SOLARMAN Business Privacy Policy

Last Updated: November 12, 2025
Effective Date: November 13, 2025

Preamble

The SOLARMAN Business (hereinafter referred to as “we”, or “IGEN”) is a PV Power Plant Monitoring Platform for new energy assets provided by Wuxi IGEN Technology Co., Ltd.

We are committed to protecting and maintaining your privacy. This Privacy Policy explains how we collect, store, and use your personal information through the app and applies to all services we provide. By using our services, you agree to the terms of this Privacy Policy and consent to our use of the information you provide as outlined herein.

Registered Address: Building H4, China IoT International Innovation Park, No.6 Jingxian Road, Wuxi City

Phone: 4001810512

Email: customerservice@solarmanpv.com

To explain how SOLARMAN Business collects, uses, and stores your personal information, and what rights you have, we will explain relevant matters through this Privacy Policy. The main contents are as follows:

In this Privacy Policy, unless otherwise stated, the following terms have the following meanings:

Personal Information: Refers to information recorded electronically or in other ways that can identify the identity of a natural person alone or in combination with other information, or reflect the activities of a specific natural person, including but not limited to name, phone number, IP address, location information, etc.

Sensitive Personal Information: Refers to personal information that, once leaked or illegally used, may cause damage to personal reputation, or harm to personal and property safety, including ID number, bank account number, whereabouts, etc.

Processing: Refers to operations on personal information such as collection, storage, use, transmission, provision, disclosure, and deletion.

Anonymization: Refers to the irreversible erasure or deletion of personal information to ensure that the identity of the information owner cannot be identified. Any information that has been anonymized will not be regarded as personal information.

If you want to know more detailed information, please read the corresponding chapters according to the following index:

1. Information We Collect and Use

During your use of SOLARMAN Business , we will collect and use the information you voluntarily provide or the information generated during the use of services in the following ways:

1.1 Registration and Login

1.1.1 When you register for Solarman Business, we will collect and use your username, avatar, phone number and/or email address, and country/region. The purpose of collecting this information is to help you complete the registration and login of Solarman Business, as well as to protect the security of your account. If you do not provide such information, you may not be able to use our services normally. You can also choose to fill in other information according to your needs.

1.2 Provision of Products and/or Services

1.2.1 Basic Functions: During your use of Solarman Business, to ensure the normal operation of services, optimize user experience, and protect the security of your account, we will collect basic information required for Solarman Business to provide services to you. This includes your device model, operating system, device MAC address, Bluetooth MAC, unique device identifiers (such as IMEI/MEID/IMSI/Android ID/IDFA/IDFV/OAID/UAID, SIM card IMSI, ICCID information and other device identifiers), WIFI status (such as SSID, BSSID), login IP address, Solarman Business version number, network connection method, type and status, network conditions, device accelerators (such as gravity sensors), operation logs, service logs (your searches and browsing in Solarman Business, service failures, referral links, etc.), installation list, clipboard content, and other information.

1.2.2 Monitoring Function: When you use the monitoring function, to allow you to view complete monitoring data, we need to collect the serial number of the data collector installed under the power station and the serial numbers of its sub-devices (such as inverters, electric meters, etc.). At the same time, our monitoring system will collect data uploaded by the data collector and its sub-devices every 5 minutes to complete necessary data statistics and analysis functions. In addition, to help equipment manufacturers diagnose problems when equipment malfunctions, provide you with timely support and services, and quickly resolve issues, we will also collect the following telemetry data, including equipment serial numbers, equipment status, and alarm codes.

1.2.3 Power Station Creation Function: When you create a power station, you need to enter information such as the power station name, region, capacity, address, and GPS location. If GPS positioning is unavailable, base station positioning may be used to obtain the grid identifier of the base station location. This information will be uploaded and stored on our servers, so you can use it when logging in to Solarman Business on other devices. You can also modify this information at any time. Later, during the device network configuration process, the device itself will store the account and password used to manage the device, which serves as credentials for verifying your identity when managing the device. The account and password are only stored on the device, and the password is stored using an irreversible encryption method.

1.2.4 After-Sales Service: When you contact our customer service, we may need you to provide necessary personal information for identity verification to ensure the security of your account. To provide services according to your requirements, within the scope of your authorization, manual customer service personnel need to query or verify your relevant information. We will take technical and management measures to ensure the security and confidentiality of your information as much as possible and use this information within the necessary scope. We may also save your contact information (such as the phone number, WeChat account, QQ number, or other contact methods you use or provide), communication records and content with us, and other necessary information to provide and record customer services for you.

