Privacy Policy

1. Statutory Scope & Corporate Identity

This Privacy Policy applies to all consumer interactions, website visits, engineering consultations, and turnkey EPC contracts executed by Xtrawatt, a proprietary clean energy brand of Baswal Renewables Pvt. Ltd., headquartered in Jaipur, Rajasthan, India.

We operate in strict adherence to the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and regulatory guidelines established by the Ministry of New and Renewable Energy (MNRE).

2. Categories of Information We Collect

In order to evaluate solar feasibility, execute engineering designs, and process government subsidies, we collect:

• Personal Contact Identifiers: Name, WhatsApp telephone number, email address, and physical site/installation address.
• Utility & Technical Identifiers: Electricity DISCOM name (e.g., JVVNL, AVVNL, JdVVNL, MPPKVVCL), Consumer (K) Number, sanctioned electrical load, and monthly bill statements.
• Rooftop Spatial & Engineering Data: Drone shadow profiles, CAD architectural measurements, GPS coordinates, and structural load assessments.
• Statutory Subsidy Verification Data: Identity credentials solely when mandated by the National Portal for PM Surya Ghar / PM-KUSUM Direct Benefit Transfer (DBT) subsidy releases.
• IoT Cloud Telemetry: Inverter generation stats, daily kilowatt-hour yields, string voltages, and temperature telemetry for clients with active SCADA monitoring.

3. Lawful Purpose of Data Processing

We process your data exclusively for legitimate clean energy EPC operations, including:

• Generating accurate 3D shadow analysis, bill-offset estimates, and engineering proposals.
• Registering and processing official DISCOM net-metering applications and grid feasibility approvals.
• Liaising with the Central Government PM Surya Ghar portal for subsidy disbursement to your bank account.
• Registering 25-year Tier-1 PV manufacturer performance warranties on your behalf.
• Delivering proactive maintenance notifications and inverter fault diagnostic alerts.

4. Authorized Third-Party Disclosures

Your technical and statutory documents are transmitted solely to authorized regulatory entities directly required for system commissioning:

• State Power Distribution Companies (DISCOMs): For net-meter technical feasibility inspection and bi-directional meter installation.
• MNRE National Portal: For verifying rooftop solar capacity and triggering DBT cash subsidies.
• Certified Inverter/Module OEMs: Exclusively for issuing serial-numbered manufacturer warranty certificates.

5. Data Security, Encryption & Storage

All sensitive client records and solar generation databases are stored on secured cloud servers equipped with TLS 1.3 in-transit encryption and AES-256 at-rest encryption. Telemetry feeds from on-site IoT loggers communicate via mutual TLS token-authorized gateways.

Records are retained for the operational lifecycle of your solar asset (up to 25 years) to ensure seamless continuity of long-term warranty and maintenance support.

6. Your Rights & Grievance Redressal

Under the DPDPA 2023, you hold the right to access, rectify, or request erasure of your non-statutory personal data. To exercise these rights or raise inquiries, contact our Data Grievance Desk: