Privacy - PilotWatt

What we store

Data	Purpose
Email / user id	Authentication via Clerk
FoxESS API key + device SN	Live data + control (encrypted)
Octopus API key + export MPAN/serial	Rates + earnings (key encrypted)
Location / GSP region	Solar forecast + Agile region
Scheduler settings + run history	Schedules, estimates, audit
Terms acceptance timestamp	Proof you agreed to Terms and inverter control clause

Inverter control

When the smart scheduler or manual override is enabled, PilotWatt sends schedule and work-mode commands to your FoxESS inverter via the FoxESS Cloud API. See Terms of Service for the full alpha inverter control clause.

What we do not store

FoxESS or Octopus passwords
Long-term granular consumption beyond what APIs return for earnings / detection
Precise GPS — town/postcode level for forecast only

Where data lives

Neon Postgres — EU (London region)
Upstash Redis — cached non-sensitive aggregates
Vercel — app hosting (EU)
Clerk — authentication
Sentry — error monitoring (no session replay)

We do not sell your data.

Removing credentials

Settings → Disconnect FoxESS or Disconnect Octopus removes stored credentials for that provider.

Full account deletion is not yet available in the app. Do not publish “delete your account” instructions until Settings includes a danger-zone delete flow.