Privacy Policy

1. Who we are

Mansprit Power Solutions (OPC) Private Limited ("Mansprit," "we," "us," or "our") is a solar EPC (engineering, procurement, and installation) company registered in India, offering residential and commercial rooftop solar installation, government subsidy filing assistance, financing facilitation, and after-installation monitoring and support.

This policy explains what personal data we collect across our website (mansprit.com), our admin systems, and our customer portal (my.mansprit.com), why we collect it, and what rights you have over it under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), applicable rules as they come into force, and other applicable Indian law.

2. Information we collect

What we collect depends on your relationship with us:

If you submit a quote or site survey request on our website

• Full name, phone number, and city (required)
• Email address, property type, average monthly electricity bill, and any message you include (optional)

If you become a customer

• Everything above, plus your installation address and any internal notes our team records about your project
• Project details: system size, quoted amount, installation status, and timeline updates
• Loan/EMI details, if you choose financing: lender name, loan amount, tenure, and status. We record this to track your application — we do not process the loan ourselves or store your bank account or card details; that happens directly between you and your chosen lender.
• Government subsidy details, if you apply through us: scheme name, applied amount, and your DISCOM reference number, for the purpose of tracking your PM Surya Ghar (or equivalent) application
• Documents you or we upload to your project file — for example quotes, invoices, warranty cards, subsidy confirmations, or ID proof you provide for verification

If you create a customer portal account

• Your login email, managed through our authentication provider (Clerk) — we do not store your password ourselves
• Support messages you send us through the portal's ticketing feature

Automatically, from anyone visiting our website

• Standard technical information collected by our hosting infrastructure (Cloudflare) for security and performance purposes, such as IP address and browser type. We do not currently use third-party advertising or analytics trackers on our marketing site.

3. How we use your information

We do not use your personal data for advertising, and we do not sell it to data brokers or third-party marketers.

4. Legal basis for processing

We process personal data only for lawful purposes and on a basis permitted by applicable law. Depending on the activity, this may include your consent, processing necessary for the performance of a service or contract, compliance with legal obligations, and other lawful uses permitted under the DPDP Act and applicable rules. Where processing is based on consent, you may withdraw that consent by contacting us (see Section 12). Withdrawal does not affect processing that we are otherwise permitted or required by law to continue, and it may affect our ability to provide certain services.

5. Who we share it with

We share personal data only with service providers and other parties where reasonably necessary to provide our services, operate our systems, comply with law, or complete an application you have requested. We do not authorize these recipients to use your personal data for their own independent marketing of unrelated products or services:

• Clerk — authentication provider for our admin and customer portals (manages login credentials and sessions)
• Neon — our database hosting provider, where your project and account data is stored
• Cloudflare — our website and application hosting/security infrastructure
• Resend — our transactional email provider, used to notify our team when you submit a form
• Lending partners (banks/NBFCs) — only if you apply for financing through us, and only the details relevant to your loan application
• Government DISCOM / subsidy portals — only if you apply for a government solar subsidy through us, and only the details required for that application
• Legal or regulatory authorities — only where required by applicable law

6. How we protect your data

Access to customer data within our admin systems is restricted to authorized team members, and further limited by role: a regular admin can only view and edit customers specifically assigned to them, while broader access is limited to master administrators. Every change made to your record by our team — updates, status changes, document uploads — is logged internally with who made it and when, so we can audit access to your data if ever needed.

We use access controls, role-based permissions, authentication controls, logging, and cloud infrastructure with security controls appropriate to the services we operate. Where our service providers offer encryption and other security controls, we use those controls as applicable. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures appropriate to the risks and sensitivity of the personal data we process.

7. How long we keep your data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by applicable law, including legal, accounting, warranty, dispute-resolution, or regulatory requirements. When personal data is no longer required, we will delete it or otherwise dispose of it securely, subject to applicable retention requirements. If you request erasure, we will assess the request against these requirements — see Section 8.

8. Your rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you
• Correct or update inaccurate or incomplete data
• Erase your personal data, once it's no longer needed for the purpose it was collected for or required by law
• Withdraw consent at any time, as described in Section 4
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
• Register a grievance with us and, where applicable under the DPDP Act and rules, approach the Data Protection Board of India in accordance with the prescribed process

To exercise any of these rights, contact us using the details in Section 12. We will respond within the timeframe required by applicable law.

9. Cookies & portal sessions

Our marketing website (mansprit.com) does not use tracking or advertising cookies. Our customer and admin portals (my.mansprit.com and portal.mansprit.com) use essential session cookies, managed by our authentication provider Clerk, solely to keep you securely signed in — these are not used for tracking or advertising purposes.

10. Children's privacy

Our services are intended for adults who can enter into contracts for solar installation services. We do not knowingly solicit personal data from children. If we learn that we have collected personal data from a child in circumstances where such processing is not permitted by applicable law, we will take reasonable steps to address the situation.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. We'll update the "Last updated" date above when we do. Continued use of our website or portal after changes take effect constitutes acceptance of the revised policy.

12. Grievance officer & contact

For any questions, requests, or grievances regarding this policy or your personal data, please contact:

Important: This Privacy Policy describes Mansprit's stated data practices and is intended to be read together with our Terms of Service. It does not override any rights or obligations that apply under mandatory Indian law. Where a statutory requirement or applicable rule provides a different standard, the applicable law will prevail.