1. Data Controller
Héctor Eduardo Sánchez Ibarra, an individual who operates the Zenit Master platform ("Zenit"), with address at América 606, Col. Bravo, C.P. 26030, Piedras Negras, Coahuila, Mexico, is the controller of the personal data collected through zenitmaster.com and the Zenit Master platform, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).
2. Information We Collect
We collect the following information when you use Zenit:
Information you provide:
- Full name, email address and password when you create an account.
- Company name and organization details.
- Client, project, quotation and installation data you enter into the platform.
- Billing and payment information processed through Stripe (card, OXXO or SPEI).
- Tax data for CFDI 4.0: RFC (tax ID), legal name, tax regime, CFDI use and postal code. We collect them only to issue your monthly invoice as required by the SAT (Mexico's tax authority) and use them for no other purpose.
- Referral code: if you sign up with another user's code, we store that attribution to process the corresponding reward (one free month for the referrer).
- Documents and images you upload to the platform (datasheets, installation photos, CFE documents).
Information collected automatically:
- Usage and navigation data within the platform.
- IP address, browser type and device.
- Solar plant monitoring data obtained from third-party platforms (Growatt, Hoymiles, etc.) with your authorization.
3. How We Use Your Information
- Provide, maintain and improve the Service.
- Process your payments and manage your subscription.
- Generate quotations, reports and PDF documents according to the Service's features.
- Send Service-related communications (account changes, trial expiration, updates).
- Protect the security of the Service and prevent fraud.
- Comply with legal obligations.
4. Data Sharing
We do not sell your personal information. We share data only with:
- Stripe: to process subscription payments securely (card, OXXO, SPEI) and apply referral program credits.
- Supabase: as our database and authentication infrastructure provider.
- Vercel: as the application's hosting provider.
- Sentry: for error monitoring. When the application fails, it receives technical data about the request (IP address, browser and page) to diagnose the error.
- Cal.com: to schedule optional 1:1 onboarding sessions. Only the information needed to create the appointment (name and email) is shared.
- Monitoring platforms: we exchange data with platforms such as Growatt and Hoymiles only with the credentials you provide, to show your solar plants' data.
- Authorities: when required by law or legal process.
5. Data Isolation (Multi-Tenancy)
Zenit operates under a multi-tenant model. Each organization's data is logically isolated, and no user of one organization can access another organization's data. We enforce this isolation with database-level access controls (Row Level Security).
6. Data Security
- All communications are encrypted with HTTPS/TLS.
- Passwords are stored with secure hashing (bcrypt) and never in plain text.
- Database access is protected by row-level security (RLS) policies.
- Files are stored in encrypted storage services.
- We make periodic database backups.
7. Data Retention
- We keep your data while your account is active.
- After you cancel your subscription, we keep your data for 90 days to allow reactivation.
- After 90 days, the data may be permanently deleted.
- You can request immediate deletion of your data by contacting us directly.
8. Your Rights
Under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), you have the right to:
- Access: request information about the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Cancellation: request the deletion of your personal data.
- Opposition: object to the processing of your data for specific purposes.
To exercise these rights (known in Mexico as ARCO rights), send a request to privacidad@zenitmaster.com. We will respond within 20 business days at most.
9. Cookies
We use essential cookies for the Service to work, including authentication and session preference cookies. We do not use advertising tracking cookies and do not share cookie data with third parties.
10. Minors
The Service is intended for businesses and professionals. We do not knowingly collect information from people under 18. If we discover that we have collected data from a minor, we will delete it immediately.
11. Public Calculators and ChatGPT Plugin
Zenit offers free calculators (CFE electricity tariffs, estimated bill, solar system sizing, savings and batteries) through a public MCP server (zenitmaster.com/api/public/mcp) that AI assistants such as ChatGPT, Claude or Gemini can use, including the "Zenit Solar" plugin in the ChatGPT directory. They require no account or sign-in.
- Data they receive: only the calculation parameters that you or the assistant provide (consumption in kWh, CFE tariff, state or tariff region, system price, load profile) and, if the assistant shares it, an approximate location (country and state) that is used only to choose the tariff region. They do not receive your name, email address, CFE service number, street address or coordinates, and they cannot access your CFE account.
- Use and retention: the parameters are used only to return the result of that query. They are not stored in our database and are not linked to a person or a profile.
- Technical logs: our hosting provider (Vercel) temporarily keeps logs with the IP address, date and path of each request, for at most 30 days. If an unexpected error occurs, the technical data of that request (including the IP address and the parameters sent) is sent to Sentry, our error-monitoring provider, where it is kept for at most 90 days.
- Links: results may include a link to informational pages on zenitmaster.com with parameters that identify the source tool (for example, utm_source=chatgpt), never the person.
- Your AI assistant: OpenAI, Anthropic, Google or another provider processes the conversation under its own privacy policy. Zenit does not receive the conversation history, only the parameters of each calculation.
- Your controls: you decide what to share (the calculators work with consumption figures alone) and you can disconnect the plugin from your assistant at any time. To exercise your rights over technical logs, for example to have them deleted, write to privacidad@zenitmaster.com (see section 8).
12. Changes to This Policy
We may update this policy from time to time. We will notify significant changes by email at least 15 days in advance. The date of the last update is shown at the top of this document.