Privacy policy

1. Who we are

This policy explains how Enskild Firma Milkevich Valiantsin ("Numsolar", "we") handles personal data when you use numsolar.com, the free solar estimate at numsolar.com/configure, a company account on Numsolar, an installer's embedded Numsolar calculator or a client link from an installer, or when your company or you appear in our installer directory.

Numsolar is the controller for the processing described here, except where we say that we act on an installer's behalf (section 5.3) or that an installer is an independent controller (section 4).

Contact: contact@numsolar.com. We have not appointed a data protection officer; the same address reaches the person responsible for data protection.

2. Overview

3. The free solar estimate (numsolar.com/configure)

3.1 What we collect

• The address you enter and its coordinates, Google place id, postcode, town and country. While you type, your text (from three characters) is sent to Google's address service to suggest addresses. If you use "use my location", your browser's position is sent to Google to find the address.
• Household inputs you give: yearly electricity use or a household preset, a use pattern per month and hour, electric car kilometres per day, battery size and mode, electricity supplier, grid company and the price inputs you adjust.
• The roof model: the 3D roof, panels, roof obstacles and trees our software and the AI analysis produce, your edits to them, and for Swedish addresses the snow and wind load values of the site.
• Aerial imagery of the building from Google Maps, stored with the estimate. If you upload your own aerial photo (an optional feature, off by default), we store a normalised copy without metadata for 30 days; the original file is never stored.
• Technical data about your visit: your IP address and a non-reversible hash of your browser identifier (user agent) when the estimate is first created, your language, and — if you arrived through a campaign link — the campaign parameters (utm_*, gclid/fbclid/msclkid) and the website you came from (domain only). We use them to stop abuse of a service that costs us money per run and to understand which channels bring visitors.
• Your IP address is also used to guess your country so address suggestions fit it. This lookup uses a database on our own server (DB-IP); your IP is not sent anywhere for it.
• E-mail gate (when switched on): under heavy load we may ask you to confirm an e-mail address with a code before a new AI analysis starts. The address is then stored only as a hash, to count runs per day. The plain address is stored only if you tick that we may contact you.

3.2 How the AI roof analysis works

1. Your address is sent to Google (Geocoding) to get coordinates, and coordinates are sent to Google (Static Maps) to fetch satellite images of the building.
2. The satellite image — with a measuring grid, a marker on the building and the address written as text on the image — is sent to Anthropic (Claude), a US-based AI provider, which returns the roof planes, roof obstacles and trees it sees. No name, e-mail, phone or other data about you is sent to Anthropic. Under Anthropic's commercial API terms the data is not used to train models.
3. Our own software builds the 3D roof, places panels, and calculates production and savings using weather and electricity-price data we already hold. No further external call is made per visitor.

The result is an estimate, produced automatically. It has no legal effect on you: it does not bind you or any installer, and it is not a decision within the meaning of Article 22 GDPR. You can change the roof, panels and every input, and every price shown is indicative.

3.3 One roof model per building

When an estimate succeeds, we keep the roof model (coordinates, Google place id, roof geometry, satellite tiles) in a cache keyed by the building, so the next visitor who enters the same address does not trigger a new AI analysis. The cache entry is not linked to you, your link, your inputs or your edits, and expires after 180 days.

3.4 Your link is your key

Your estimate lives at a private URL (numsolar.com/configure/xxxx-xxxx). Anyone who has the link can open and edit the estimate. We do not ask you to log in. If you want to exercise your rights over an estimate (section 12), send us the link.

3.5 Sharing your result

If you choose "Share your result", we create a separate, read-only page (numsolar.com/s/…) with an image. It shows the number of panels, capacity, production, savings, battery and the municipality or town — never the street address, postcode or coordinates. You can turn sharing off at any time; the link then stops working. The share page sets no cookies. We count anonymously how often a share link is opened.

