Helios Inverter Sync — Privacy Policy

Last updated: 26 April 2026

Helios Inverter Sync ("the extension") is a browser extension that automatically fetches solar energy production data from your inverter manufacturer's web portal and uploads it to your Helios PV Dashboard account.

This policy explains exactly what data the extension touches, where it goes, and what it never does.



1. Data stored on your device

Everything listed here lives in your browser's local extension storage (chrome.storage.local / Firefox storage). It never leaves your device except where explicitly stated in Section 2.

| Item | What it is | Why it's needed |
|---|---|---|
| System configuration | Your Helios system UUID(s), inverter plant ID(s), provider name (e.g. aurora), optional system label, and backfill day count | Identifies which systems to sync |
| Authentication session | A short-lived JWT issued by Helios when you sign in | Authenticates uploads to your Helios account |
| CSV URL template | A cached URL pattern used to fetch CSVs directly on subsequent syncs | Avoids repeated UI navigation; speeds up daily sync |
| Sync metadata | Timestamp of last successful sync, last synced date, last error message | Displayed in the popup; used to decide whether to auto-sync on browser start |

No inverter portal credentials are ever stored. The extension uses your existing browser session (cookies already set when you are logged in to the portal) to access data. Your portal username and password are never read, captured, or stored by the extension.



2. Data sent to Helios servers

The extension sends the following to the Helios backend (pv-dashboard-backend.onrender.com or your configured API host):

| Item | When | Purpose |
|---|---|---|
| Solar energy production CSV | During each sync | Uploaded to your Helios account so the soiling model can calibrate to your real generation data |
| Helios authentication token | With every request | Verifies you own the system being uploaded to |
| System UUID | In the upload URL path | Identifies which system the data belongs to |
| Subscription tier check | Before sync starts | Confirms your account is on the paid tier (sync is a paid feature) |

No data is sent to any third party. The only destination is the Helios backend and the Supabase database that backs it (both operated by the Helios service).



3. Data accessed but not stored

The extension temporarily interacts with your inverter portal in the following ways:

• Navigates a background browser tab to the portal's CSV export page for the dates being synced.
• Reads the contents of the downloaded CSV (solar energy production values).
• Intercepts and cancels the file download so the CSV is never written to your Downloads folder.

Beyond the CSV content itself, the extension does not read, store, or transmit any other information from the portal (account settings, personal details, other system data, etc.).



4. Browser permissions explained

The extension requests the following permissions:

| Permission | Why it's needed |
|---|---|
| storage | Store local configuration and auth session |
| tabs | Open a background tab to the inverter portal to trigger the CSV export |
| scripting | Inject a content script into the portal tab to click the export button and read the CSV |
| alarms | Schedule the daily automatic sync |
| downloads | Intercept and cancel CSV downloads so the file is never saved to disk |
| notifications | Show a desktop notification when auto-sync completes or fails |
| Host access to inverter portal domains | Required to navigate to the portal and read the CSV response |
| Host access to Supabase and Helios API | Required to authenticate and upload data |



5. What the extension never does

• Stores your inverter portal username or password
• Reads anything from inverter portal pages beyond the daily energy CSV
• Shares any data with advertisers, analytics platforms, or any third party
• Tracks your browsing history
• Reads data from any website other than the configured inverter portal and the Helios API

6. Future inverter providers

Currently the extension supports Aurora Vision. When additional inverter manufacturers are added, they will follow the same model:

• Only the daily energy production CSV export is accessed
• No credentials are stored
• Data is uploaded exclusively to your Helios account
• All permissions needed for a new provider will be listed in the updated version of this policy

7. Data retention and deletion

Data uploaded to Helios is governed by the [Helios Terms of Service]. You can delete your Helios account at any time, which removes all uploaded data from Helios servers.

To remove all local extension data, click Disconnect in the extension popup, or uninstall the extension. Both actions wipe all data from chrome.storage.local.



8. Contact

For questions about this policy, contact: papaiakovous@gmail.com