Privacy Policy

This Privacy Policy explains how SolarMax ("we", "us") collects, uses, and protects your information when you use the SolarMax Club mobile application and the web dashboard at solarmaxclub.com (together, the "Service"). By using the Service you agree to this policy.

1. Information we collect

Information you provide

• Account details — name, email address, phone number, username, and password (stored as a salted hash, never in plain text).
• Address details — street address, city, and province, used for reward deliveries and regional programs.
• Identity documents — if you apply for Installer or Dealer status, we collect CNIC images and business documents for verification (KYC).
• Proof images — photos you upload with product submissions and task completions.
• Withdrawal details — bank account or mobile wallet number, used only to process your payout.

Information collected automatically

• Usage activity — in-app actions (submissions, redemptions, referrals) recorded in an audit log to keep the rewards program fair.
• Device identifiers — Firebase installation IDs and device metadata for authentication, analytics, and fraud prevention.
• Crash and diagnostic data — collected via Firebase to keep the app stable.

2. What we do NOT collect

• We never see or store your full card number — payments are processed entirely by Stripe.
• We do not track your precise location.
• We do not read your contacts, messages, or other apps.

3. How we use your information

• Operate the rewards program: award points, verify installs, process redemptions and withdrawals.
• Verify identity for Installer / Dealer applications.
• Prevent fraud and abuse of referrals and payouts.
• Send transactional notifications (submission approved, payout sent, etc.).
• Improve the Service through aggregate, de-identified analytics.

4. Who we share data with

We share data only with the processors required to run the Service:

• Stripe — payment processing for wallet top-ups.
• Firebase (Google) — authentication, push notifications, analytics, and crash reporting.

We do not sell your personal data. We do not share it with advertisers. We may disclose data if required by law or to protect the rights and safety of our users.

5. Data security

All traffic between your device and our servers is encrypted with TLS (HTTPS). Passwords are hashed with bcrypt. Access to production data is restricted to authorized personnel. Identity documents are stored with restricted access and used solely for verification.

6. Data retention

We keep your account data while your account is active. Transaction and audit records are retained as required for financial reconciliation and fraud prevention. When you delete your account, personal data is removed or irreversibly anonymized except where retention is legally required.

7. Your rights

• Access & correction — view and edit your profile in the app at any time.
• Deletion — request account deletion in-app (Profile → Delete account) or see our account deletion page.
• Complaints — contact us at support@solarmaxclub.com and we will respond within 30 days.

8. Children

The Service is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a minor has created an account, contact us and we will remove it.

9. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced in-app. The "Last updated" date above always reflects the current version.

10. Contact

Questions about this policy or your data: support@solarmaxclub.com