Privacy
Policy.

1. Who we are

HiziX (“HiziX,” “we,” “us”) operates the HiziX SolarLead software platform at solar.hizix.io. We are headquartered in Chicago, Illinois, United States. This Privacy Policy describes what data we collect when you use the platform, how we use it, and the rights you have over it.

2. Scope

This policy covers data we collect from operators — the businesses and individuals who use HiziX as software to run solar lead generation. It also covers contact data the platform resolves about US homeowners during scans, since that data passes through our infrastructure.

3. Data we collect from operators

When you create an account or use the platform, we collect:

• Account data: name, email address, password (hashed), company name, phone number (optional).
• Billing data: payment method tokens via Stripe; we do not store card numbers directly.
• Usage data: scans run, leads resolved, AI Caller minutes used, login timestamps, IP address, browser fingerprint for security.
• Support communications: emails and chat logs you send us.

4. Data the platform resolves about homeowners

When you run a scan, the platform queries third-party data providers (BatchData, Google Solar API, Google Vision API, OpenStreetMap) to resolve information about the rooftops and homeowners in your selected territory:

• Rooftop satellite imagery, building footprints, solar suitability scoring.
• Owner name, age range, mailing address, mobile and landline numbers, email address.
• National DNC and TCPA litigator screening flags.

This data is delivered to your account and locked there. We do not resell, syndicate, or share lead data across operator accounts. If you cancel your subscription, we retain your historical lead data for 90 days for billing reconciliation, then delete it.

5. How we use data

• Provide the service: run your scans, return results, charge for usage, support your account.
• Improve the platform: aggregated, de-identified usage analytics inform our roadmap.
• Comply with law: respond to subpoenas, court orders, and regulatory requests where legally required.
• Communicate with you: billing notices, security alerts, optional product update emails (you can opt out).

We do not sell operator data or lead data to third parties for marketing.

6. Third-party processors

We use the following service providers, each bound by data processing agreements:

• Stripe — payment processing
• Firebase Authentication (Google) — account login
• BatchData — homeowner skip trace
• Google Cloud (Solar API, Vision API, Maps) — rooftop analysis
• Hetzner — primary infrastructure hosting
• Twilio / Vonage — AI Caller telephony

7. Your rights (GDPR · CCPA · state privacy laws)

If you are a resident of California, the European Economic Area, the UK, or other jurisdictions with comparable laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data (subject to legal retention requirements).
• Export your data in a portable format.
• Object to specific processing activities.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@hizix.io. We respond within 30 days.

8. Homeowner data and your responsibilities as operator

When you use HiziX to call, mail, or otherwise contact homeowners whose data the platform resolves, you are the controller of how that data is used, under TCPA, CAN-SPAM, GDPR, and state laws. HiziX provides DNC scrubbing and TCPA litigator screening as a baseline; you remain responsible for honoring opt-outs, recording consent, and complying with your jurisdiction's marketing laws.

9. Security

We use industry-standard encryption in transit (TLS 1.2+) and at rest. Passwords are hashed via bcrypt. Internal access is least-privilege and audit-logged. We will notify affected operators within 72 hours of confirming any security incident that materially affects their account data.

10. Children

HiziX is a B2B platform. We do not knowingly collect data from anyone under 18. If you believe we have such data, contact privacy@hizix.io for prompt deletion.

11. Cookies & tracking

We use first-party cookies for session management and preference storage. No third-party advertising cookies on the marketing site or in the console.

12. International transfers

HiziX servers are located in the United States. If you access the service from outside the US, your data is transferred to and processed in the US. EU/UK operators: we rely on Standard Contractual Clauses for cross-border transfers.

13. Changes to this policy

We may update this policy. Material changes will be announced via email and a banner in the console at least 14 days before taking effect.

14. SMS & text messaging

HiziX SolarLead sends transactional SMS text messages to homeowners who have provided prior express consent during a scheduled phone consultation or via a web form. These messages are limited to appointment confirmations, reminders, scheduling changes, and arrival notifications (for example, that an advisor is on the way). We do not send marketing or promotional text messages through this program.

No sharing of mobile information. We do not share, sell, or rent mobile phone numbers or SMS opt-in consent with third parties or affiliates for marketing or promotional purposes. Mobile information is used solely to deliver the appointment-related messages described above and is only shared with the messaging carrier strictly to transmit your messages.

Message frequency. Message frequency varies based on your appointment activity.

Rates. Message and data rates may apply.

Opt-out & help. You can opt out at any time by replying STOP to any message; you will receive a confirmation and no further messages. Reply HELP for assistance, or contact support@hizix.io / +1 312 532 4262. Carriers are not liable for delayed or undelivered messages.

15. Contact

Privacy questions: privacy@hizix.io
General questions: support@hizix.io
HiziX · Chicago, Illinois · United States