Privacy Policy

Effective date: July 14, 2026 · Last updated: July 14, 2026

Heatsink · iOS & Android MAG Miles · iOS & Android Canada (PIPEDA)

This policy applies to the Heatsink mobile app (com.heatsink.app) and the MAG Miles mobile app (com.maggroup.magmiles), each available for Apple iOS and Google Android. Heatsink is our customer relationship management (CRM) and project-management software-as-a-service (SaaS), used by MAG Solar personnel and by authorized users of the organizations that subscribe to it. MAG Miles is a mileage-tracking companion to Heatsink, used by employees of subscribing organizations who drive personal vehicles for work, and it connects to the Heatsink platform.

1. About this policy

This Privacy Policy explains how MAG Solar Inc. (“MAG Solar,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use our mobile applications Heatsink and MAG Miles (together, the “Apps”). Heatsink provides access to our customer relationship management (CRM) and project-management platform. MAG Miles records and manages mileage for reimbursement.

We are committed to complying with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. By using the Apps, you consent to the practices described in this policy.

Heatsink is provided as software-as-a-service to subscribing organizations, and MAG Miles is a companion to Heatsink. If you access the Apps through your employer or another subscribing organization, your use is also governed by the agreement between that organization and MAG Solar, and your organization’s own policies may apply to information you enter in the Apps.

2. Who we are & how to contact us

MAG Solar Inc. is the organization responsible for your personal information.

Legal name: MAG Solar Inc.
Mailing address: 101-7261 River Place, Mission, BC V4S 0A2, Canada
Privacy contact: info@magsolar.ca
Telephone: +1 604-723-1222

To ask a privacy question, request access to or correction of your information, or make a complaint, email info@magsolar.ca. See Section 11 for your rights.

3. Personal information we collect

We collect only the personal information reasonably necessary for the purposes in Section 4.

3.1 Information you provide

Account & profile: name, email address, password (stored only as a cryptographic hash), role or position, division/team assignments, and other details needed to administer your access.
Content you create or submit: project, work-order, ticket, and customer data; workflow documentation including photos and notes; and for MAG Miles, trip and mileage entries (purpose, destination, divisions, and odometer photos).
Communications: messages, comments, and support requests you send through or about the Apps.

3.2 Information collected automatically

Location: Heatsink uses your device location for maps and location-aware features. MAG Miles uses your location, including in the background while a trip is active, to record your driving route for mileage logging (with your permission; see Section 7).
Camera & photos: used to capture workflow and odometer photos when you choose to.
Device & app data: device model, operating system and version, app version, language, time zone, unique device identifiers, and push-notification tokens.
Usage & logs: diagnostic and error logs, and records of actions you take within the Apps, used for security, troubleshooting, and service improvement.

3.3 Financial information

The Apps may display payment-related amounts (for example, deposit and final-invoice amounts) associated with projects and accounts. The Apps do not process, transmit, or store full payment-card numbers or banking credentials. Payment processing is handled by our external processors Clover and Stripe, which are governed by their own privacy policies.

4. How we use your information

to provide, operate, and maintain the Apps and our CRM, project, and mileage services;
to authenticate you and manage your account, access, and permissions;
to enable the features you use (workflows, documentation, maps, mileage recording, push notifications);
to communicate with you about your account, your work, and the Apps;
to provide support and troubleshoot problems;
to secure, monitor, and improve the Apps and our services; and
to meet our legal, accounting, and tax obligations.

We rely on your consent and on legitimate business purposes, as permitted under PIPEDA. We will seek additional consent before using your information for purposes not identified here.

We do not sell your personal information. We share it only as described below.

Service providers and processors (under contract and only to provide services on our behalf):

cloud hosting and infrastructure providers (see Section 6 — hosting located in the United States);
Expo / EAS, used to deliver over-the-air app updates and push notifications;
Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM), used to deliver push notifications to your device;
Google Maps (used in Heatsink for maps) and Mapbox (used in MAG Miles for maps);
external payment processors Clover and Stripe (see Section 3.3).

We may also disclose information:

to the subscribing organization whose account you use (including our affiliated companies such as MAG Roofing, MAGnificent Lighting, and MAG Security), as necessary to administer the account and provide the services;
when required by law, court order, or lawful government request;
in connection with a corporate transaction such as a merger, acquisition, or sale of assets; and
to protect the rights, safety, or property of MAG Solar, our users, or others.

6. Where your information is stored

Your account data and content are stored on servers hosted in the United States by our cloud infrastructure providers. Because your personal information may be processed in the United States (or other countries where our providers operate), it may be subject to the laws of those jurisdictions, including lawful access by governments. We use providers that maintain appropriate safeguards and we limit what is shared to what is necessary to provide the services.

7. Device permissions, background location & your choices

The Apps request certain device permissions. You can grant or revoke any of these in your device settings at any time; revoking a permission may limit the related feature.

Location (MAG Miles): MAG Miles records your driving route to log mileage. With your permission it may collect location in the background while a trip is active.
Camera & photos: used to capture workflow and odometer photos.
Notifications: used to send relevant push notifications.
Calendar (Heatsink): used for scheduling integrations.
On-device storage: a small amount of data is stored locally (for example, an authentication token and an offline cache) to support offline use.

8. Third-party links & services

The Apps contain links and integrations to third-party services (for example, maps and external payment processors). We are not responsible for the privacy practices of those services; please review their policies.

9. Data retention

We retain personal information only as long as necessary for the purposes in Section 4, and generally for as long as you have an account and for the duration of your (or your organization’s) subscription, employment, or engagement with us. After that, we retain and securely destroy information in accordance with our records-retention schedule and as required by applicable legal, tax, and accounting obligations.

10. Data security

We use reasonable administrative, technical, and physical safeguards — such as encryption in transit, access controls, and authentication — to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your privacy rights

Under PIPEDA and applicable provincial law, you generally have the right to:

know what personal information we hold about you and to access it;
correct inaccurate or incomplete personal information;
withdraw consent to certain collection, use, or disclosure (subject to legal and contractual restrictions); and
challenge our compliance with privacy law.

To exercise these rights, email info@magsolar.ca, and we will respond in accordance with applicable law. If you are not satisfied with how we handle a privacy concern, you may complain to the Office of the Privacy Commissioner of Canada.

12. Cookies & tracking technologies

The Apps do not use advertising identifiers for cross-app advertising and do not include third-party advertising or analytics SDKs. This website (the policy page) does not set advertising or tracking cookies.

13. Children’s privacy

The Apps are business tools and are not directed at individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact info@magsolar.ca so we can delete it.

14. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above, and we will communicate material changes through the Apps or by other reasonable means.

15. Contact us

Questions about this policy or your personal information? Contact us:

MAG Solar Inc. · 101-7261 River Place, Mission, BC V4S 0A2, Canada
info@magsolar.ca · +1 604-723-1222