Privacy policy
Last updated: 3 July 2026
This policy explains what personal data RainbowHome collects, why, who we share it with, and the rights you have under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). It covers all of our services: rooftop-solar estimates, rainwater-harvesting estimates, and water-quality checks, together with our installer and financing directories.
1. Who we are
RainbowHome is a service operated by Wandx Solutions Pvt Ltd("RainbowHome", "we", "us"), the data fiduciary responsible for your personal data under the DPDP Act. Our GSTIN is 29AACCW2279C1Z9. You can reach us at contact@chainflux.com.
2. What we collect
Calculator estimates (no contact details).When you run a solar or rainwater estimate we store the state, your monthly electricity or water bill, the inputs you provide (e.g. roof area, roof type), the calculator's output (recommended system size, subsidy, savings, payback), and an optional coarse location (city and 6-digit pincode). We do not store your name, full address, precise GPS coordinates, email, or phone number in an estimate record.
Address look-up (not stored by us).If you type an address to place your roof on the map, that address and the resulting coordinates are sent to Google's Maps and Solar APIs to find your rooftop. We use the result to compute your estimate but do not retain your full address or coordinates.
Water-quality checks (no contact details). When you run a water-quality check we store your locality, optional pincode, building type, the water sources and symptoms you select, and the computed risk assessment. We do not store your name or contact details in a check record.
Subsidy pre-check. If you use the government subsidy pre-check, we store the email address you provide, your state and pincode, the bill details you enter, and your consent. Your IP address and browser string are stored only as a one-way hash for abuse prevention, never in raw form.
Leads (only when you ask). If you click to request a site survey, quote, or loan offer, we collect your name, phone number, optional email, any society or registration details you add, your choice of a specific installer or financer (if any), and a record of the consent text you agreed to.
3. Legal basis
We process lead and subsidy-pre-check data on the basis of your consent, which you give at the moment you submit the form and which you may withdraw at any time (section 9). Anonymous calculator and water-quality data is processed for the legitimate purpose of operating and improving the service and producing aggregate, non-identifying analytics.
4. Why we collect it
- Estimates and water-quality checks: to produce your result, operate and improve the calculators, and generate aggregate analytics about adoption. This is not used to identify you.
- Leads: to connect you with one or more certified installer partners, and (only if you select one) a financing partner, for the purpose of arranging a site survey or surfacing a loan offer.
- Subsidy pre-check: to assess your readiness and, if you ask, follow up with your eligibility result.
5. How long we keep it
Estimates and water-quality checks are retained for 24 months from creation. Lead records and subsidy pre-check records are retained for 12 months from creation, or until you ask us to delete them, whichever is earlier. After the retention period, records are deleted or irreversibly anonymised.
6. Who we share it with
Partners. Lead data is shared with installer partners and, where you have selected one, financing partners (banks or NBFCs offering rooftop-solar loans, or general home-improvement loans applicable to rainwater harvesting) only with your explicit consent at the moment of submission, and only to arrange a site survey or surface a loan offer. This applies across all three verticals, and lead routing always respects your choice of a specific installer or financer.
Processors. We use the following service providers to run the product, each bound to process data only on our instructions: Supabase (database hosting), Vercel (application hosting), Google (Maps and Solar APIs for address look-up), Resend (transactional email), Plausible (cookieless analytics), and Sentry (error monitoring).
We do not sell your personal data, and we do not share it for third-party advertising.
7. Cookies and analytics
Plausible analytics is cookieless and collects no personally identifying information. Sentry session replay sets cookies and is enabled only if you accept on the cookie banner; you can reject it and the rest of the site works normally. We use a single local preference to remember your cookie choice.
8. Your rights as a data principal
Under the DPDP Act you have the right to:
- access a summary of the personal data we hold about you;
- have it corrected, completed, or updated;
- have it erased;
- nominate another person to exercise these rights on your behalf in the event of your death or incapacity;
- a readily available means of grievance redressal; and
- withdraw any consent you previously gave.
To exercise any of these, email us at contact@chainflux.com or contact our grievance officer (section 11). We respond within 30 days. We may ask you to verify your identity before acting on a request.
9. Withdrawing consent
You can withdraw consent for lead-sharing or the subsidy pre-check at any time by emailing us. Withdrawing consent is as easy as giving it. Once you withdraw, we stop sharing your data with partners; this does not affect sharing that already happened lawfully before withdrawal, and a partner you were already connected to may retain your details under its own privacy policy.
10. Children's data
RainbowHome is intended for homeowners aged 18 and over. We do not knowingly collect personal data from children. As required by the DPDP Act, we do not process the personal data of a child without verifiable parental consent, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has provided us data, contact us and we will delete it.
11. Security and data breaches
We apply reasonable technical and organisational safeguards, including row-level access controls on our database, encryption in transit, hashing of abuse-prevention signals, and least-privilege access for staff and processors. No system is perfectly secure. In the event of a personal-data breach, we will notify the Data Protection Board of India and affected data principals as required by law.
12. Grievance officer
For any privacy concern or to exercise your rights, contact our grievance officer:
Ganesh Baliga
Email: ganesh.baliga@vgacas.in
Response SLA: 30 days.
If you are not satisfied with our response, you may escalate to the Data Protection Board of India.
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Where changes are material, we will take reasonable steps to bring them to your attention.