1.2.5 Permission Calls

a) Location Information Permission Function Description: Allow the app to obtain the terminal's geographic location information. Usage Scenarios or Purposes: Required for using the device terminal's location when creating a power station, navigating to the power station location, and enabling Bluetooth scanning on specific versions of Android systems.

b) Bluetooth Permission Function Description: Allow the app to discover and connect to Bluetooth devices. Usage Scenarios or Purposes: Allow the app to discover and connect to Bluetooth devices for WiFi configuration and connect to Bluetooth devices via Bluetooth in local mode.

c)Phone Permission Function Description: Allow the app to make phone calls. Usage Scenarios or Purposes: The phone permission will be invoked when using the App's direct call function.

d)Media and File Storage Permission Function Description: Allow the app to read and write data in the mobile phone's storage space. Usage Scenarios or Purposes: The external storage permission is required when you upload photos from storage and record crash log information locally.

e) Notifications Permission Function Description: Allow the app to send notifications. Usage Scenarios or Purposes: The notification permission is required when enabling push notifications for device alarms.

f) Camera Permission Function Description: Allow the app to activate the camera for taking photos. Usage Scenarios or Purposes: The camera permission is required when you upload a power station cover, upload power station photos, upload photos for work order processing reports, upload/replace your avatar, upload/replace your merchant logo, or scan the collector's QR code.

1.3 According to Article 6(1) GDPR, we may collect and use your personal information without obtaining your consent in the following cases:

a) Processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract;

b) Processing is necessary for compliance with a legal obligation to which the controller is subject under EU or member state law;

c) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;

d) Processing is necessary to protect the vital interests of the data subject or another person (e.g., emergency medical situations);

e) Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, provided that it does not override the fundamental rights of the data subject.

1.4 To ensure the security of our services and help us better understand operational conditions, we may record information such as your usage frequency of the application, crash data, overall usage, performance data, and application source. To optimize display and performance, we collect screen resolution and RAM (memory) information of the user’s device. We will not combine information stored in our analytics software with any personally identifiable information you provide in the application.

1.5 If we use your personal information beyond the authorized purposes, we will notify you again and obtain your explicit consent before using your personal information.

1.6Please understand that the functions and services we provide to you are constantly being updated and developed. If a function or service does not specify the rules for collecting and using your information in the above description, we will inform you separately of the scope, purpose, and method of information collection through page prompts, interactive programs, website announcements, or other means, and obtain your consent.

2. Cookie Usage Instructions (Applicable to Official Website)

2.1 What are cookies

Cookies are small text files stored on your browser or device when you visit our website or use our services. They typically contain the website name, a unique identifier, and certain information that can be read by the website or third-party services during subsequent visits.

2.2 What Cookies We Use

We use cookies and similar technologies to enable basic website functions, including announcement read status, guide read status, system layout, large-screen resolution notification, language switching, assisted login, etc. Some cookies are set by third-party service providers and are used to analyze access patterns. You can manage or refuse the use of cookies through your browser settings.

3. Information Storage

3.1 Storage Location

To better comply with data protection laws and safeguard personal data, we have established multiple data centers worldwide for data storage. We will access and store your information and data based on the country/region you select. For example, if you are located in the European Economic Area, your data will be stored in our data center in Germany. If personal data from the European Economic Area, Switzerland, or the United Kingdom is transferred to a country or region that has not been recognized by the European Commission as providing an adequate level of data protection, we will ensure that such transfers are appropriately safeguarded through the European Commission’s approved Standard Contractual Clauses and, where necessary, other suitable technical measures.

3.2 Storage Period

In general, we will retain your personal information for the necessary period to fulfill specific purposes, for example:

Phone number or email address: During your use of the SOLARMAN Business service, we will retain your phone number or email address (including those used for account registration and associated with the account) to ensure your normal use of the service. Such information will be deleted along with the deletion of your SOLARMAN Business account.

Plant information: When you create a plant, we need to retain the plant information to ensure you can normally use the monitoring functions. When you delete your plant information, we will also delete the corresponding data.

If we cease to provide our products or services, we will notify you via messages, announcements, or other means, and delete or anonymize your personal data within a reasonable period, generally within 30 days and no later than 60 days.

4. Information Security

We are committed to protecting users’ information from theft, misuse, unauthorized access, or disclosure.
We will use various security protection measures within a reasonable security level to safeguard information security. For example, we apply encryption technologies (such as SSL/TLS), de-identification, and anonymization measures to protect your personal information.

