Last updated: 26 April 2026
Privacy Policy
This policy covers both the Helios PV Dashboard web application and the Helios Inverter Sync browser extension. It explains what data we collect, where it goes, and what we never do.
1. The browser extension — data stored on your device
Everything below lives in your browser's local extension storage. It never leaves your device except where stated in Section 2.
| Item | What it is | Why it's needed |
|---|---|---|
| System configuration | Your Helios system UUID(s), inverter plant ID(s), provider name, optional system label, and backfill day count | Identifies which systems to sync |
| Authentication session | A short-lived JWT issued by Helios when you sign in | Authenticates uploads to your account |
| CSV URL template | A cached URL pattern used to fetch CSVs directly on subsequent syncs | Avoids repeated portal navigation; speeds up daily sync |
| Sync metadata | Timestamp of last successful sync, last synced date, last error message | Displayed in the popup; decides whether to auto-sync on browser start |
2. The browser extension — data sent to Helios servers
The extension sends the following to the Helios backend:
| Item | When | Purpose |
|---|---|---|
| Solar energy production CSV | During each sync | Uploaded to your account so the soiling model can calibrate to your real generation data |
| Helios authentication token | With every request | Verifies you own the system being uploaded to |
| System UUID | In the upload URL path | Identifies which system the data belongs to |
| Subscription tier check | Before sync starts | Confirms your account is on the paid tier |
No data is sent to any third party. The only destination is the Helios backend and the database that backs it, both operated by the Helios service.
3. The browser extension — portal access
During a sync the extension temporarily interacts with your inverter manufacturer's web portal:
- Opens a background browser tab to the portal's CSV export page.
- Reads the contents of the downloaded CSV (solar energy production values).
- Intercepts and cancels the file download so the CSV is never written to your Downloads folder.
Beyond the CSV content itself the extension does not read, store, or transmit any other information from the portal — no account settings, personal details, or other system data.
4. The browser extension — permissions
| Permission | Why it's needed |
|---|---|
| storage | Store local configuration and auth session |
| tabs | Open a background tab to the inverter portal to trigger the CSV export |
| scripting | Inject a content script into the portal tab to click the export button and read the CSV |
| alarms | Schedule the daily automatic sync |
| downloads | Intercept and cancel CSV downloads so the file is never saved to disk |
| notifications | Show a desktop notification when auto-sync completes or fails |
| Host access to inverter portal domains | Required to navigate to the portal and read the CSV response |
| Host access to Helios API | Required to authenticate and upload data |
5. The web application
When you use the Helios dashboard we collect:
- Account data — email address and password (hashed, never stored in plain text) provided during registration.
- System configuration — panel details (tilt, azimuth, area, location) you enter during onboarding.
- Uploaded CSV data — energy production history sent by the extension or uploaded manually.
- Computed results — soiling ratios, cleaning recommendations, and performance metrics derived from your data and public weather/air quality APIs.
We use PostHog for anonymous product analytics (page views, feature usage). No personally identifiable information is attached to these events.
6. What we never do
- Store your inverter portal username or password.
- Read anything from inverter portal pages beyond the daily energy production CSV.
- Sell, rent, or share your data with advertisers or data brokers.
- Track your browsing history.
- Read data from any website other than the configured inverter portal and the Helios API.
7. Future inverter providers
Currently the extension supports Aurora Vision. When additional inverter manufacturers are added they will follow the same model: only the daily energy production CSV export is accessed, no credentials are stored, and data is uploaded exclusively to your Helios account. All permissions needed for a new provider will be described in the updated version of this policy.
8. Data retention and deletion
Data on Helios servers is retained for as long as your account is active. You can delete your account at any time from Settings → Account — this permanently removes all your data from our servers.
To remove all local extension data, click Disconnect in the extension popup, or uninstall the extension. Both wipe all data from browser local storage.
9. Contact
Questions about this policy? stavris97@gmail.com