Privacy Policy

1. Scope

This Policy applies to all Authorised Users and to all data processed through the Platform, including dashboards, modules, APIs, backend services, AI pipelines, and supporting infrastructure. It covers personal data, device data, and operational/inverter data, whether you access the Platform as an individual user or on behalf of a Client Organisation.

Where a Client Organisation determines the purposes and means of processing its operational data, that organisation acts as the data controller and the Company acts as a processor on its behalf. For account, security, and Platform-improvement processing, the Company acts as the controller.

2. Definitions

• Personal Dataany information that identifies or can reasonably identify a natural person, such as name, email, phone number, role, and login identifiers.
• Operational Datadata relating to solar plants and systems, inverter readings, generation, consumption, battery and grid figures, equipment records, plant and site details, customer contacts, and billing inputs.
• Device Datatechnical information about the device and connection used to access the Platform, including IP address, browser, operating system, and hardware / browser fingerprint.
• Usage Datarecords of activity on the Platform, including logins, page views, API calls, downloads, uploads, exports, and session duration.
• Client Organisationthe entity licensed to use the Platform under whose authority an Authorised User logs in.

3. Information We Collect

We collect the following categories of information:

• (a)Account information you or your Client Organisation administrator provide when registering or being provisioned, name, email, phone, role, organisation, and credentials.
• (b)Operational Data read from connected inverters and entered into the Platform, generation, savings, battery, grid, plant, equipment, customer, and billing data.
• (c)Documents and files you upload, including utility bills, datasheets, and configuration files, and the fields extracted from them by our AI pipelines.
• (d)Device Data and Usage Data collected automatically to keep the Platform secure, reliable, and auditable.
• (e)Communications you send us, including support requests, feedback, and bug reports.

4. How We Use Information

We use information for the following purposes:

• (a)to provide, operate, and maintain the Platform and your dashboards;
• (b)to generate AI reports, alerts, baselines, performance-deviation insights, and visualisations;
• (c)to authenticate users, manage access, and enforce role-based permissions;
• (d)to process subscriptions, billing, and module activation;
• (e)to provide support and respond to your communications;
• (f)to secure the Platform, detect and prevent fraud, abuse, and unauthorised access, and to log and audit activity for compliance and enforcement;
• (g)to maintain, troubleshoot, and improve the Platform, including its AI models using anonymised or aggregated data that cannot identify you;
• (h)to comply with legal obligations and enforce our terms.

5. Legal Basis for Processing

We process information where it is necessary to perform our agreement with you or your Client Organisation, where we have a legitimate interest in operating and securing the Platform, where required to comply with the law, or where you have given consent. Where processing relies on consent, you may withdraw it at any time, subject to legal or contractual limits.

6. Inverter & Operational Data

Operational Data belonging to a Client Organisation remains its property and is used to power that organisation's dashboards, reports, and notifications. The structure, schema, aggregated analytics, derived insights, baselines, visualisations, and AI-extracted fields generated by the Platform remain the property of the Company.

Figures such as generation, savings, and faults are estimates derived from connected inverters and may differ from your utility bill. They are provided for guidance and are not a guaranteed or official measurement.

7. AI Processing & Automated Analytics

The Platform uses AI to extract fields from uploaded documents, generate reports and alerts, and produce analytics and baselines. These outputs assist decision-making and are not a substitute for professional or regulatory advice.

We may use anonymised and aggregated data, which cannot reasonably identify you or your Client Organisation, to develop, evaluate, and improve our AI models and benchmarks. We do not use your identifiable Personal Data to train models for third parties.

8. Cookies, Logging & Device Fingerprinting

We use essential cookies and similar technologies to keep you signed in, maintain sessions, and remember preferences. We may use limited analytics to understand how the Platform is used; you can control non-essential cookies through your browser settings.

For security, compliance, and enforcement, we log and record activity on the Platform, logins, device fingerprints, IP addresses, page views, API calls, downloads, uploads, exports, and session duration. Acceptance of the Terms is recorded per device. By using the Platform you consent to this logging and monitoring.

9. Sharing & Disclosure

We do not sell your Personal Data. We share information only as follows:

• (a)with trusted service providers and sub-processors who help us operate the Platform (for example hosting, storage, messaging, and analytics), bound by confidentiality and data-protection obligations no less protective than this Policy;
• (b)within your Client Organisation, according to the access and role permissions configured for it;
• (c)where required by law, regulation, court order, or a lawful request from a competent authority;
• (d)to establish, exercise, or defend legal claims, and to enforce our terms and protect our rights, property, and safety;
• (e)in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy continuing to apply.

10. Cross-Border Transfers

The Platform and its service providers may process and store data on infrastructure located inside or outside Pakistan. Where data is transferred across borders, we take reasonable steps to ensure it remains protected by appropriate safeguards and in accordance with applicable law.

11. Data Security

We use industry-standard administrative, technical, and organisational measures to protect data in transit and at rest, and we limit access to authorised personnel on a need-to-know basis. No system is completely secure; we work continuously to safeguard information and will act promptly on any suspected incident in accordance with applicable law.

12. Data Retention

We retain information for as long as an account is active or as needed to provide the Platform, and thereafter as required to comply with legal, accounting, audit, or enforcement obligations, or to resolve disputes. Anonymised and aggregated data may be retained indefinitely. On a valid request, we will delete or de-identify Personal Data, subject to these requirements.

13. Your Rights

Subject to applicable law and to the rights of the relevant Client Organisation, you may request to access, correct, export, or delete your Personal Data, and to object to or restrict certain processing. Where we process data on behalf of a Client Organisation, we will direct your request to that organisation. To exercise your rights, contact us using the details below; we may need to verify your identity before acting.

14. Children

The Platform is intended for business use by Authorised Users and is not directed at children. We do not knowingly collect Personal Data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

15. Third-Party Services & Links

The Platform may integrate with or link to third-party services (for example inverter manufacturers, messaging providers, or payment processors). Their handling of data is governed by their own policies, for which we are not responsible. We encourage you to review those policies.

16. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the Platform or by email and, where required, presented for acknowledgement. Continued use of the Platform after changes take effect means you accept the updated Policy.

17. Governing Law

This Policy is governed by the laws of the Islamic Republic of Pakistan, including the Prevention of Electronic Crimes Act 2016 and Pakistan's personal data-protection legislation as enacted. The courts of Karachi, Pakistan have exclusive jurisdiction over any dispute relating to this Policy.

18. Contact

For questions about this Policy or to exercise your rights, contact us at info@modularintel.com or write to: Modular Intelligence (SMC-Pvt.) Ltd., Suite 212-213, Sea Breeze Plaza, Shahrah-e-Faisal, Karachi, Pakistan.