Privacy & Data Handling

What we ask for, and why

What	Why we need it
Your plan set	The system specs are read off it, so you never re-type them.
The site address	To identify the parcel and determine which office issues the permit.
The contract value	It is sworn on the application and sets the plan-review fee tier.
Homeowner name and phone	The application has a contact block that requires it.
Your licence number and qualifying agent	Collected once at signup. The application will not issue without it.
Your company name, phone, email	Printed on the contractor block of the forms.

That is the whole list. We do not ask for your EIN, your insurance policy numbers, bank details, or customer lists, because no Georgia solar permit application we file requires them. If a specific jurisdiction ever does, we will ask you for it at that time and tell you why.

Your licence number is already public

We want to be straight about this rather than sell you a promise we cannot keep. Georgia contractor licences are searchable by anyone in the Secretary of State's public licensee register. Your number is not a secret, and any service that tells you it will keep it secret is either confused or selling you something.

What actually matters is that nobody uses it. We never file under your licence, never appear on your application, and never act as your qualifying agent. You sign, you submit, you remain the licensee of record. That boundary — not secrecy — is the protection.

The homeowner's information is the sensitive part

A homeowner's name, address and phone number belong to a private individual who is not our customer and never agreed to anything with us. We treat that as the most sensitive thing in the file.

It is used only to complete the application for that specific job.
It is never used for marketing, never sold, and never shared with any third party other than the permitting authority the job is filed with.
It is deleted on the schedule below along with the rest of the job file.

Where your information is kept

In transit. Email is encrypted in transit, and this site and our permit application are served over HTTPS with a valid certificate.
At rest. Your company profile is held in an encrypted store (gocryptfs, AES-GCM) that is unreadable without a passphrase which is not written down anywhere on the machine. Even the filenames are encrypted. It is unlocked only while work is being done and locked again afterwards — so a stolen or seized machine yields ciphertext, not your details.
Account isolation. Beneath that, files are stored under an account only the owner can log into, with directory and file permissions that block access by any other account on the machine.
Separated per company. Every client has their own isolated profile. The software will refuse to run — with an error, not a fallback — if it cannot find the exact profile named for a job. This is deliberate: it is what makes it impossible for one company's licence details to end up on another company's application.
Not sold, not shared. We do not sell data, we do not share it with advertisers or analytics vendors, and this page carries no trackers.

How long we keep it

Item	Kept for
Job files — plan sets, addresses, homeowner details, completed forms	90 days after the permit issues or the job is cancelled, then deleted
Your company profile — licence number, qualifying agent, contact details	For as long as you are a customer
Everything, on request	Deleted within 7 days of you asking, no reason required

Ask for a copy of everything we hold about you and you will get it, in a readable format, within seven days.

Who can see it

One person: the owner of EKO Solar LLC. There are no employees, no subcontractors, and no offshore staff with access to your files. If that ever changes, this page will change first, and existing customers will be told before it takes effect.

What we do not claim

We are a small operation, and we would rather tell you exactly what we do than hide behind words like "bank-grade" or "military-grade," which mean nothing.

We are not SOC 2 certified, not ISO 27001 certified, and not HIPAA-relevant. We do not hold cyber-liability certification. If a certification matters to your business, ask us directly and we will tell you the truth about where we stand rather than send you a badge.

If something goes wrong

If we ever become aware that your information, or a homeowner's information you gave us, has been exposed, we will tell you within 72 hours of finding out — what was exposed, when, and what we have done about it. You will hear it from us rather than from someone else.