar 360 Pro features.
- Send you service notifications (application status, new leads, renewal reminders, order updates).
- Provide customer support and respond to your enquiries.
- Detect and prevent fraud (for example, fake verification documents or fake reviews), and enforce our Terms of Service.
- Comply with our legal, tax, and regulatory obligations.
We do not use your data for third-party advertising, and we do not sell your personal data.
6. Our legal basis for processing
| Data / activity | Legal basis under the NDPA/NDPR |
|---|---|
| Account creation, quotations, orders, subscriptions | Performance of a contract with you |
| Installer verification (incl. NIN/ID) | Your explicit consent, given when you submit an application |
| Expert Review / consultant submissions | Your explicit consent, confirmed at submission |
| Lead routing between Consumers and Installers | Performance of a contract, and our legitimate interest in operating the marketplace |
| Fraud prevention, security, dispute handling | Our legitimate interest, balanced against your rights |
| Tax, accounting, and regulatory records | Legal obligation |
| Service and account-status notifications | Performance of a contract / legitimate interest |
8. International data transfers
Our servers and Paystack’s payment infrastructure are located in [server/hosting location to be confirmed]. Google’s Firebase and Play Billing services may process data on infrastructure located outside Nigeria. Where personal data is transferred outside Nigeria, we rely on the safeguards recognised under the Nigeria Data Protection Act 2023 (including that the recipient is subject to a law, contract, or binding scheme that ensures an adequate level of protection).
9. How long we keep data
The retention periods below are proposed defaults and should be confirmed before publishing:
- Account and business data: for as long as your account is active, plus up to 6 years afterwards for tax, accounting, and dispute-defence purposes.
- Installer verification documents: for the duration of your verification status, plus up to 3 years after it lapses or is withdrawn.
- Quotations, invoices, and order records: up to 6 years, consistent with standard Nigerian tax record-keeping practice.
- Lead and job records: up to 3 years after job completion or lead expiry, for dispute-resolution and quality purposes.
- Data you store only locally on your device (see Section 13) persists until you delete it or uninstall the app — we have no copy of it unless you enable cloud sync.
You may request earlier deletion of your data at any time — see Section 11.
10. How we protect your data
- All communication between the apps and our servers is encrypted in transit (HTTPS/TLS).
- Authentication tokens are stored on your device using the platform’s secure, encrypted storage (Android Keystore-backed secure storage), not in plain text.
- Passwords are stored as salted hashes; we cannot see your actual password.
- We do not store your card/payment details — Paystack and Google Play Billing handle those directly.
- Access to installer verification documents and identity numbers is restricted to authorised staff performing the review.
No system is 100% secure, and we cannot guarantee absolute security, but we work to protect your data using industry-standard practices appropriate to its sensitivity.
11. Your rights
Under the Nigeria Data Protection Act 2023, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data — you can delete your account at any time from within the app (Settings), which permanently deletes your account per our account-deletion process; you may also email us to request deletion of specific data.
- Restrict or object to certain processing.
- Data portability — request a copy of your data in a structured, machine-readable format.
- Withdraw consent at any time, where processing is based on consent (this will not affect processing already carried out).
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we have mishandled your data.
To exercise any of these rights, contact us using the details in Section 16.
12. Children's privacy
Solar 360 Quote and Solar 360 Store are intended for business and commercial use by people aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Data stored on your device
Solar 360 Quote is offline-first: your business profile, customers, materials, quotations, and invoices are stored in a local database on your device even if you never enable cloud sync. If you do not enable Cloud Sync, this data never leaves your device (except where you actively export, share, print, or submit it — for example, sharing a PDF quotation, or submitting an Expert Review request). If you lose your device or uninstall the app without syncing, this locally-stored data cannot be recovered by us. Enabling Cloud Sync (available with an active subscription) backs this data up to our servers, subject to the rest of this policy.
15. Changes to this policy
We may update this policy from time to time to reflect changes in our services or the law. We will update the “Effective date” above and, for material changes, notify you in-app or by email before the change takes effect.
16. Contact us and complaints
For any question about this policy, or to exercise your rights, contact us at:
- Email: privacy@novaxion.ng
- Support email: solar360hub@gmail.com
- Support WhatsApp: +234 913 473 0639
- Registered office: [registered office address to be inserted]
If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.