Privacy Policy
Last updated: 21 October 2026
This policy explains how personal data is handled when you use the Soligrid Uptime Platform. Soligrid is a brand of Mycelyn Private Limited.
1. Who we are
The platform is provided by Mycelyn Private Limited (“Mycelyn”, “we”, “us”), which owns the Soligrid brand and platform. Contact for privacy matters: corporate@mycelyn.com
In most cases your organisation (the plant owner or operator) decides why plant data and user accounts are used, and we process that data on its behalf. For data about your own account and your use of the platform, we decide the purposes ourselves.
2. What we collect
- Account data: your name, work email address, role, the organisation and plants you are assigned to, and your password (stored only as a secure hash, never in readable form).
- Plant and operations data: readings from inverters, meters and sensors, alarms, tickets, checklists, comments, photos you attach, cleaning records and reports. Plant location (latitude and longitude) is used for weather.
- Activity records: who changed what and when (the audit log), and sign-in times, so that the service history can be trusted.
- Technical data: IP address, browser type and the pages requested, recorded in server logs to keep the service secure and working.
- Emails: the messages we send you, such as invitations, password resets, alarm notices and monthly reports.
We do not ask for payment details, government identifiers or sensitive personal data through the platform.
3. Why we use it
- To provide the service: sign you in, show plant performance, raise alarms, manage work and produce reports.
- To keep the platform secure, prevent abuse and diagnose faults, on the basis of our legitimate interest.
- To contact you about your account and the service, such as invitations and notices.
- To meet legal and regulatory obligations.
We do not sell personal data and we do not use it for advertising.
4. Who receives it
We use service providers who process data on our behalf, only to run the platform:
| Provider | Purpose |
|---|---|
| Supabase | Database, sign-in and file storage |
| Vercel | Hosting the web application |
| Open-Meteo | Weather forecasts. Only a plant's coordinates are sent, never personal data |
| Email service provider | Delivering invitations, alarm notices and reports |
Within your organisation, other users can see what their role and plant assignments allow, for example your name on a ticket you worked on. We may share data with professional advisers and with authorities where the law requires. Data of one organisation is never shown to another.
5. Transfers outside your country
Our providers may process data in countries other than your own, including outside India. Where this applies we rely on contractual protections and the safeguards required by applicable law.
6. How long we keep it
- Account data: while your account is active, then removed or anonymised within a reasonable period after it is closed, unless a record must be kept.
- Raw plant readings: a limited period (typically days to weeks), after which summary data at 15-minute resolution is kept for reports and trend history.
- Tickets, reports and the audit log: kept as the service history, because closed work and past reports need to stay verifiable.
- Server logs: the short period set by our hosting provider.
7. Your rights
- India (Digital Personal Data Protection Act, 2023): you may ask to access, correct or erase your personal data, withdraw consent, nominate another person to exercise your rights, and make a grievance to us.
- UK and EU (GDPR): you may ask for access, correction, erasure, restriction and portability, object to processing, withdraw consent at any time, and complain to your data protection authority.
- United States (state privacy laws): you may ask to know, correct or delete your personal data. We do not sell personal data or share it for cross-context behavioural advertising.
To use any of these rights, email corporate@mycelyn.com with the subject “Privacy”. We reply within 30 days. If your organisation controls the data, we may refer your request to it.
8. Security
Traffic is encrypted with HTTPS and data is encrypted at rest. Every record belongs to one organisation and the database enforces that users see only their own organisation's data. Gateways only read from plant equipment. Gateway credentials are unique and revocable, and administrative changes are logged. No system is completely secure, so we cannot guarantee absolute security. To report a vulnerability, email corporate@mycelyn.com.
9. Children
The platform is for businesses and is not directed at anyone under 18.
10. Cookies
See our Cookie Policy for what the platform stores in your browser.
11. Changes
We may update this policy. The date at the top shows when it last changed. Significant changes will be notified to account holders.