Updated on: May 25, 2026
Effective from: May 25, 2026
"iShareCloud" is an intelligent energy management platform by Sunshare (Sunshare Tech DE GmbH) (hereinafter referred to as "Sunshare," "we" or "us" ). We attach great importance to the protection of personal information security and privacy involved in data services. Therefore, we have formulated this privacy policy to clarify how we collect and use your personal information when you use iShareCloud services via the website at https://web.sunsharetek.com (hereinafter referred to as the "Website") or the iShareCloud app (hereinafter referred to as the "App"). The Website and the App are collectively referred to as "iShareCloud".
This privacy policy will also inform you as to how to exercise your rights as a data owner (including the right to oppose our processing of certain data). For information about your rights and how to exercise these rights, please refer to the section "Your rights and choices" below.
We kindly remind you to carefully read this privacy policy. When you use iShareCloud-related services, you may need to authorize iShareCloud to process your personal data within the scope of this privacy policy. If you have any questions, please contact us using the methods specified in the section "Contact us" below.
This privacy policy provides you with the following information:
1. How we collect and use your personal information
2. How we use cookies and other similar technologies
3. How we share, transfer, and disclose your personal information
4. How we protect your personal information
5. Your rights and choices
6. How your personal data is transferred globally
7. Commitment of the entire iShareCloud team to protect your privacy
8. Retention periods
9. How we process children's personal information
10. User Experience Improvement Program
11. How we update this policy
12. Contact Us
1. How we collect and use your personal information
1.1 On the basis of contractual obligations：
We process the following data because it is necessary for the performance of our contract with you, i.e. to create and maintain your account, to provide the iShareCloud services and to ensure the essential security of those services:
- Account registration
We collect your username, country/region, language preferences, phone number, email address, company name and the code of your upstream distributor/installer. Fields marked with an asterisk are mandatory; without this information we cannot create your account.
- Login and account security
When you log in, we process the IP address of your device or router, time zone, date and time (including the offset from GMT), browser type/version/language, device operating system, device model, MAC address of the local network interface, device serial number, Android ID, OAID, IMSI, network type, the page you are viewing, access status, HTTP status code and the name and size of the requested file. This processing is necessary to protect your account and the operational security of iShareCloud.
- Virtual ID for essential service messages
When you use the App to log in, we process a pseudonymous virtual ID that is automatically generated by the App installation. This ID is not linked to your phone number or hardware identifiers. We use it exclusively to send you important in-App messages concerning your plant (e.g. plant offline, malfunctions, parameter settings completed).
- Plant management and monitoring
When you view and analyse your plant, we process the plant name, plant type, plant status, installed capacity, real-time power, daily yield, equipment name, equipment status, the nature of any fault, the time a fault occurred and the plant location. This enables you to manage your plant through iShareCloud.
- Password reset
When you use the “Forgot password” function, we process your registered phone number or email address to verify your identity and secure your account.
- Storage services (essential write/read access)
To enable log downloads, device firmware upgrades, feedback submissions and avatar changes, we require access to create and delete files on your device’s SD card. This functionality is essential to those features and cannot be disabled without making the corresponding services unavailable.
1.2 Based on your consent：
For the following processing activities and device permissions we rely on your explicit consent, which you may withdraw at any time in your device settings. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal, but you may no longer be able to use the related optional features.
- Plant creation with precise location
When you create a plant, we may collect your device’s location (as well as your username, phone number and email address) in order to provide precise location services, such as plant positioning on the map. The location data will not be used for any other purpose.
- Plant sharing
When you choose to share a plant, you provide the email address of the recipient. We process this email address solely to facilitate the sharing you have initiated. You must ensure you are legally permitted to share that address with us.
- Uploading images and feedback (camera and photo library)
When you upload an image or send feedback, the App will request permission to access your camera and/or photo library. These permissions are used exclusively to enable the image upload process.
- Adding devices and on-site debugging (Bluetooth, WLAN, SSID)
When you add a device to your plant or perform local debugging, the App may request access to Bluetooth and WLAN (to read the SSID). These permissions are used only to add the device or perform on-site debugging.
