Privacy Policy

This Privacy Policy explains how Sundance Power Systems, Inc. ("Sundance," "we," "our," or "us") collects, uses, and protects information when you use our internal operations platform — including the MOCHA mobile application, the Sundance Platform web application, and any related services.

MOCHA is designed for Sundance employees and contractors to manage installation, service, and customer-facing work in the field. It is not directed to the general public and is not designed for use by children.

Customer SMS / Text Messaging

If you are a Sundance customer and you opt in to text messages — by checking the SMS consent box on our website lead form or in your customer portal — Sundance Power Systems may send you service-related text messages about your project, appointments, billing, and account. Message frequency varies, and message and data rates may apply. You can opt out at any time by replying STOP, or get help by replying HELP. Full program terms are in our SMS Terms & Conditions.

We do not sell or share your mobile opt-in information, mobile number, or SMS consent with third parties or affiliates for their own marketing or promotional purposes. Mobile information is used only to deliver the messages you signed up for, and is shared only with the messaging provider that operates the SMS program on our behalf, solely to transmit those messages.

1. Information We Collect

1.1 Account information

Your name, email address, username, phone number (optional), profile photo (optional), role assignment, and team membership are stored when an administrator creates your Sundance account.

1.2 Location

When you tap status events such as "On the way," "I've arrived," or "Job complete" in the mobile app, we record the device's GPS coordinates at that moment to confirm on-time arrival and time-on-site for the work order. We do not continuously track your location in the background.

1.3 Camera and photos

With your permission, the mobile app uses the device camera to capture photos that you attach to project documentation, forms, equipment serial scans, and customer signoff records. Photos are uploaded to Sundance's servers when you complete the form or capture flow. The app also requests photo library access if you choose to attach an existing photo instead of taking a new one.

1.4 Push notification tokens

When you sign in to the mobile app, the device generates a push notification token (via Expo / Firebase Cloud Messaging on Android, Apple Push Notification Service on iOS). We store this token so we can send you job-related alerts such as new work-order assignments, schedule changes, and inbound messages.

1.5 Work and time data

We record information you enter or capture in the course of work — clock in/out times, completed checklist items, form responses, comments, shift reports, inspection results, materials installed, and equipment serial numbers. These records are kept as part of Sundance's business records.

1.6 Device and usage information

Standard server logs record the IP address, user agent, and device type of requests to our APIs for security monitoring (e.g., abuse detection, lockout-after-failed-logins). The mobile app does not include third-party analytics SDKs.

1.7 Customer information (if you are a customer)

Sundance customers using the separate customer portal may have additional data collected (proposal status, invoices, payments, communications). The mobile app does not collect customer-facing information directly — only the staff-facing app is covered by this policy.

2. How We Use Information

• Authenticate users and enforce role-based access
• Display assignments, schedules, and project details relevant to each user
• Record arrival timestamps, time entries, photos, forms, and other field outputs as part of Sundance's business records
• Send push notifications about work orders, mentions, messages, and milestones
• Generate handoff packages, invoices, reports, and other deliverables for customers
• Detect abuse, prevent unauthorized access, and improve reliability

3. Information Sharing

We do not sell user information. We share information only with the service providers required to operate the platform, and only to the extent necessary to deliver the service:

• Hostinger — hosting infrastructure (servers, databases)
• Cloudflare — DDoS protection, content delivery, TLS termination
• Microsoft (Graph / Azure) — mailbox synchronization for staff email integration
• Stripe — payment processing on customer invoices (no payment card data is stored on Sundance servers)
• Expo / Google Firebase Cloud Messaging / Apple Push Notification Service — push notification delivery to mobile devices
• Google Maps Platform / OpenStreetMap (Nominatim) — geocoding addresses (server-side; no user identifiers are sent)

We may also disclose information when required by law, valid legal process, or to protect the rights, property, or safety of Sundance, our employees, or others.

