Privacy Policy

Effective date: July 14, 2026 · Last updated: September 2, 2026

Heatsink · iOS, Android & web HeatReach · iOS, Android & web MAG Miles · iOS & Android Canada (PIPEDA)

This policy applies to the Heatsink apps and website (com.heatsink.app, heatsink.app and use.heatsink.app), the HeatReach apps and website (ca.magsolar.heatreach and heatreach.heatsink.app), and the MAG Miles mobile app (com.maggroup.magmiles). Heatsink is our customer relationship management (CRM) and project-management software-as-a-service (SaaS), used by MAG Solar personnel and by authorized users of the organizations that subscribe to it. HeatReach is our door-to-door sales application for canvassing, leads, roof design, proposals and agreements, and it shares accounts with Heatsink. MAG Miles is a mileage-tracking companion to Heatsink, used by employees of subscribing organizations who drive personal vehicles for work, and it connects to the Heatsink platform. Together the Heatsink, HeatReach and MAG Miles apps and websites are the “Apps.”

Request account & data deletion

You can request deletion of your Heatsink, HeatReach or MAG Miles account and the personal data associated with it at any time. These apps are operated by MAG Solar Inc. Because HeatReach and Heatsink share one account, deleting the account removes your sign-in across both.

How to request deletion

Email us at info@magsolar.ca with the subject “Account deletion request” and the name or email address on your account. To protect your account, we’ll verify your identity before processing. We’ll confirm and complete the deletion within 30 days of verifying your request.

What we delete

Your account and login credentials, profile, and the content you created in the Apps — including projects, work orders, tickets, workflow documentation and photos, mileage trips, and odometer photos — along with associated personal information such as your name and email address.

What we may keep, and for how long

We may retain certain records where we’re required to by law — for example, tax, accounting, and financial records (including invoice and payment amounts) — for the legally required retention period (generally up to 6–7 years). We may also keep limited anonymized or aggregated data that no longer identifies you, and short-term server logs for security and abuse prevention. Once a retention period ends, we securely delete that data too.

Delete specific data without deleting your account

You can request removal of specific data (for example, a photo, a trip, or a project record) without deleting your whole account — just tell us what to remove in your email to info@magsolar.ca.

Cancel a request

Change your mind during the 30-day window? Email info@magsolar.ca and we’ll cancel the deletion if it hasn’t been completed.

1. About this policy

This Privacy Policy explains how MAG Solar Inc. (“MAG Solar,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use our mobile applications Heatsink and MAG Miles (together, the “Apps”). Heatsink provides access to our customer relationship management (CRM) and project-management platform. MAG Miles records and manages mileage for reimbursement.

We are committed to complying with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. By using the Apps, you consent to the practices described in this policy.

Heatsink is provided as software-as-a-service to subscribing organizations, and MAG Miles is a companion to Heatsink. If you access the Apps through your employer or another subscribing organization, your use is also governed by the agreement between that organization and MAG Solar, and your organization’s own policies may apply to information you enter in the Apps.

2. Who we are & how to contact us

MAG Solar Inc. is the organization responsible for your personal information.

Legal name: MAG Solar Inc.
Mailing address: 101-7261 River Place, Mission, BC V4S 0A2, Canada
Privacy contact: info@magsolar.ca
Telephone: +1 604-723-1222

To ask a privacy question, request access to or correction of your information, or make a complaint, email info@magsolar.ca. See Section 11 for your rights.

3. Personal information we collect

We collect only the personal information reasonably necessary for the purposes in Section 4.

3.1 Information you provide

Account & profile: name, email address, password (stored only as a cryptographic hash), role or position, division/team assignments, and other details needed to administer your access.
Content you create or submit: project, work-order, ticket, and customer data; workflow documentation including photos and notes; in HeatReach, lead and door canvassing records, knock history, roof designs, proposals and signed agreements, property photos and profile photos; on our websites, the information you submit through the early-access request form (name, email, desired username, organization and message); and for MAG Miles, trip and mileage entries (purpose, destination, divisions, and odometer photos).
Communications: messages, comments, and support requests you send through or about the Apps.

3.2 Information collected automatically

Location: Heatsink and HeatReach use your device location for maps and location-aware features (in HeatReach, to show your position while canvassing and to record where knocks happened). MAG Miles uses your location, including in the background while a trip is active, to record your driving route for mileage logging (with your permission; see Section 7).
Camera & photos: used to capture workflow and odometer photos when you choose to.
Device & app data: device model, operating system and version, app version, language, time zone, unique device identifiers, and push-notification tokens.
Usage & logs: diagnostic and error logs, records of actions you take within the Apps, and app performance metrics (screen names, load durations, device model and app version) collected through Expo’s EAS Observe service; identifiers such as lead and project ids are filtered out of those metrics before they leave the device. Used for security, troubleshooting, and service improvement.

