Privacy Policy
1. Introduction
Yude New Energy Technology Co., Ltd. and its affiliates (hereinafter referred to as "we" or "Yude Solar") fully understand the importance of personal information to you and will do our utmost to protect the security and reliability of your personal information. We are committed to maintaining your trust and protecting your personal information in accordance with the following principles: accountability, purpose specification, consent, data minimization, security, individual participation, and transparency.
This Privacy Policy applies to all products and services provided by Yude Solar, including but not limited to:
- Yude Solar Management Platform
- Yude Solar Mobile Application (App)
- PV Power Station Monitoring Platform
Our business covers multiple countries and regions in Southeast Asia, with servers deployed overseas. Please read and fully understand this Privacy Policy before using our products or services.
2. Information We Collect
2.1 Account and Identity Information
When you register and use our services, we may collect the following information:
Info Type
Account Information
Details
Phone number, username, password, email address, SMS verification code
Purpose
Registration, identity verification, account security
Info Type
Identity Information
Details
Name, gender, date of birth, ID number, ID validity period, ID photo
Purpose
Real-name authentication, contract signing, compliance
Info Type
Enterprise Information
Details
Company name, unified social credit code/tax number, company address, company type (agent/funder/O&M provider)
Purpose
Enterprise authentication, business cooperation
Info Type
Position Information
Details
Department, position, office
Purpose
Permission management, business assignment
2.2 PV Business Data
During the PV power station installation process, we collect the following business-related data:
Info Type
Customer Information
Details
Owner name, contact details, contact address, identity documents, proof of relationship with property owner
Purpose
Customer filing, contract signing
Info Type
Site Survey Data
Details
Installation address, GPS coordinates, altitude, building structure, roof type, on-site photos
Purpose
Site assessment, installation design
Info Type
Equipment Information
Details
Inverter model and power, PV module model and power, distribution box, cable specifications, device serial numbers
Purpose
Equipment management, after-sales service
Info Type
Contract Information
Details
Sales mode, funder, contract status, contract change records
Purpose
Contract management, business process
Info Type
Financial Information
Details
Owner monthly income, loan period, loan ratio, financial institution overdue status
Purpose
Financing assessment, risk control
2.3 Power Generation Data
After the power station is connected to the grid, we continuously collect and monitor the following generation data:
Details
Real-time power, daily generation, cumulative generation, generation time records
Purpose
Efficiency analysis, revenue calculation
Details
Inverter online/offline status, device operating parameters, last update time
Purpose
Device health monitoring, fault warning
Info Type
Alert Information
Details
Alert type, alert level, alert content, handling records, handling personnel
Purpose
Fault diagnosis, O&M management
Info Type
Statistical Data
Details
Total stations, total installed capacity, online/offline station count
Purpose
Operations analysis, dashboard display
2.4 Device Permissions and Automatically Collected Information
To provide full service functionality, our mobile application may request the following device permissions:
Use Case
Obtain precise station location (coordinates, altitude) during site survey for site selection and map display
Required
Required for site survey
Use Case
Take site survey photos, building photos, ID photos, equipment photos, inverter nameplate photos
Required
Required for survey and filing
Use Case
Save and upload photos, download survey reports and contract documents
Required
Required for file management
Use Case
Data transmission, API requests, file upload/download
Note: We only request permissions when you use the relevant features. You can disable permissions in your device settings at any time. Disabling a permission may affect the corresponding feature but will not affect other features.
In addition, when you use our services, we automatically collect the following information:
- Device information: browser type and version, operating system, device model
- Network information: IP address, access time, request source
- Preferences: language preference (Chinese/English/Thai), timezone setting, interface theme
3. How We Use Information
The information we collect is used for the following purposes:
- Core services: user registration and login, PV station survey and filing, equipment and inventory management, contract generation and management, power generation monitoring and analysis
- Business operations: staff management and permission assignment, enterprise and agent management, work order processing and approval, performance management and incentive rules
- Security: identity verification and account security, risk control and anti-fraud, operation logs and audit trails
- Service improvement: data analysis and statistical reports, system performance optimization, user experience enhancement
- Compliance: meeting local laws and regulations, cooperating with reasonable regulatory requirements
4. Information Storage and Security
4.1 Storage Location
Your personal information and business data are stored on servers located overseas. File-type data (such as photos and documents) is stored in third-party cloud storage services.