We will continuously enhance technical measures to strengthen the security of the software installed on devices to prevent data leaks. For example, we will encrypt part of your device information to ensure secure data transmission; collect data on installed applications or running processes, or data stored in the device memory to prevent viruses, trojans, or other malicious programs or websites; analyze and use unique device identifiers, login IP addresses, operation logs, and location data to take measures or issue alerts to prevent illegal activities such as online fraud, account theft, and impersonation, and to conduct security checks.

We have established relevant management policies, procedures, and teams to ensure information security. For example, we strictly restrict personnel who can access the information, require them to comply with confidentiality obligations, and conduct personnel audits.

If a data breach or any other security-related incident occurs, we will respond immediately to prevent further escalation and wider impact and will notify you of such an incident via messages or public announcements.

In terms of information security, SOLARMAN Business has achieved ISO27001 and ISO27701 Information Security Management System certifications.

We will take all possible technical and organizational measures to protect your information, but we cannot guarantee that our measures will eliminate all security risks.

5. Statement on Cross-Border Data Use

To better serve our global users, we connect to the corresponding data centers based on the user’s region to ensure the security and compliance of data access.
1. Purpose of connection: To ensure the security of storage and transmission of overseas users’ data, the data of overseas users will be processed through data centers intelligently selected according to their location.
2. Method of connection: The application will connect to the corresponding servers through encrypted channels to safeguard data security.
3. Scope of connection: Overseas IP connections are used solely to meet the data needs of overseas users.

6. Information Sharing

To ensure the realization of certain independent functions and to enable you to use and enjoy more services and features, we will embed third-party SDKs within the application and carefully evaluate the purposes of using these SDKs. For more details on the purposes, methods, and scope of SDKs’ personal data processing, please refer to the Third-Party Sharing List.

As our business continues to develop, IGEN may engage in mergers, divisions, or other transactions. If such transactions involve the transfer of personal information, we will notify you accordingly and continue to protect or require the new processor to continue to protect your personal information.

7. Your Rights

7.1 Right of Access

You have the right to request access to your personal data held by us at any time and to understand how we collect, use, and process your information. We will respond to your request within the legally prescribed period and provide the relevant information free of charge.

7.2 Right to Data Portability

You have the right to obtain a copy of your personal data held by us and receive such data in a structured, commonly used, and machine-readable format.

7.3 Right to Erasure

You have the right to request that we delete your personal data. We will process your request as soon as possible within the scope permitted by law. If deletion cannot be performed due to legal obligations or other legitimate reasons, we will inform you of the specific reasons.

7.4 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data to ensure the accuracy of your information. If you find our data inaccurate, please contact us at any time to submit a correction request. We will process your request within the legally prescribed time and update your information promptly.

7.5 Right to Withdraw Consent

You have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent prior to withdrawal. Certain data collection and processing activities (such as device cloud connection, precise location acquisition, etc.) rely on your consent; if you withdraw your consent, we will cease the corresponding data processing, and some features may be restricted or unavailable.

7.6 Right to Lodge a Complaint

If you are dissatisfied with any of our actions, you may choose to lodge a complaint with IGEN. You also have the right to lodge a complaint with the relevant data protection supervisory authority. If you believe that our processing of your personal data violates applicable data protection laws in your country, you have the right to lodge a complaint with the supervisory authority of your EU member state or the supervisory authority at our main place of business.

7.7 Right to Restrict Processing

In accordance with applicable laws, under certain circumstances, you have the right to request that we restrict the manner in which we process your personal information. For example, if you dispute the accuracy of your personal data and we need a period to verify it, you may request that we restrict the processing of such data during that period.

7.8 Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to our processing of your personal data based on legitimate interests. Once you exercise this right, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time, and once exercised, we will immediately stop processing your data for such purposes.

8. Revisions

This policy may be updated, revised, modified, or changed from time to time as necessary. If any terms of this policy are updated, revised, or changed, we will display the modified policy through push notifications, pop-ups, or other means when you log in to the SOLARMAN Business or update the application version.

9. Other Matters

In certain specific services or functions of the SOLARMAN Business , we may inform you of the purposes, methods, or scope of personal information processing through interactive texts, product interfaces, or pop-up windows. In case of inconsistency, the separately provided information shall prevail.

10. Contact Us

We have established a dedicated Personal Information Protection Team and Data Protection Officer. If you have any questions, complaints, or suggestions regarding this Privacy Policy or personal information protection, you may contact us by any of the following means:
(1) Telephone: 4001810512
(2) Email: customerservice@solarmanpv.com
(3) Data Protection Officer email: isc@igen-tech.com

We will review issues as soon as possible and respond within 30 days of receiving your request or complaint. The subsequent processing period usually does not exceed 90 days. If we encounter special circumstances, we will inform you of the processing time and reasons for the delay within 30 days of receiving your request.