Privacy Policy

1. Information you provide directly

• Account registration: Full name, work email address, company name, job title, and phone number when you create a TerawattOS account or apply for a pilot.
• Pilot intake form: Portfolio size, asset types, geography, and current monitoring tooling — used solely to assess fit and tailor your onboarding.
• Billing information: Payment card details and billing address, processed by our payment providers (Paystack and Stripe). We do not store raw card numbers on our systems.
• Communications: Content of emails, support tickets, and messages you send us.
• Feedback and research: Responses to surveys, user research sessions, and product feedback forms.

2. Information collected automatically

• Usage data: Pages visited, features used, session duration, click paths, and error logs within TerawattOS — used to improve the product.
• Device and technical data: Browser type, operating system, IP address, screen resolution, and referring URL.
• Telemetry data: Energy asset telemetry (power output, irradiance, temperature, fault codes) streamed through Terawatt Edge or OEM integrations. This is operational data about physical equipment, not personal data, though it may be associated with your account.
• Cookies: See Section 10 for our full cookie policy.

3. Information from third parties

• OEM cloud APIs (SMA, Huawei FusionSolar, SolarEdge) when you authorise TerawattOS to connect to your accounts with those services.
• Publicly available company information for the purpose of account verification.

• Service delivery: Creating and managing your account, provisioning TerawattOS access, and processing transactions.
• Platform operation: Ingesting, processing, and displaying telemetry data; generating reports; detecting anomalies; and dispatching alerts.
• Customer support: Responding to support requests, troubleshooting issues, and managing your onboarding.
• Product improvement: Analysing usage patterns to identify bugs, improve performance, and prioritise new features. We use aggregated, anonymised data where possible.
• Communications: Sending transactional emails (password resets, billing receipts, usage alerts) and, where you have consented, product updates and newsletters. You can unsubscribe at any time.
• Security and fraud prevention: Monitoring for unauthorised access, detecting abuse, and complying with legal obligations.
• Business operations: Invoicing, contract management, and financial reporting.

• Contract performance: Processing necessary to deliver TerawattOS services under your subscription agreement.
• Legitimate interests: Product analytics, security monitoring, fraud prevention, and direct marketing to existing customers. We balance these interests against your privacy rights.
• Consent: For optional communications (newsletter, research participation) and non-essential cookies.
• Legal obligation: Where required by applicable law, including tax, financial, and data retention obligations.

• Service providers: Infrastructure providers (AWS, Google Cloud), payment processors (Paystack, Stripe), analytics tools, and email delivery services all bound by data processing agreements.
• OEM integrations: Where you authorise us to connect to an OEM platform, we exchange data with that platform on your behalf. You control which integrations are active.
• Within your organisation: Account administrators can view and manage data for users in their TerawattOS organisation. We recommend you configure role-based access accordingly.
• Legal requirements: Where required by court order, regulation, or to protect the rights, property, or safety of Terawatt, our customers, or others.
• Business transfers: If Terawatt is acquired or merges with another entity, your data may transfer as part of that transaction. We will notify you in advance.

• Account data: Retained for the duration of your subscription and for 2 years after account closure, unless deletion is requested earlier.
• Telemetry data: Retained according to your plan (Growth: 90 days; Enterprise: 5 years). You may export your data at any time.
• Financial records: Retained for 7 years in compliance with Nigerian tax and financial reporting requirements.
• Support communications: Retained for 3 years to facilitate ongoing support and dispute resolution.

• All data is encrypted in transit using TLS 1.3 and at rest using AES-256.
• Terawatt Edge devices authenticate via x.509 certificates and communicate over encrypted tunnels.
• TerawattOS is built toward SOC 2 Type II compliance. Our security posture is reviewed annually by an independent auditor.
• Access to production systems is restricted to authorised personnel via multi-factor authentication and role-based access controls.
• We maintain a responsible disclosure programme. If you discover a vulnerability, please report it to security@terawattenergies.co.

• Access: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention obligations.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request that processing be restricted in certain circumstances.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

• Strictly necessary: Session authentication and security tokens. These cannot be disabled without breaking the platform.
• Analytics (with consent): Aggregated usage analytics to understand how TerawattOS is used. We use privacy-focused tooling and do not share this data with advertising networks.
• Marketing (with consent): Tracking pixels on the marketing website to measure campaign effectiveness. You can withdraw consent at any time via the cookie banner.