- Background operation and push notifications
If you have consented to this privacy policy and enabled the relevant permissions, the App may, when necessary, activate auto-launch or similar background behaviour so that you receive important device status updates and notifications (such as plant offline, malfunctions or parameter settings completed) via the Message Center. You can enable or disable notification permissions at any time in the device settings.
- Map navigation app list
When you use the Maps function, the App accesses a list of the navigation apps installed on your device (e.g. Amap, Tencent Maps, Apple Maps, Baidu Maps). This is done solely to help you select a suitable navigation app; no personal data is extracted from those apps.
- Optional device permissions you can control
The following permissions are only activated after you have given your consent through the system pop-up. You can revoke each permission at any time in your device settings.
| Permission | Purpose of the permission | Can it be disabled? |
| Location | Create plant, plant navigation | Yes |
| Gallery | Upload images during feedback or plant creation | Yes |
| Camera | Take photos and scan device QR codes during feedback submission | Yes |
| Notification | Push notifications and message alerts | Yes |
| Wireless network | Network configuration for communication modules | Yes |
| Bluetooth | Local-end device debugging | Yes |
| Clipboard | Copy and paste textual content (processing occurs only on your device) | Yes |
1.3 On the basis of Sunshare’s legitimate interests：
We process certain data for the purposes of our legitimate interests, having assessed that these interests are not overridden by your data protection rights. The following processing falls under this legal basis:
- Device connection data (micro-inverter, smart meter, micro-storage)
When you connect a micro-inverter, smart meter or micro-storage system to iShareCloud, we collect electricity generated by the inverter, real-time power of the inverter, battery charging/discharging power of the energy storage inverter, forward/reverse active power of the electricity meter and forward/reverse active kilowatt hours of the electricity meter. This data is processed to allow you to monitor the operational status of your equipmentß.
1.4 Additionally, we may process your personal data as necessary to comply with legal obligations
This includes, for example, tax and accounting requirements, assisting you with exercising your data subject rights, and establishing or defending our legal rights.
2. How we use cookies and other similar technologies
To ensure the normal and efficient operation of the Website, when you visit iShareCloud, we may store small data files known as cookies on your computer or mobile device. A cookie is a plain text file stored by a web server on a computer or mobile device. Cookies are widely used by website owners to make websites operate effectively or more efficiently, and to report information.
The purpose of enabling cookies in this service is the same as that for which most websites or Internet service providers enable cookies, namely to improve user experience. With the help of cookies, websites are able to remember a user's single visit (using session cookies) or multiple visits (using permanent cookies). Using cookies, websites can save preferred settings such as language, font size, and other browsing preferences on a computer or mobile device. This means that users do not need to reconfigure their preferences every time they visit a website. Websites with cookies disabled are unable to identify you every time you open the web page. This service will not use cookies for any purposes other than those specified in this policy. You can manage or delete cookies according to your preferences. For details, please refer to the Cookies Policy. You can clear all cookies saved on your computer, and most web browsers allow you to block cookies. However, if you do so, you will need to go through the user settings every time you visit our website.
3. How we share, transfer, and disclose your personal information
3.1 Sharing
We will not share your personal information with third parties, with the following exceptions:
(1) We may share your personal information with third parties after obtaining your explicit consent.
(2) We may share your personal information externally pursuant to laws and regulations, or mandatory requirements of competent government authorities.
(3) Please carefully read the privacy policies of our partners regarding the actual usage of shared information. Currently, partners of the App (or service) sharing relevant information include:
aliyun_log_dart_sdk
(4) In order to provide you with certain functions/services, such as push notifications, we need to provide your personal information to third parties. To ensure your data security and privacy, we have clarified our partners’ responsibilities, obligations, and requirements concerning the protection of your data. Software development kits (SDKs) or other similar applications developed by authorized partners are embedded in our applications. We use these SDKs through operating system interface calls. Please note that for details as to how the partners actually use such shared information, please read their privacy policies carefully, and refer to the SDK names, purposes, and types of personal information involved in the third-party SDKs. Currently, the third-party SDKs integrated into this App (or service) are as follows:
aliyun_log_dart_sdk
3.2 Transfer
We do not transfer your personal information to any company, organization, or individual, unless:
(1) An explicit consent on transfer of data has been obtained: we may transfer your personal information to others after obtaining explicit permission from you;
(2) Transfer of personal information is conducted in compliance with requirements of laws, regulations, and legal procedures, or mandatory government requirements or judicial rulings;
(3) Merger, acquisition, or liquidation proceedings entail the transfer of personal information, in which case we will require that this privacy policy continues to be binding on the company or organization to which your end user personal information is transferred; otherwise we will require that the company or organization seeks your authorization and permission again.