3.3 Financial information

The Apps may display payment-related amounts (for example, deposit and final-invoice amounts) associated with projects and accounts. The Apps do not process, transmit, or store full payment-card numbers or banking credentials. Payment processing is handled by our external processors Clover and Stripe, which are governed by their own privacy policies.

4. How we use your information

to provide, operate, and maintain the Apps and our CRM, project, and mileage services;
to authenticate you and manage your account, access, and permissions;
to enable the features you use (workflows, documentation, maps, mileage recording, push notifications);
to communicate with you about your account, your work, and the Apps;
to provide support and troubleshoot problems;
to secure, monitor, and improve the Apps and our services; and
to meet our legal, accounting, and tax obligations.

We rely on your consent and on legitimate business purposes, as permitted under PIPEDA. We will seek additional consent before using your information for purposes not identified here.

We do not sell your personal information. We share it only as described below.

Service providers and processors (under contract and only to provide services on our behalf):

cloud hosting and infrastructure providers (see Section 6 — hosting located in the United States);
Expo / EAS, used to deliver over-the-air app updates and push notifications;
Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM), used to deliver push notifications to your device;
Google Maps (used in Heatsink for maps), Mapbox (used in HeatReach and MAG Miles for maps), and Google’s solar/aerial imagery services (used in HeatReach to derive roof measurements);
SendGrid, used to send transactional email such as early-access responses and notifications;
external payment processors Clover and Stripe (see Section 3.3).

We may also disclose information:

to the subscribing organization whose account you use (including our affiliated companies such as MAG Roofing, MAGnificent Lighting, and MAG Security), as necessary to administer the account and provide the services;
when required by law, court order, or lawful government request;
in connection with a corporate transaction such as a merger, acquisition, or sale of assets; and
to protect the rights, safety, or property of MAG Solar, our users, or others.

6. Where your information is stored

Your account data and content are stored on servers hosted in the United States by our cloud infrastructure providers. Because your personal information may be processed in the United States (or other countries where our providers operate), it may be subject to the laws of those jurisdictions, including lawful access by governments. We use providers that maintain appropriate safeguards and we limit what is shared to what is necessary to provide the services.

7. Device permissions, background location & your choices

The Apps request certain device permissions. You can grant or revoke any of these in your device settings at any time; revoking a permission may limit the related feature.

Location (MAG Miles): MAG Miles records your driving route to log mileage. With your permission it may collect location in the background while a trip is active.
Camera & photos: used to capture workflow and odometer photos.
Notifications: used to send relevant push notifications.
Calendar (Heatsink, HeatReach): used to add scheduled work and booked appointments to your calendar.
Contacts (HeatReach, optional): with your permission, saves leads to your device contacts so a call back shows a name. Enabled only if you turn it on.
On-device storage: a small amount of data is stored locally (for example, an authentication token and an offline cache) to support offline use.

8. Third-party links & services

The Apps contain links and integrations to third-party services (for example, maps and external payment processors). We are not responsible for the privacy practices of those services; please review their policies.

9. Data retention

We retain personal information only as long as necessary for the purposes in Section 4, and generally for as long as you have an account and for the duration of your (or your organization’s) subscription, employment, or engagement with us. After that, we retain and securely destroy information in accordance with our records-retention schedule and as required by applicable legal, tax, and accounting obligations.

10. Data security

We use reasonable administrative, technical, and physical safeguards — such as encryption in transit, access controls, and authentication — to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your privacy rights

Under PIPEDA and applicable provincial law, you generally have the right to:

know what personal information we hold about you and to access it;
correct inaccurate or incomplete personal information;
withdraw consent to certain collection, use, or disclosure (subject to legal and contractual restrictions); and
challenge our compliance with privacy law.

To exercise these rights, email info@magsolar.ca, and we will respond in accordance with applicable law. If you are not satisfied with how we handle a privacy concern, you may complain to the Office of the Privacy Commissioner of Canada.

12. Cookies & tracking technologies

The Apps do not use advertising identifiers for cross-app advertising and do not include third-party advertising or analytics SDKs. This website (the policy page) does not set advertising or tracking cookies.

13. Children’s privacy

The Apps are business tools and are not directed at individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact info@magsolar.ca so we can delete it.

14. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above, and we will communicate material changes through the Apps or by other reasonable means.

15. Contact us

Questions about this policy or your personal information? Contact us:

MAG Solar Inc. · 101-7261 River Place, Mission, BC V4S 0A2, Canada
info@magsolar.ca · +1 604-723-1222