Craftstrom

Last updated: July 15, 2026

CraftStrom USA, LLC (“CraftStrom,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you:

visit our website
create an account
place an order
use the CraftStrom app
contact support
subscribe to marketing communications, or
use connected CraftStrom products and services, including solar inverters, power meters, batteries, smart breakers, and related software and cloud services

This Privacy Policy is intended for customers and users in the United States and Canada.

If you do not agree with this Privacy Policy, please do not use our website, app, or connected services.

1. Who We Are

CraftStrom USA, LLC
6719 Saxton Manor St.
Houston, TX 77040, United States
Email: info(at)craftstrom.com
Support: [email protected]
Phone: (832) 850-3832

Privacy requests: privacy(at)craftstrom.com

2. Scope of This Policy

This Privacy Policy applies to information we collect through:

our website,
our online store and checkout,
email, phone, and support interactions,
the CraftStrom app,
connected devices and related cloud services, and
analytics, diagnostics, and security tools we use to operate our business.

This Privacy Policy does not apply to third-party websites, apps, utilities, installers, resellers, payment processors, advertising networks, or other services we do not control, even if they are linked from our website or used with our products.

3. Information We Collect

We collect different categories of information depending on how you interact with us.

A. Information You Provide Directly

You may provide us with:

name,
shipping address,
billing address,
email address,
phone number,
company name (if applicable),
account login details,
order details,
payment-related details (handled through our payment providers),
support requests and communications,
photos, videos, or documents you send us,
warranty claim information,
survey responses, and
marketing preferences.

B. Website and Store Information

When you use our website, we may collect:

IP address,
browser type,
device type,
operating system,
pages viewed,
referral source,
time spent on pages,
purchase activity, and
cookies and similar technologies data (see Section 8).

C. App and Account Information

If you use the CraftStrom app or create an account, we may collect:

account identifiers,
app settings,
device pairing information,
session activity,
support history,
feature usage information, and
push notification preferences.

D. Connected Device and Energy Data

If you use CraftStrom connected products, we may collect information from or about those devices, including:

device serial numbers and identifiers,
firmware and software versions,
inverter power and production data,
power meter readings,
household energy consumption data,
battery status, charge and discharge data, and battery health indicators,
smart breaker and safety-related event data,
zero-export control data,
system configuration data,
diagnostics, fault codes, event logs, and performance history,
device connectivity and signal status, and
timestamps associated with device activity.

This may include measured data and estimated data. Measured data comes directly from sensors and devices. Estimated data may be derived from calculations, assumptions, weather inputs, or system models.

How we treat this data: When device or energy data is linked to an account, household, address, or persistent device identifier, it may be treated as personal information under certain laws. We handle it accordingly.

E. Location and Setup Information

If you choose to enable certain app features, we may collect:

approximate or device-based location information,
panel orientation, tilt, and direction,
setup-related measurements, and
weather and irradiance context used to improve estimates.

Some of this information may be optional. Some may be required for certain features to work properly.

F. Diagnostics and Support Information

To support, troubleshoot, and improve our products, we may collect:

error logs,
event timelines,
device health data,
crash reports,
remote diagnostic data, and
support notes and chat, email, and phone records.

G. Marketing and Analytics Information

We may collect:

email engagement data,
campaign response data,
website analytics,
app analytics,
feature usage trends, and
aggregated product and usage insights.

H. Information from Other Sources

We may receive information from:

payment processors,
shipping providers,
fraud prevention vendors,
analytics and advertising providers,
cloud infrastructure providers,
support tools, and
other users (for example, if they register or gift a product to you).

4. Information Required for System Operation

Some data is required for CraftStrom products and services to function as designed. This includes, for example:

inverter power,
power meter readings,
battery status,
safety events,
device pairing data, and
certain diagnostics needed for reliability and support.

We use this information to:

provide the app and connected features,
show production, usage, storage, and savings information,
support zero-export behavior and system controls,
maintain reliability and safety, and
detect faults and troubleshoot issues.

If you disable or withhold certain data required for system operation, some features may not work properly, and support options may be limited.

5. How We Use Information

We may use personal information and device-related information to:

process orders and payments,
ship products,
create and manage accounts,
provide the app and connected services,
pair, authenticate, and manage devices,
show production, consumption, storage, and savings information,
maintain system operation, safety, and reliability,
support zero-export and other control functions,
provide customer support and warranty service,
diagnose faults and investigate incidents,
improve our products, software, website, app, and support processes,
personalize communications and user experience,
send transactional messages,
send marketing communications where permitted by law,
detect fraud, abuse, unauthorized access, or misuse,
enforce our terms and policies,
comply with legal obligations, and
protect our rights, users, products, and services.