3.3 Disclosure
We will only publicly disclose your personal information under the following circumstances:
(1) We have obtained explicit consent from you or your end user(s);
(2) Disclosure is required by the law: we may publicly disclose the personal information of you or your end user(s) pursuant to the laws, legal proceedings, litigation, or mandatory requirements of competent government authorities;
(3) In the event of an emergency, disclosure of personal information is justified based on reasonable judgment to protect the material legitimate rights and interests of us, our customers, end users, or other persons.
4. How we protect your personal information
4.1 Protection measures we adopt: We adopt security protection measures that conform to industry standards to protect the personal information you supply from unauthorized access, public disclosure, usage, modification, damage, or loss. We will take all reasonable and feasible measures to protect your personal information. For example:
(1) We conduct thorough inspections of our systems and applications on a regular basis, and promptly patch any vulnerabilities to prevent hackers from exploiting them and causing data breaches;
(2) We closely regulate core personal data contained in the systems, and perform regular auditing of sensitive operations. All risky data operations are promptly detected and treated;
(3) We adopt i) encryption technology to ensure the confidentiality of data; ii) protective mechanisms to prevent malicious attacks; and iii) access control mechanisms to ensure that only authorized personnel can access personal data.
4.2 Our data security capabilities: Sunshare highly values the security of your personal data and has taken appropriate technical and organizational measures to protect the personal information we collect. iShareCloud will use the HTTPS protocol to protect your personal data during the transmission process. When we store your personal data, we use computer systems in which access permissions are effectively limited. These systems are deployed within physically protected facilities with security measures in place.
4.3 Countermeasures we adopt: In the unfortunate event that a personal information security incident occurs, we will notify you of the following information in a timely manner in accordance with the requirements of laws and regulations: the basic situation and possible impacts of the security incident, the countermeasures we have taken or will take, suggestions as to how you could prevent and reduce risks by yourself, and remedial measures for you. We will promptly notify you of information related to the incident by email, letter, or push notification. Where it is impossible to notify every subject of personal information individually, we will announce the information using a reasonable and effective method. We will also proactively report to authorities at higher levels on the handling of the personal information security incident, in accordance with the requirements of regulatory bodies.
5. Your rights and choices
In accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), you are entitled to the following rights:
5.1 Access your personal information: After registering an account and creating a plant on iShareCloud, you can access your personal information by going to "My - Account Info.". You can also contact us at any time to request an explanation and verification of various data information. Such information shall include but not be limited to basic information supplied by you upon account registration and creation of a plant, e.g. your avatar, username, nickname, phone number, email address, organizational information, information of your parent organization, and any other information displayed on our platform.
5.2 Correct your personal information: In the event that you find any possible omissions or errors in your personal information, you can log in to iShareCloud and modify such information or supply supplementary information by going to "My - Account Info." If you are unable to make modifications or supply supplementary information yourself, you can contact us at any time to modify the data or add supplementary information. We will make the modification or supplementation immediately once the missing or incorrect information is verified.
5.3 Delete your personal information: You may request us to delete personal information under the following circumstances:
(1) We processed personal information in violation of laws or regulations;
(2) We collected or used your personal information without obtaining your consent;
(3) We processed personal information in violation of the agreement between us and you;
(4) We no longer provide products or services for you.
Where we decide to respond to your deletion request, we will simultaneously notify the entities that have obtained your personal information from us, requiring that they delete the information promptly, unless otherwise prescribed by laws or regulations, or in the event that these entities have obtained independent authorization from you.
5.4 Change in the scope of your authorization and consent: When providing services, we need you to grant us certain device permissions, such as for notifications, photos, camera, and Bluetooth. You may refuse to allow us to collect the corresponding personal information by deactivating some or all of these permissions on your device at any time. The mode of permission display and deactivation methods vary by device and system. Please refer to the instructions and guidelines provided by the device and system developers for details.
