Privacy Policy

Quick Summary

What we collect:

• Account information (business name, owner name, email, phone)
• User credentials (name, email, password)
• Platform activity (leads, door knocks, deals, appointments, notes)
• Location data (mobile app, only while actively using mapping features)
• Device and browser information
• Website activity on sunshipsales.com (pages viewed, clicks, time on page)
• Payment information (processed by Stripe)

Why we collect it:

• To provide and operate the Platform
• To process subscription payments
• To provide customer support
• To improve our services
• To comply with legal obligations

Who we share it with:

• Stripe (payment processing)
• AWS and Cloudflare (hosting, storage, and delivery)
• Twilio (SMS notifications), Google Workspace (email), and Calendly (demo scheduling)
• Anthropic (powers the in-app help assistant)
• Meta, Google, and OpenAI (advertising measurement only, for visitors to our marketing website)
• Your designated CRM (if you configure an integration)

We do not sell your data. We do share limited website activity with advertising platforms to measure which ads work. See Your Privacy Choices.

Information We Collect

Information You Provide

• Business account details (company name, address, billing contact)
• User profile information (name, email, phone number)
• Login credentials (email and password)
• Leads and customer data you enter into the Platform
• Door knocking records, notes, and disposition data
• Deal and commission information
• Documents and photos you upload (when available)
• Support requests and communications with us

Information Collected Automatically

• Device information (device type, operating system, app version)
• Browser information (browser type, IP address, pages viewed)
• Location data from mobile app (GPS coordinates when using map and door knocking features; collected only while the app is actively in use, not in background)
• Usage data (features used, timestamps, session duration)
• Cookies on our marketing website (see Cookies section below)

Information from Third Parties

• Payment status and subscription information from Stripe
• App store information if you download our mobile app

How We Use Information

• Provide, maintain, and operate the Platform
• Authenticate users and manage accounts
• Process subscription payments and billing
• Display assigned territories and log door knock locations
• Track sales activity and calculate commission estimates
• Sync data across web and mobile applications
• Provide customer support
• Send service-related communications (account updates, security alerts, billing notices)
• Improve and develop new features
• Detect and prevent fraud, abuse, or security issues
• Comply with legal obligations

Location Data

The SunShip mobile applications (iOS and Android) request "Location When In Use" permission. Location data is collected only while you are actively using the app's map and door knocking features. We use this data to:

• Display your position relative to assigned sales areas
• Accurately record door knock locations
• Enable territory management features

We do not collect location data when the app is in the background or closed. We do not sell location data or use it for advertising purposes.

How We Share Information

We share information only as needed to operate our business:

Service Providers

• Stripe – Processes subscription payments. Stripe's privacy policy governs their handling of payment data.
• Amazon Web Services (AWS) – Hosts our Platform infrastructure and stores uploaded documents.
• Cloudflare – Provides content delivery, security, and approximate location from your IP address.
• Anthropic – Powers our in-app help assistant. Messages you type into the help chat are sent to Anthropic to generate a response. Do not enter customer or homeowner information into the help chat.
• Twilio – Delivers SMS notifications to your team members.
• Calendly – Powers demo scheduling on our marketing pages. Calendly's scheduling widget loads on those pages, and if you book a demo the details you enter are sent to Calendly.
• Google Workspace – Sends transactional email such as password resets and notifications.
• Meta, Google, and OpenAI – Measure advertising performance. See Your Privacy Choices.
• Apple App Store / Google Play – Distributes our mobile applications.

Your Integrations

If you configure a CRM integration using your API key, data you choose to sync will be transmitted to that third-party service. You are responsible for reviewing their privacy practices.

Legal and Safety

• We may disclose information if required by law, court order, or government request.
• We may disclose information to protect the rights, safety, or property of SunShip, our users, or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

We do not sell your personal information.

Your Privacy Choices

We do not sell your personal information. We do share limited information with advertising platforms (Meta, Google, and OpenAI) so they can measure which ads bring people to our site. Under California law this is considered "sharing for cross-context behavioral advertising."

Global Privacy Control. If your browser sends a Global Privacy Control signal, we automatically treat it as an opt-out and stop sharing your activity with advertising platforms. No action is needed on your part. Browsers including Brave and Firefox can send this signal, and extensions are available for others. See globalprivacycontrol.org.

Opting out manually. Email [email protected] and we will stop sharing your information with advertising platforms and delete your website activity data on request.

Your rights. Depending on where you live, you may have the right to know what personal information we collect, request deletion, request correction, and opt out of sharing for advertising. We will not discriminate against you for exercising these rights.

Cookies and Analytics

Our marketing website (sunshipsales.com) uses:

• First-party analytics – We record page views, clicks, form interactions, time spent on a page, and scroll depth, along with your browser type, device type, and approximate location derived from your IP address (country and region, not a precise position). This data is stored on our own servers and is not sold or shared with data brokers.
• Advertising measurement – Meta Pixel, Google Analytics, and the OpenAI advertising pixel measure which ads bring people to our site. We also send conversion events directly from our servers to these advertising platforms. Where you give us your email address, it may be included so the platform can match a conversion to an ad click.
• Advertising identifiers – When you arrive from an ad, the link may carry an identifier that lets us attribute your visit to that campaign.
• Essential cookies – To keep the site functioning properly

We keep detailed website activity records for 90 days. Summary records of visits are kept longer for reporting.