3.6 A client link from an installer

An installer with an account can send you a client link (numsolar.com/i/…) or publish its own link on its website. The installer then enters your name, your e-mail and possibly a note with us, and we e-mail you the link on the installer's behalf. The estimate you open shows only that installer and its price. If you send a request, it goes only to that installer. Every such e-mail carries a link to stop further e-mails to your address. The installer is the controller for the details it entered about you; we are its processor (section 5.3).

4. Asking installers for quotes

4.1 Sending your request to listed installers

When you choose installers in the comparison and tick the consent box for each of them (at most three per estimate), we send that installer: your name, your e-mail and/or phone, the address, the roof model with your inputs (household, electric car, battery, snow and wind load), the production and savings estimate, and the price that installer's card showed you. We record the consent text you ticked, its version, the time and the link to this policy. Each installer receives only its own request — nothing about the other installers you picked. The installer's users get an e-mail about the request.

Each installer is an independent controller for the data it receives. It contacts you directly and must inform you about its own processing; its privacy policy applies from then on. We keep a record that the request was sent (section 11).

4.2 When no installer is listed in your area

If no installer is listed for your area, you can still leave a request. We store your name, contact details and a snapshot of your estimate and may e-mail them to our own mailbox at contact@numsolar.com so that we can arrange quotes manually. We do not pass them to any installer without telling you who.

Planned, not in operation: we may offer to forward your request to solar companies near you that are not yet on Numsolar (companies in our directory, section 6). That would happen only if you tick a separate box, and your name and contact details would be included only if you tick a second, separate box. This policy is updated before that feature goes live.

4.3 "Notify me"

When our daily quota of estimates is used up, you can leave an e-mail address. We store it with your consent and may e-mail you once when estimates are available again.

5. Company accounts (installers and their users)

5.1 Your account and your company

If you work at an installer and use the Numsolar dashboard, we process your name, e-mail, hashed password, phone, language and time zone, profile details you add (photo, bio, contact lines), the version and date of the terms you accepted, your notification settings, and when you last logged in. For your company we process its name, organisation number, address, website, logo, billing details, currency, warehouse address, certifications, the agreement details for your documents, and settings such as the public listing (service area, price template, waiting time) and the users you invite. At signup we store your consent to this policy with its version and time. The legal basis is the contract with your company (Art. 6(1)(b)) and our legitimate interest in running and securing the service (Art. 6(1)(f)). The terms for company accounts are in the terms for companies.

5.2 Billing, e-mails, integrations, helper features

• Payments are handled by Stripe. Card details are entered on Stripe's pages and never reach our servers; we receive the subscription status and invoices. Stripe looks up your customer record by your e-mail address.
• E-mails we send (confirmation, magic login link, password reset, invitations, notification digests, new-lead alerts, weekly summary, client links) go through Twilio SendGrid.
• Integrations (HubSpot, Fortnox, Formify e-signature with BankID, X) run only when an administrator of your company connects them. We store the access tokens and exchange the data you choose to sync (customers, deals, invoices, documents, posts). Those providers process the data under their own terms, chosen by your company.
• Activity log and notifications: who did what in your company's workspace, to show your colleagues and to send the digests you have turned on.
• Brand proposal: if you enter your website, our software reads its pages and stylesheets (at most ten requests, robots.txt respected) and proposes colours, fonts and a logo for your PDF templates. No AI service is used for this.
• Equipment datasheets that Numsolar's administrators upload to the shared catalogue may be read by an AI service (xAI) to extract technical values; they contain no personal data.

5.3 Your customers' data — Numsolar as processor

Installers use Numsolar to manage their own customers (prospects, offers, 3D scenes, documents, signatures, client links), including through a calculator embedded on the installer's own website. For that data the installer is the controller and Numsolar is the processor; we process it only on the installer's instructions and under our data processing agreement. Installers decide which fields they collect (for example a personal identity number, which Swedish law allows only when clearly justified) and must inform their customers.

When an installer runs the roof reconstruction or an energy simulation for a customer, the same data as in section 3.2 is sent to Google and Anthropic, and the site's coordinates (without name or address) are sent to Weatherbit for weather data. If you are an installer's customer and want to exercise your rights, contact the installer; we help the installer respond.