6. Product Improvement, Analytics, and De-Identified Data

We may use information (including device and app data) for internal analytics, testing, research, product development, quality assurance, forecasting, benchmarking, and business planning.

To the extent permitted by applicable law, we may also create, use, license, share, publish, commercialize, or sell aggregated and/or de-identified information derived from customer, device, app, website, and service data, provided that such information does not reasonably identify you personally.

Examples may include:

fleet-level production trends,
device reliability statistics,
aggregated performance benchmarks,
usage trends across regions or product types,
estimated production or curtailment patterns,
aggregated support and fault-rate trends, and
research, reporting, or market insights.

Where reasonably possible, we use technical and organizational measures designed to reduce the likelihood that de-identified or aggregated data can be linked back to a specific person or household. We do not attempt to re-identify de-identified information except as needed to test or maintain our de-identification processes, comply with law, or protect our rights.

7. Legal Bases and Consent

United States

In the United States, our collection and use of information is generally based on:

providing requested products and services,
operating our business,
legitimate business purposes,
your consent where required, and
compliance with legal obligations.

Canada

If you are in Canada, we collect, use, and disclose personal information with your consent, except where otherwise permitted or required by law. Your consent may be express or implied depending on the sensitivity of the information and the context.

By purchasing, activating, connecting, or using a CraftStrom product, app, or service, you consent to the collection, use, and disclosure of information as described in this Privacy Policy, subject to any choices or settings we provide and any rights you have under applicable law.

Where required, we will seek separate consent for certain optional uses.

8. Cookies, Pixels, SDKs, and Similar Technologies

We use cookies, pixels, local storage, SDKs, and similar technologies to:

operate the website,
remember preferences,
keep you logged in,
measure traffic and usage,
improve performance,
support analytics, and
support marketing and advertising (including remarketing).

Your controls

Depending on your location and settings, you may be able to control these technologies through:

our cookie banner / cookie preference center (where available),
your browser settings (for cookies), and
mobile OS settings (for certain app permissions).

If you disable some cookies or similar technologies, parts of the website may not function properly.

9. When We Share Information

We may share information with:

payment processors,
shipping and logistics providers,
cloud hosting providers,
analytics and advertising partners,
customer support providers,
communication providers (email, SMS, push notifications),
fraud prevention and security vendors,
professional advisers,
business partners helping us operate services,
manufacturers or technical service providers involved in diagnostics, repair, warranty, or product support,
government authorities or other parties when required by law or to protect rights and safety, and
a buyer, investor, lender, or successor in connection with a merger, acquisition, financing, reorganization, or sale of assets.

We may also disclose aggregated and/or de-identified data for commercial, research, reporting, benchmarking, or business purposes.

10. Targeted Advertising, “Sale,” “Sharing,” and Global Privacy Control (U.S.)

We use advertising and remarketing pixels on our website. Some U.S. state privacy laws define “sale,” “sharing,” or “targeted advertising” broadly, and certain disclosures of information through cookies/pixels may fall within those definitions.

A. Opt-out of targeted advertising / “sale” / “sharing”

Where required by law, you may have the right to opt out of:

targeted advertising,
“sale” of personal information (as defined by law), and
“sharing” of personal information for cross-context behavioral advertising (as defined by California law).

How to opt out:

Use our cookie preference center to disable advertising/remarketing cookies (where available), and/or
Submit a request to [email protected] with the subject line: “Privacy Opt-Out Request.”

B. Global Privacy Control (GPC)

Where required by applicable law, we will process Global Privacy Control (GPC) signals as an opt-out of “sale”/“sharing” and targeted advertising for the browser/device that sends the signal.

C. We do not provide your contact details for another company’s independent direct marketing

We do not sell personal information in the ordinary sense of handing over your name or contact details for another company’s independent marketing use unless we clearly disclose that and applicable law allows it.

11. Cross-Border Storage and Processing

CraftStrom is based in the United States.

We store and process information, including connected device and app data, on secure servers in the United States, including cloud infrastructure provided by Microsoft Azure and other service providers we may use from time to time.

