Privacy Policy

Last updated: [FILL IN DATE]

Who we are

Jeno Energy ("Jeno", "we", "us") operates the software at this domain and at jeno.energy. The data controller is [FILL IN LEGAL ENTITY NAME], contactable at [FILL IN CONTACT EMAIL] for any question or request about your personal data.

What we collect

Account signup

When you create an account: your email address, a hashed password (we never store your password in plain text), and the account/company name you choose. We send a verification email to confirm your address before the account becomes fully active.

Session cookies

We use a session cookie strictly to keep you signed in. It is not used for tracking, advertising, or analytics, and we do not run any analytics or tracking scripts on this site or on jeno.energy.

Website interest & updates form

If you submit the "sign up for updates" form on jeno.energy, we store the name, email, company, phone number, and message you provide, along with the submitting IP address (used only for spam prevention) and which page the form was on. A hidden field on that form helps us detect automated spam submissions and is not used to identify anyone.

Project data

If you use Jeno to structure a solar project, you may enter your own clients' information — names, site addresses, GPS coordinates, energy usage, and equipment specifications. We process this data on your behalf as your data processor; you remain the data controller for information about your own clients.

Two-factor authentication

If a platform administrator enables two-factor authentication, we store the authenticator secret and hashed one-time backup codes needed to verify login attempts.

Who else sees this data (our processors)

• Heroku — hosts the application and database.
• Brevo — sends transactional emails (verification, invitations, password reset).
• Slack — receives an internal notification when someone submits the website interest/updates form. This is for our team's internal use only.
• Anthropic — the "Ask Jeno AI" assistant (in the Load Builder and EPC equipment selection tools) sends the project/equipment data you enter in those specific tools to Anthropic's API to generate responses.
• Google (Maps Static API) — when generating a project PDF, if no client-captured map image is available, the site's GPS coordinates may be sent to Google's Static Maps API (server-side) to fetch a satellite image of the site for inclusion in that PDF.

How long we keep data

[FILL IN — no retention period is currently defined; decide and document one here before treating this policy as final.]

Your rights

Depending on where you live, you may have rights to access, correct, or request deletion of your personal data. Contact [FILL IN CONTACT EMAIL] to make a request.

Governing law

[FILL IN JURISDICTION].