5.5 Account cancellation by personal information owner: Subject to applicable laws and regulations, you can cancel a previously registered account at any time by going to "My - Account and Security - Cancel Account." Please exercise caution when you decide to cancel your account. Upon account cancellation, we will stop providing products and services, delete your personal information, and information associated with the account will be permanently unrecoverable.
5.6 You also have the right to choose to restrict our processing of your personal information:
(1) If you have objections with regard to the accuracy of your personal data information displayed on iShareCloud, you can request that we verify the accuracy of your personal information within a specified time limit.
(2) If you believe that we have processed data illegally, you can object to our data processing and request to limit the use of the personal data information. However, please provide us with reasons for your objections to data processing so that we can assess whether there is adequate legal basis for us to continue processing such data.
(3) If we no longer need certain types of your personal information for certain processing purposes, but you believe that such personal information needs to be retained to establish, exercise, and defend your rights, you can request that the information be retained by us.
6. How your personal data is transferred globally
Sunshare operates on a global scale, meaning that the personal information we collect pursuant to this policy may be transferred, stored, and processed across various countries or regions. Your personal data is stored in the European Union / European Economic Area.
Such cross-border data transfers are strictly limited to necessary business purposes, primarily for fulfilling contractual obligations with you and providing equipment operation, maintenance and technical support services. Sunshare complies with all applicable legal requirements to protect your personal data when it is transferred outside the European Economic Area.
For intra-group data sharing, we have entered into Standard Contractual Clauses adopted by the European Commission (official template: https://commission.europa.eu/publications/publications-standard-contractual-clauses-sccs_en), which ensure an equivalent level of data protection for your personal data even where EEA data protection laws do not apply.
We will retain your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy.
7. Commitment of the entire iShareCloud team to protect your privacy
To ensure the security of your personal data, we have communicated privacy and security guidelines to the entire iShareCloud team, and have rigorously implemented privacy protection measures within the team.
8. Retention periods
Sunshare will retain data related to your access to iShareCloud and your account data until you delete your account data or request deletion of your personal data, except where we have legitimate grounds for extending the retention period. During the period when any relationship is established between you and us, Sunshare will retain your information for as long as possible, and after the relationship ends, to the optimal extent allowed, we will retain your information for as long as possible for the purposes stated in the notification. We will delete your IP address after the session ends. Legislation may require Sunshare to retain certain information for a certain period of time (e.g. retention for six to ten years is required for tax calculation purposes). In other circumstances, Sunshare may retain data for an appropriate length of time after any relationship with you ends, in order to respond to legal proceedings or manage its business operations (for example, the standard retention period is three years starting upon completion of relevant data processing).
9. How we process children's personal information
Our products, website, and services are primarily oriented toward adults. Children should not create their own account as owners of personal information without the consent of their parents or guardian. As regards children's personal information collected with the consent of their parents, we will use or publicly disclose such information only if the use or disclosure of information is allowed by the law, explicit consent has been obtained from the children's parents or guardian, or it is required to protect the children. If we discover that we collected children's personal information without seeking the prior verifiable consent of their parents, we will delete related data within the shortest time possible.
10. User Experience Improvement Program
To continuously improve our product features and user experience, we collect interaction data concerning your use of the App upon obtaining your explicit consent, including page visit records, feature clicks, time spent on screens, and feature usage frequency.
This data is used solely to analyse overall usage patterns. It will not be linked to your device hardware identifiers, nor used for automated decision-making or profiling.
11. How we update this policy
We may revise the terms of this privacy policy from time to time, and such revisions shall constitute an integral part of the privacy policy and carry equivalent legal effect. We will not reduce the rights you are entitled to under this policy without your explicit consent. We will remind you of any updates to this privacy policy through public announcements or other appropriate means, to ensure that you are aware of the latest version of this privacy policy. Under the circumstances specified above, if you continue to use our services, you shall be deemed to have agreed to accept the revised policy and be bound by it.
12. Contact us
If you have any questions or suggestions regarding the privacy policy, you can contact us in the Feedback or Customer Service section after logging in to the iShareCloud app.
You may also notify us by the following means:
Lurgiallee 10-12, 60439 Frankfurt am Main, Germany
Email address: support@sunsharetek.com
Customer service telephone number: +49 800 6270986