6. The installer directory

To show homeowners which solar companies serve their area, we maintain a directory of solar and battery installation companies in Sweden, compiled from public sources: the companies' own websites, Svensk Solenergi's member list and official company registers. For a company we hold its name, organisation number, website, address and coordinates of its office, the services it offers and the sources we used.

For some companies we may also hold key people: name, role and the work e-mail and/or phone number that the company itself publishes for business contact, together with where we found it and when we last checked it. We never collect from LinkedIn or people-search sites, never store private numbers or addresses, and never include sole traders (whose organisation number is a personal identity number). Legal basis: our legitimate interest (Art. 6(1)(f)) in a business-contact directory built from information published for exactly that purpose; we assessed that it does not override your interests because the data is minimal, already public, business-related and easy to remove.

What is shown to homeowners today is company information only (name, distance, services, website, a trust level built from public facts). People's details are used only for contacting the company and are never shown publicly without a further assessment and update of this policy.

Removal and correction: e-mail contact@numsolar.com with the company or person to remove. We delete the entry within five working days and make sure it is not re-added when we refresh the directory. Stored contact details are re-checked when the directory is refreshed.

E-mails to companies. We may e-mail a company's general address (e.g. info@) about a concrete homeowner request in its area or about claiming its listing. Such e-mails identify Numsolar as the sender, contain a one-click unsubscribe, and stop immediately on request (Swedish Marketing Act, marknadsföringslagen 2008:486, 19–21 §§). We do not send marketing e-mails to named individuals without consent.

7. Cookies, local storage and statistics

We use necessary cookies (session, login, your cookie choice) and — only if you accept in the banner on our marketing pages — Google Analytics. Details, lifetimes and how to change your choice are in the cookie policy.

Independently of cookies we keep anonymous usage statistics of the estimate: which stage a visit reached (address entered, estimate shown, quotes shown, request sent, share), the country and language, and campaign source, keyed by a hash of the estimate link and never containing your address, name, e-mail or IP address. They are kept for 13 months and used to improve the service (Art. 6(1)(f)). In the same way we count anonymously the steps of installer signup.

8. Purposes and legal bases

9. Recipients and processors

We do not sell personal data. We do not use it for advertising.

10. Transfers outside the EU/EEA

Google, Anthropic, Twilio SendGrid, Stripe Inc., Weatherbit, Cloudflare and xAI may process data in the United States. We rely on the EU–US Data Privacy Framework where the provider is certified and otherwise on the European Commission's standard contractual clauses, with additional safeguards where needed. Hosting and backups are in the EU.

11. How long we keep data

12. Your rights

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to processing based on legitimate interest, to receive data you provided in a portable format, and to withdraw consent at any time (which does not affect processing before the withdrawal). To withdraw consent to a request already sent to an installer, contact that installer as well.

Write to contact@numsolar.com. For an estimate, include the link (numsolar.com/configure/…); for a quote request, the e-mail or phone number you entered. We answer within one month.

If you believe we process your data unlawfully, you may complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, imy.se, or to the supervisory authority where you live.

Security

Traffic is encrypted (TLS); passwords are stored hashed; data is hosted in the EU on a server we control, with access limited to the people who need it; secrets are kept apart from the code; we keep nightly backups and limit how often the estimate can be run per visitor and per day. No system is perfectly secure; if a breach affects you we will inform you as the law requires.

13. Children, changes, contact

The service is not directed at persons under 18. We update this policy when the service changes; the version and date are shown at the top of this page and material changes are announced on the site. Questions: contact@numsolar.com, Enskild Firma Milkevich Valiantsin.

14. Legal references

Regulation (EU) 2016/679 (GDPR); the Swedish Data Protection Act, lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning; the Swedish Electronic Communications Act, lag (2022:482) om elektronisk kommunikation, 9 kap. 28 § (cookies); the Swedish Marketing Act, marknadsföringslagen (2008:486); the Swedish E-commerce Act, lag (2002:562) om elektronisk handel.