4. Data Retention

Project records, work orders, time entries, photos, and other business records are retained indefinitely as part of Sundance's records and to support warranty obligations, regulatory requirements, and customer service. Server logs are retained for up to 90 days. Authentication sessions expire after the JWT lifetime (8 hours access, 7 days refresh).

If you leave Sundance, your account is deactivated; your historical contributions to project records are preserved as business records but no new data is captured under your account.

5. Your Rights

You can request access to, correction of, or deletion of personal information about you by contacting your manager or Sundance directly (see Contact below). For deletion requests, please note that some records may need to be retained to meet legal, regulatory, or business obligations.

In the mobile app, you can:

• Sign out at any time from the Me tab → Settings
• Revoke camera, photo, and location permissions in your device settings
• Disable push notifications in your device settings

6. Children's Privacy

The Sundance Platform is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.

7. Security

All connections to Sundance's services are encrypted in transit with TLS. Authentication tokens stored on mobile devices are kept in the operating system's secure storage (Keychain on iOS, Keystore on Android) via expo-secure-store. Access to backend systems is role-gated; staff can only see records their role permits.

8. International Users

Sundance is based in the United States; our servers and the service providers listed above operate in the United States and the European Economic Area. By using the Sundance Platform, you consent to the transfer of information to the United States.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective" date at the top reflects the most recent revision. Material changes will be communicated by email or in-app notice before they take effect.

10. Contact Us

If you have questions about this Privacy Policy or our handling of your information, contact:

Sundance Power Systems, Inc.
Email: [email protected]
Web: sundancepower.com

Mobile Application: MOCHA — Sundance Field Ops

Last updated: June 15, 2026

This section describes how the MOCHA — Sundance Field Ops mobile application (the "App"), provided by Sundance Power Systems, collects and uses information. The App is intended for Sundance Power Systems employees, crews, and authorized personnel, and requires a company-provisioned account to sign in.

Information the App collects

• Account information — your name, email address, and role, used to authenticate you and operate the App.
• Precise location — when you tap "I've Arrived," the App captures your device's GPS location to confirm on-time arrival at a job site. Location is collected only at that moment, in response to your action. The App does not track your location in the background.
• Photos — photos you capture or attach to forms, work orders, and projects.
• Device identifiers — a push-notification token (via Google Firebase Cloud Messaging) used to deliver notifications to your device.
• Operational data you enter — work orders, forms, timesheets, inspections, materials, invoices, and customer, account, and project records you create or update in the course of your work.

How we use information

• To authenticate you and provide the App's features.
• To confirm arrival and record time worked.
• To attach photos and documentation to the appropriate records.
• To send operational push notifications.
• To synchronize your work with Sundance Power Systems' systems, including when your device reconnects after working offline.

How information is shared

We do not sell your personal information and do not share it with third parties for advertising. Information is transmitted to Sundance Power Systems' own systems. We use service providers solely to operate the App, including Expo / Expo Application Services (app updates and delivery) and Google Firebase Cloud Messaging (push-notification delivery). These providers process data on our behalf.

Data security

All data transmitted between the App and our servers is encrypted in transit (HTTPS/TLS). Sign-in credentials are held in your device's secure storage, and the App supports two-factor authentication (TOTP).

Permissions the App requests

• Camera and photos — to capture and attach photos to forms and records.
• Location (while in use) — to confirm arrival when you tap "I've Arrived." Foreground only; no background tracking.
• Notifications — to deliver operational alerts.

Data retention

We retain information for as long as needed to operate the App and to meet our business, legal, and recordkeeping obligations.

Data deletion

Accounts are provisioned and managed by Sundance Power Systems. To request deletion of your account or associated personal data, contact your administrator or email [email protected]. We will respond consistent with applicable law and our recordkeeping obligations.

Children's privacy

The App is intended for authorized Sundance Power Systems personnel and is not directed to children under 13.

Contact

Sundance Power Systems · [email protected]