If you are located in Canada or another jurisdiction outside the United States, your information may be transferred to, stored in, or processed in the United States or other jurisdictions where privacy laws may differ from those in your home jurisdiction. Information stored outside your jurisdiction may be accessible to courts, law enforcement, or national security authorities under applicable law.

12. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

provide products and services,
maintain device history and support records,
fulfill warranty obligations,
comply with tax, accounting, legal, and regulatory obligations,
resolve disputes,
enforce agreements, and
improve safety, reliability, and performance.

In general:

Account and order records are retained for business, tax, accounting, fraud prevention, warranty, and legal purposes.
Device and telemetry data may be retained while the account or product remains active and for a reasonable period afterward for diagnostics, support, safety, legal, and product improvement purposes.
Support records may be retained to improve service quality and document past issues.
Aggregated and/or de-identified information may be retained longer, including after account closure, because it is not intended to identify a specific person.

13. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet, no mobile application, no cloud service, and no storage system is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for using secure networks and devices where possible.

14. Your Choices and Privacy Requests

A. Your choices

Depending on your location and how you use our services, you may have choices such as:

updating account information,
changing marketing preferences,
disabling optional app permissions,
managing cookies through our cookie preference center and/or your browser,
requesting access to your personal information,
requesting correction of inaccurate information,
requesting deletion of certain information (subject to legal and operational exceptions),
requesting a copy of certain data, and
withdrawing consent where processing is based on consent (subject to legal or contractual limits).

Deleting certain data or disabling certain permissions may reduce functionality, remove history, or limit support. Certain safety, warranty, fraud-prevention, and compliance records may be retained as allowed by law.

B. How to submit a privacy request

Email [email protected] with enough detail for us to understand your request (for example: “Access request,” “Delete request,” “Opt-out of targeted advertising,” etc.).

C. Verification

To protect you and prevent fraud, we may need to verify your identity before fulfilling certain requests. Verification may include matching information you provide to information in our records (for example, email address, order details, device identifiers, or account information).

D. Authorized agents (California)

If you are a California resident, you may designate an authorized agent to submit certain requests on your behalf. We may require proof of the agent’s authority and may still need to verify your identity directly.

E. Appeals (certain U.S. states)

If we deny your request and you have the right to appeal under applicable law, you may appeal by emailing privacy(at)craftstrom.com with the subject line: “Privacy Request Appeal.”

15. U.S. State Privacy Notice (Key Differences by State)

State privacy laws vary. The table below summarizes common rights and obligations that may apply depending on where you live. This table is a general guide and does not list every detail of every law. You can find an overview in the Appendix, below.

A. Non-discrimination

We do not discriminate against users for exercising privacy rights granted by law.

B. “Notice at collection” style summary

We collect the categories described in Section 3 for the purposes described in Section 5, including:

to provide products and services,
to support safety, reliability, and customer support,
to improve products and services,
to market and advertise (where permitted; including remarketing pixels and measurement), and
to comply with law and protect rights.

C. Categories of personal information we disclose

We may disclose categories of personal information to categories of recipients described in Section 9, including:

identifiers and contact information (for fulfillment, support, and communications),
commercial information (orders and returns),
internet/network activity (website/app interactions),
device and energy data (to provide app features, support, and reliability), and
approximate location/setup information (if enabled).

16. Change of Purpose

We may use your information for purposes that are compatible with those described in this Privacy Policy. If we intend to use personal information for a new purpose that is not compatible with the original purpose, we will provide notice as required by applicable law and, where required, obtain your consent.

17. Canada Privacy Rights

If you are in Canada, subject to applicable law, you may request:

access to your personal information,
correction of inaccurate personal information,
information about our use and disclosure of your personal information, and
withdrawal of consent, where processing is based on consent and withdrawal is legally or contractually possible.

To the extent required by law, we will respond within the applicable time period.

18. Children’s Privacy

Our products and services are intended for adults. We do not knowingly collect personal information directly from children under 13, or under the minimum age required by applicable law, without appropriate authorization.

If you believe a child has provided personal information to us, contact us and we will review the request.

19. Third-Party Services and Integrations

Our website, app, or products may interact with third-party services, such as:

payment processors,
cloud providers,
analytics and advertising tools,
mapping or weather services,
utility-related tools,
app stores, and
customer support systems.

Those third parties may collect or process information under their own privacy policies. We encourage you to review those policies.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may post the updated version on our website, update the “Last updated” date, and, where appropriate, provide additional notice through the website, app, email, or other reasonable means.

