Privacy
This is a first-party UK privacy notice for Solar Responder at solar-responder.com and app.solar-responder.com. It is not legal advice. The product owner must still approve the final lawful basis, retention period, PECR wording and this notice with appropriate professional advice before a paid public launch.
Last updated 29 August 2026.
Who is responsible
For installer account, billing and product analytics data, Lead Responder LTD (company no. 17423272), Penny Black Court, 89 Queens Road, London, is the controller. Contact: tom@solar-responder.com.
For homeowner names, contact details, messages and qualification answers captured from forwarded enquiries, the installer customer is the controller. We process that data on the installer's instructions so they can contact, qualify and follow up the enquiry.
Public demo
The seven-step demo is a fixture. Clicks and answers are not stored. Optional business name, area and first name stay in your browser session unless you use a prospect link. Prospect links look up a hashed profile and fail closed to the skippable form.
Analytics
We record first-party product events such as demo started, trial started or subscription activated. A first-party visitor cookie remembers the first and last campaign click (UTM and ad click ids) so we can attribute a trial or paid conversion. Events do not include the answers you click, your name, or your email. There are no advertising cookies and no third-party pixels unless paid advertising is explicitly switched on. Optional error monitoring (Sentry) uses a server-side DSN, redacts message bodies, phone numbers and email addresses, and is not required to boot the site.
Installer accounts and billing
If you start a trial we store the email, name and business details you submit so we can create your workspace. Sign-in cookies stay on app.solar-responder.com and are not shared with the marketing site. Card payments are collected by Stripe Checkout. Stripe is the payment processor. Subscription status is stored locally after a verified webhook; the success page does not grant access.
Homeowner leads and messages
Forwarded lead emails and SMS replies can include names, phone numbers, email addresses, postcodes and property answers. We store transcripts, normalised answers, scores and delivery status so the installer can act. Automated SMS is sent only when the installer has connected a source and live messaging is enabled. STOP (and equivalent) halts further automated messages after one acknowledgement. Email fallback uses mail.solar-responder.com only after that sending domain is verified.
Processors for this processing include Supabase (UK-hosted database and auth), Twilio (SMS), Postmark (inbound email and optional outbound), OpenAI (phrasing only, store=false), Vercel (hosting) and, when configured, Sentry (errors without PII).
Retention, export and deletion
Installers can export their workspace leads as JSON and set a retention period between 30 and 2555 days. The default in the product is 365 days until the owner confirms a shorter or longer UK period. A nightly job can delete inactive leads and expired demo profiles. Personalised demo profiles are deleted after their expiry time.
Your rights
Depending on your role you can ask for access, correction, deletion, restriction, objection or a portable copy. Installer users can export or delete lead records from Settings. Homeowners should contact the installer they enquired with; we will help that installer fulfil the request. You can complain to the ICO (ico.org.uk).