Privacy Policy

This Privacy Policy explains how DCFR collects, uses, shares, retains, and protects personal information when you visit dcfr.design, create an account, purchase or use a product, submit project information, receive a report, contact DCFR, or otherwise use the DCFR services.

1. Information we collect

Depending on how you use DCFR, we may collect:

• account and identity information, such as name, email address, authentication identifiers, and profile information provided through Google sign-in or another enabled login method;
• contact and organization information, such as company, role, messages, support requests, and communication preferences;
• project and candidate-site information, such as locations, parcel links, acreage, target program, target megawatt load, project notes, preferences, uploaded materials, and screening inputs;
• generated and submitted project records, including screening results, assumptions, selected-site information, reports, module outputs, and related delivery records;
• purchase and entitlement information, such as product purchased, order and customer identifiers, payment status, refund status, license or access entitlement, and delivery history;
• technical and usage information, such as device and browser information, Internet Protocol address, login and security events, pages or features used, timestamps, and diagnostic records; and
• information you voluntarily provide through contact, support, early-access, or other forms.

2. Sources of information

We collect information directly from you, automatically from your use of the website and services, from authentication and payment providers when you choose or authorize them, and from public or licensed sources used to support planning-stage analysis.

3. How we use information

DCFR uses information as reasonably necessary to:

• create and secure accounts, authenticate users, and manage access;
• process purchases, verify payment, record entitlements, and provide billing support;
• perform candidate-site screening, generate reports, deliver digital products, and provide requested services;
• maintain project records, support customer review, and respond to support or contact requests;
• operate, troubleshoot, secure, monitor, and improve the reliability and usability of the services;
• detect fraud, unauthorized access, credential sharing, misuse, or security incidents;
• communicate about purchases, service status, requested support, and material policy or product notices; and
• comply with law, enforce agreements, and protect DCFR, customers, users, and others.

4. Customer project information and ownership

As between you and DCFR, you retain ownership of lawful project information and other materials you submit. DCFR processes those materials only as reasonably necessary to provide, secure, support, and administer the requested services and to comply with law, subject to the Terms of Service. You are responsible for ensuring that you have authority to submit the information.

5. Generated outputs

DCFR may retain reports, screening results, calculations, assumptions, and other generated outputs to provide delivery, account access, support, security, recordkeeping, and legal compliance. Customer use rights and DCFR’s ownership of the underlying platform, methods, templates, and system logic are described in the Terms of Service.

6. Payment processing

Lemon Squeezy acts as the merchant of record and processes payments, taxes, refunds, and related purchase information. DCFR receives order, customer, payment-status, refund, and entitlement information needed to verify purchases and provide access. DCFR does not receive or store full payment-card numbers.

7. Service providers

DCFR uses service providers to operate the services. Current functions include Lemon Squeezy for merchant-of-record payment processing, Supabase for authentication and data services, Vercel for website and application hosting, Google when you choose Google sign-in, and configured email infrastructure for transactional or support email. These providers process information under their own terms and privacy practices and only for the functions for which they are engaged.

DCFR may add or replace providers as the service develops. This Policy will be updated when a change materially affects how personal information is handled.

8. No sale of personal information

DCFR does not sell personal information for money. DCFR does not disclose personal information for cross-context behavioral advertising. DCFR currently does not use customer project information for advertising profiles.

9. Aggregated and de-identified information

DCFR has not adopted a general right to use Customer Inputs or Customer Outputs for cross-customer benchmarking, model training, or product-development datasets. Any future materially broader use of aggregated or de-identified customer information will require an updated policy and any consent or other legal basis required by applicable law.

10. Data retention

DCFR retains information for as long as reasonably necessary to provide the services, maintain account and delivery records, support customers, secure the platform, resolve disputes, enforce agreements, and satisfy tax, accounting, payment, and legal obligations. Retention periods vary by record type. Information may remain in protected backups for a limited period before deletion or overwrite.

11. Security

DCFR uses reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure. You are responsible for keeping account credentials, download links, and product passwords confidential and for promptly reporting suspected unauthorized access.

12. International processing

DCFR and its providers may process information in countries other than the country where you live. Where required, DCFR relies on appropriate contractual or legal safeguards for international transfers.

13. Your choices and privacy rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, portability, restriction, or objection regarding personal information. You may also withdraw consent where processing relies on consent. These rights may be limited by legal exceptions and record-retention obligations. Submit a request through the Contact page. DCFR may need to verify your identity before acting.

14. Children

The services are intended for professional users and are not directed to children under 13. DCFR does not knowingly collect personal information from children under 13 through the services.

15. Changes to this Policy

DCFR may update this Policy as the services and legal requirements change. Material changes will be posted with a revised effective date and communicated by other reasonable means when appropriate.

16. Contact

Privacy questions or requests may be submitted through the Contact page.