Your continued use of our products or services after an update becomes effective means you accept the updated Privacy Policy, to the extent permitted by law.

APPENDIX

Table: U.S. states with comprehensive consumer privacy laws (high-level differences)

State	Comprehensive consumer privacy law?	Opt-out of targeted advertising	Opt-out of “sale” (broadly defined)	Appeals process (commonly required)	GPC / universal opt-out signal (commonly expected or required)	Notes (plain English)
California (CA)	Yes (CCPA/CPRA) (business.safety.google)	Yes	Yes (“sale” + “share”)	Not typically framed as required “appeal”	Commonly expected/required(GPC widely treated as an opt-out signal) (offlist.me)	Unique “share” concept (cross-context behavioral advertising).
Colorado (CO)	Yes (business.safety.google)	Yes	Yes	Yes	Often treated as required for universal opt-out mechanisms (offlist.me)	Tends to be strict on opt-outs and sensitive data consent.
Connecticut (CT)	Yes (business.safety.google)	Yes	Yes	Yes	Often treated as required for universal opt-out mechanisms (offlist.me)	Explicitly covers “online monitoring” concepts in its statute name.
Delaware (DE)	Yes (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	Similar opt-out model to VA/CT in many respects.
Florida (FL)	Yes (business.safety.google)	Yes (for covered entities)	Yes (for covered entities)	Varies by scope	Not consistently listed as “required”	Florida’s law is often described as narrower (applies to certain businesses/thresholds). (business.safety.google)
Indiana (IN)	Yes (effective 2026) (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	Newer law; keep opt-out + appeal workflow available. (business.safety.google)
Iowa (IA)	Yes (business.safety.google)	Yes	Yes	Not always	Not consistently listed as “required”	Often treated as more business-friendly than CO/CA. (legalclarity.org)
Kentucky (KY)	Yes (effective 2026) (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	Newer law; similar structure to VA-style laws. (legalclarity.org)
Maryland (MD)	Yes (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	Often described as stricter than many other state laws. (recordinglaw.com)
Minnesota (MN)	Yes (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	Newer law; often discussed as comparatively strict. (recordinglaw.com)
Montana (MT)	Yes (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	Standard opt-out model. (legalclarity.org)
Nebraska (NE)	Yes (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	Standard opt-out model. (legalclarity.org)
New Hampshire (NH)	Yes (business.safety.google)	Yes	Yes	Yes	Often treated as required for universal opt-out mechanisms (offlist.me)	Similar to VA/CT style with opt-out + appeal. (legalclarity.org)
New Jersey (NJ)	Yes (business.safety.google)	Yes	Yes	Yes	Often treated as required for universal opt-out mechanisms (offlist.me)	Standard opt-out model; keep request + appeal workflow. (legalclarity.org)
Oregon (OR)	Yes (business.safety.google)	Yes	Yes	Yes	Often treated as required for universal opt-out mechanisms (offlist.me)	Often viewed as more privacy-forward than many states. (legalclarity.org)
Rhode Island (RI)	Yes (effective 2026) (recordinglaw.com)	Yes	Yes	Yes	Not consistently listed as “required”	Newer law; keep opt-out + appeal workflow. (recordinglaw.com)
Tennessee (TN)	Yes (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	Standard opt-out model; cure period concepts exist in some states. (offlist.me)
Texas (TX)	Yes (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	Standard opt-out model; applies based on statutory triggers. (legalclarity.org)
Utah (UT)	Yes (business.safety.google)	Yes (more limited)	Yes (more limited)	Not always	Not consistently listed as “required”	Commonly described as more limited than CO/CA. (legalclarity.org)
Virginia (VA)	Yes (business.safety.google)	Yes	Yes	Yes	Not consistently listed as “required”	“Model” law many others resemble (opt-out + appeal). (legalclarity.org)
All other U.S. states	Not a comprehensive consumer privacy law (as of mid‑2026)	Not required as a comprehensive state right (may exist in narrower laws)	Not required as a comprehensive state right	Not required	Not required	You still should provide clear notice, reasonable security, and truthful marketing; some states have narrower privacy laws (e.g., health data, biometrics, breach notification). (security.org)

Use in policy

How we handle this in practice: We offer a privacy request process (access, correction, deletion, and opt-outs where applicable) and we honor opt-out signals such as Global Privacy Control (GPC) where required by applicable law.