4.2 Storage Methods
Content
Business data, user information, power generation monitoring data
Security
HTTPS encrypted transmission, access control, database encryption
Storage Type
Cloud Storage
Content
Photos, documents, contract files
Security
Encrypted configuration transmission, access key management
Storage Type
Local Storage (Browser)
Content
Login credentials, language preferences, interface settings
Security
Token authentication, Cookie security policy
4.3 Security Measures
We take the following technical and administrative measures to protect your information:
- End-to-end encryption of data transmission to prevent interception or tampering
- Industry-standard encryption algorithms to protect user passwords and sensitive information
- Strict access control to ensure users can only access data within their permission scope
- Comprehensive authentication system with session timeout and automatic expiration
- Operation log recording and security audit mechanisms
4.4 Retention Period
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless otherwise required by law:
- Account information: retained during the validity of your account and for a reasonable period after cancellation
- Business data (station archives, contracts, etc.): retained according to business needs and legal requirements
- Power generation monitoring data: retained according to station operation cycle and data analysis needs
- Log data: retained for no more than 12 months, unless otherwise required by law
5. Information Sharing and Disclosure
5.1 Information Sharing
We do not sell your personal information to any third party. We may share your information in the following circumstances:
- Business partners: in the PV installation business, we may need to share necessary business information with funders, O&M providers, and equipment suppliers to complete service delivery
- Affiliates: to provide a unified service experience, we may share necessary information among Yude Solar affiliated companies
- Service providers: we use third-party cloud service providers for data storage and other technical services; relevant data is protected by their security measures
5.2 Disclosure
We may disclose your personal information in the following circumstances:
- With your explicit consent or authorization
- As required by applicable laws, regulations, legal proceedings, or mandatory government authority requirements
- When reasonably necessary to protect the rights, property, or safety of ourselves, our users, or the public
6. Cross-Border Data Transfers
As our business covers multiple countries and regions, your personal information may be transferred to and processed in locations outside your country or region. We will:
- Ensure data transfers comply with applicable laws of both the sending and receiving countries
- Take appropriate security measures to protect cross-border transferred data
- Comply with applicable data protection laws in the countries and regions where we operate
- Obtain your consent for cross-border data transfers where necessary
7. Cookies and Local Storage
We use cookies and local storage technologies to provide and improve our services:
Purpose
Maintain login status, ensure account security
Content
Authentication Token (YUDE-Token)
Purpose
Remember your preferences
Content
Language selection, date format
Type
Local Storage (localStorage)
Purpose
Cache basic user information to improve loading speed
Content
Username, enterprise information, interface settings
Type
Session Storage (sessionStorage)
Purpose
Temporarily cache configuration information
Content
File upload configuration
You can manage or delete cookies through your browser settings. After clearing cookies, you may need to log in again and reset your preferences.
8. Your Rights
Under applicable data protection laws, you have the following rights:
- Right of access: you have the right to access the personal information we hold about you
- Right to rectification: you can modify your personal information through the user center or contact us for corrections
- Right to erasure: under conditions permitted by law, you have the right to request deletion of your personal information
- Right to withdraw consent: you have the right to withdraw your consent at any time; withdrawal does not affect the lawfulness of processing based on consent before withdrawal
- Right to data portability: where technically feasible, you have the right to request that we transfer your personal information in a structured, commonly used format to you or a third party you designate
- Right to restriction: in certain circumstances, you have the right to request that we restrict the processing of your personal information
- Right to complain: if you believe our processing of your personal information violates applicable law, you have the right to lodge a complaint with the relevant data protection authority
To exercise the above rights, please contact us through the contact information at the end of this policy. We will respond within 30 days of receiving your request.
9. Protection of Minors
Our products and services are primarily intended for enterprise users and adult individual users. We do not intentionally collect personal information from minors under the age of 18. If we discover that we have collected personal information from a minor without parental or guardian consent, we will delete the relevant information as soon as possible.
10. Updates to This Policy
We may update this Privacy Policy from time to time. Updated policies will be published on this page with the "Last Updated" date revised. For significant changes, we will notify you through system notifications or other appropriate means. We recommend that you periodically review this Privacy Policy to understand how we protect your information.
11. Applicable Law
The interpretation and enforcement of this Privacy Policy are governed by the following laws and regulations (depending on your location):
- Applicable data protection laws and regulations in your country or region
- Applicable data protection laws and regulations in the countries and regions where we operate
12. Contact Us
If you have any questions, comments, or suggestions about this Privacy Policy, or wish to exercise your data subject rights, please contact us through the following:
We will process your request as soon as possible, generally within 30 business days.