Privacy
Last updated: 2026-06-04
What we collect
SolarPilot connects to your EcoFlow account using API credentials you generate in the EcoFlow developer portal. We pull battery and solar telemetry (SOC, watts in/out, hourly history) so the dashboard can render and the projection model can calibrate. We also store any notes you add to the chart, and the smart-plug state if you opted into the auto-control feature.
How we store credentials
Your EcoFlow access key and secret key are stored encrypted at rest in our Supabase database using pgcrypto symmetric encryption. The encryption passphrase is held server-side and never exposed to the browser or to other tenants. Service-role database keys never leave the server.
What we do not collect
- We never ask for your EcoFlow account password.
- We do not run analytics that fingerprint visitors. The marketing site uses first-party page-view tracking only.
- We do not sell, share, or syndicate any telemetry to third parties.
Your controls
- You can rotate or revoke the EcoFlow API key at any time from the EcoFlow developer portal.
- You can request a full data export or deletion by emailing the contact link on the landing page. We will action requests within 14 days.
Third parties we depend on
- EcoFlow IoT API — read-only access to your DELTA Pro.
- Open-Meteo — solar radiation and cloud-cover forecast (no personal data leaves us).
- Supabase — Postgres database hosting your readings.
- Vercel — web hosting for the dashboard.
- Telegram Bot API — used only when you opt into low-battery alerts.
Contact
Questions? Use the Request access link on the home page — it goes to the same operator inbox.