The Platform application itself does not use advertising cookies or tracking pixels.

To request deletion of your website activity data, email [email protected]. See also our Data Deletion page.

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

SMS / Text Messaging

The Platform includes optional SMS text message notifications for lead alerts. When enabled, account owners may receive text messages containing new lead information (name, phone number, email, and location).

How You Opt In

• Account owners opt in by adding their own phone number as a lead notification recipient through the "Configure SMS" settings at sunshipsales.com/hot_leads and saving their configuration
• Only the account owner who personally configures and saves their phone number will receive SMS notifications

Message Details

• Message frequency: Varies based on lead volume; one message per new lead received
• Message and data rates may apply depending on your mobile carrier and plan
• Carriers are not liable for delayed or undelivered messages

How to Opt Out

• Reply STOP to any message to unsubscribe immediately
• Ask your account administrator to remove you from the SMS recipient list
• Contact [email protected] for assistance

Help

Reply HELP to any message for support information, or email [email protected].

We do not sell, rent, or share your phone number or SMS opt-in data with third parties for their marketing purposes.

Data Ownership and Responsibility

Your Data

• You (the subscribing business) own the business data you and your users enter into the Platform, including leads, customer information, door knocking records, and deal data.
• You are responsible for obtaining any necessary consents from individuals whose data you enter into the Platform.
• You are responsible for how your authorized users access and use the Platform.

Our Data

• We own the Platform software, aggregated analytics, and any improvements derived from anonymized usage data.
• We may use anonymized, aggregated data for analytics, benchmarking, and service improvements.

Our Role: Controller and Processor

Our responsibilities differ depending on whose information is involved.

• We are the controller for information about our own customers and website visitors: account details, billing, support communications, and activity on sunshipsales.com. We decide how that information is used, and requests about it should come to us directly.
• We are a processor for information that our customers enter into the Platform about homeowners and prospects, including names, addresses, phone numbers, appointment records, and uploaded documents. The subscribing solar company decides what to collect and why. We store and process it on their instructions and do not use it for our own purposes.

If you are a homeowner whose information was entered by a solar company, that company is responsible for your data. See our Data Deletion page for how to reach them or us.

Customers may request a data processing agreement by contacting [email protected].

Categories of Personal Information

In the last 12 months we have collected the following categories, as defined by California law:

• Identifiers (name, email, phone, IP-derived country and region, advertising click identifiers) — collected from you directly and from your browser. Used to provide the service, communicate with you, and measure advertising. Shared with advertising platforms and our service providers.
• Commercial information (subscription, seats, billing history) — collected from you and from Stripe. Used for billing and support. Shared with our payment processor.
• Internet activity (pages viewed, clicks, form interactions, time on page, scroll depth, browser and device type) — collected automatically. Used to improve the site and measure advertising. Shared with advertising platforms.
• Geolocation (approximate location from IP; precise location from mobile apps only where you grant permission) — used for canvassing map features and for regional reporting. Not shared with advertisers.
• Professional information (company, role, team size) — collected from you. Used for sales and support. Not sold or shared for advertising.

We do not collect biometric information, precise health data, or the contents of your communications with third parties. We do not use sensitive personal information for inferring characteristics.

Data Retention

• Active accounts: We retain your data for as long as your subscription is active.
• After cancellation: We may retain your data for a period after cancellation for legal, tax, or business purposes. We do not guarantee automatic deletion upon cancellation.
• Data export: We do not currently offer automated data export. You may manually copy your data before cancelling your subscription.
• Website activity: Detailed records of website browsing (individual page views, clicks, form interactions) are automatically deleted after 90 days. Summary records of a visit and its source are retained longer for advertising reporting.
• Deletion requests: Account owners may request deletion of their account and associated personal profile information by contacting [email protected]. Business data (leads, deals, door knocks) may be retained per our data retention practices.

Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption at rest for uploaded documents
• Secure authentication, password hashing, and session expiry
• Role-based access controls and tenant isolation, so each business can only reach its own data
• Hosting on Amazon Web Services

No system is 100% secure. You are responsible for maintaining the confidentiality of your login credentials.

Your Choices and Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal information
• Object to certain processing

To exercise these rights, contact [email protected]. We may need to verify your identity before processing requests.

California Residents

Under the California Consumer Privacy Act, as amended, you have the right to know, delete, correct, and opt out of the sharing of your personal information. You also have the right not to be discriminated against for exercising these rights.

• We do not sell personal information for money.
• We do share limited information for advertising. When you visit our marketing website, we may share your email address (in hashed form), advertising click identifiers, and the fact that you signed up with Meta, Google, and OpenAI so they can measure which ads work. Under California law this is considered "sharing for cross-context behavioral advertising."
• How to opt out: Use a browser that sends the Global Privacy Control signal, which we honor automatically, or email [email protected]. See Your Privacy Choices.
• Authorized agents may submit requests on your behalf with written proof of authorization.

We do not knowingly share the personal information of consumers under 16 years of age.

Children's Privacy

The Platform is a business service not intended for use by children under 18. We do not knowingly collect information from children. If you believe a child has provided information to us, contact [email protected].

International Users

The Platform is hosted in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the U.S. By using the Platform, you consent to this transfer.

Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page shows when it was last revised, and we encourage you to review it periodically. Your continued use of the Platform after changes take effect means you accept the updated policy.