Thank you for being part of the EEtility user community. We are committed to protecting your personal and business information and your right to privacy. If you have questions or concerns about this notice or our practices, contact us at ITO@EEtility.com.

When you use any of EEtility's applications, platforms, or programs (including Smart Energy-Nexus, Smart Energy-Pro, FastTrack, the EEtility Data Orchestrator, and any other EEtility Engine), you trust us with your information. This notice describes how we collect, use, and protect that information, and the rights you have in relation to it. Please read it carefully. If you do not agree with any terms in this notice, please discontinue use of our Services.

This notice applies to all information collected through EEtility's applications, platforms, and programs, and any related services, sales, marketing, or events (collectively, the "Services").

1. What Information Do We Collect?

Personal information

We may collect personal information when you submit it through forms or other inputs within our Services. This may include your name, email address, phone number, mailing or service address, utility account numbers, and other information you provide on your own behalf or on behalf of program participants.

Business information

Many of our users are contractors, utility partners, and program operators. In the course of program administration we may collect business information, including:

•     Business names, contact information, and license or certification details

•     Project, job, costs and installation records (equipment specifications, measure data, installation dates, site information, pricing information)

•     Program enrollment, billing, and tariff data associated with utility-sponsored program

•     Documents, photos, and data files submitted through our platforms in connection with program work

Technical and usage information

We collect limited technical information necessary to operate and secure the Services, such as login events, session data, and system access logs.

2. How Do We Use Your Information?

IN SHORT:  We process information for legitimate business purposes, to fulfill contracts, comply with legal obligations, and/or with your consent.

We use the information we collect to:

•     Communicate with you in relation to your work involving EEtility

•     Send administrative information, including updates to features, terms, or policies

•     Fulfill and manage data submissions

•     Administer utility-sponsored and tariff-based energy efficiency programs, including project review, quality assurance, billing, and reporting

•     Request feedback related to your use of our Services

•     Protect our Services and prevent fraud or misuse

•     Enforce our terms, conditions, and policies

•     Respond to legal requests and prevent harm

•     Deliver services to end users (program participants)

•     Respond to inquiries and provide user support

•     Perform internal analytics and improve our Services using aggregated or anonymized data

We do not use identifiable personal or business information for purposes beyond those described without your consent.

3. Will Your Information Be Shared With Anyone?

IN SHORT:  We share information only when necessary to operate our Services, administer utility-sponsored or tariff-based programs, comply with the law, or with your consent. We never share your business information with other businesses outside of program operations.

We may share information on the following grounds:

•     Consent

•     Legitimate program operations and service delivery

•     Performance of a contract

•     Legal or regulatory obligations

•     Vital interests (such as fraud prevention, safety, or legal claims)

This may include sharing information with utility program sponsors, program operators, vendors, consultants, or service providers who perform services on our behalf (such as energy efficiency modeling, data processing, or quality assurance). These parties are granted access only to the information necessary to perform their contracted functions and are bound by confidentiality and data protection obligations consistent with this policy.

Business data confidentiality

Business information you submit through our Services, including project records, pricing, customer lists, and operational data, is treated as confidential. We do not share, disclose, or make this information available to other businesses, competitors, or third parties outside of the program operators, utility sponsors, and contracted service providers necessary to administer the programs you participate in. Your business data is never used to benefit another business, and is never disclosed to another program participant without your consent.

We do not sell, rent, or trade personal or business information for promotional or advertising purposes.

We may share or transfer information in connection with a merger, acquisition, financing, or sale of company assets. If such a transfer occurs, we will notify users of any material changes related to the handling of their information.

4. Do We Use Cookies and Other Tracking Technologies?

IN SHORT:  Cookies are used only to support application functionality.

Cookies are used solely to maintain secure sessions, preserve login state, and support application functionality. They are not used for marketing, advertising, or third-party tracking purposes.

5. How Long Do We Keep Your Information?

IN SHORT:  We retain information only as long as necessary to operate our Services and meet legal or program requirements.

We retain personal and business information only as long as needed to fulfill the purposes described in this policy, including administering utility-sponsored or tariff-based programs, unless a longer retention period is required or permitted by law, regulation, contract, or program rules.

Retention periods vary depending on the type of information and applicable program, audit, or regulatory requirements. Where possible, information is retained in identifiable form only for the duration necessary to support program delivery, compliance, reporting, dispute resolution, or quality assurance.

When information is no longer required, it is deleted, anonymized, or securely isolated and protected from further processing until deletion is feasible.

6. How Do We Keep Your Information Safe?

IN SHORT:  We protect information using administrative, technical, and organizational safeguards.

EEtility implements reasonable and appropriate security measures designed to protect personal and business information against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

•     Secure transmission of data using HTTPS (SSL/TLS) encryption

•     Encryption of data at rest within our hosting environment

•     Role-based access controls limiting access to authorized personnel

•     Authentication and access management controls, including multi-factor authentication for administrative access

•     Logging and monitoring of system access related to program operations

•     Segregation of data where appropriate based on role, function, or program

No method of transmission or storage is completely secure, but we regularly review and update our safeguards to address evolving risks.

7. Do We Collect Information From Minors?

IN SHORT:  No.

We do not knowingly collect information from or market to individuals under 18 years of age. If we discover such data, we will promptly delete it. If you believe this has occurred, contact ITO@EEtility.com.

8. What Are Your Privacy Rights?

You may review, update, or request termination of your account at any time by contacting ITO@EEtility.com.

If you are a resident of the European Economic Area and believe your data is being processed unlawfully, you may file a complaint with your local data protection authority.

You may control cookie behavior through your browser settings, though disabling cookies may affect application functionality.

9. Controls for Do-Not-Track Features

Some browsers transmit "Do-Not-Track" (DNT) or Global Privacy Control (GPC) signals. Because we do not sell personal information, share it for cross-context behavioral advertising, or use cookies for tracking or marketing purposes, there is no data sale or targeted advertising activity for these signals to opt out of. Our Services treat all users in accordance with the practices described in this policy regardless of whether such a signal is present. If our practices change, we will update this policy and honor applicable opt-out preference signals as required by law.

10. Do California Residents Have Specific Privacy Rights?

Yes. California residents may request information about disclosures of personal data under California Civil Code §1798.83 ("Shine the Light"). California residents under 18 may request removal of content they have publicly posted. Requests should be sent to ITO@EEtility.com.

11. Do We Make Updates to This Policy?

Yes. We may update this policy from time to time. Updates are effective once posted, and material changes may be communicated directly.

12. How Can You Contact Us About This Policy?

If you have questions or comments about this policy, contact us at: ITO@EEtility.com