The Policy also describes your choices regarding use, access and collection of your personal information. We also provide below a description of specific rights you may have under the Regional Privacy Notice section below.
When you use the Site or Services or otherwise submit personal information to us, you are consenting to the collection, transfer, manipulation, storage, disclosure and other uses of your personal information as described in this Policy. When our Clients use the Client Services, the use of any personal information we collect from these services shall be limited to the purpose of providing the Client Services for which the Client has engaged us.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact us at firstname.lastname@example.org.
Overview of The Services
AutoGrid builds software applications that are designed to enable a smarter distributed energy world. Our suite of flexibility management applications enables utilities, electricity retailers, renewable energy project developers and energy service providers (collectively, “Clients”) to deliver clean, affordable and reliable energy by managing networked distributed energy resources (“DERs”) in real time and at scale. You will use those Client Services by signing up directly with the Clients. Please note that Clients may have their own privacy policies relating to their use of your personal information. We are not responsible for our Clients’ information practices or their use of your personal information.
In addition, AutoGrid offers certain applications directly to consumers. These Consumer Services are designed to enable consumers to participate in energy savings programs offered by their utility company or directly by AutoGrid and manage their smart energy devices to monitor and manage energy usage. In providing Consumer Services, we are collecting your personal information directly and will treat such information in accordance with this Policy.
The Personal Information We Collect
The type of personal information we collect will depend on your interaction with us:
How Your Personal Information Is Used
We collect and use personal and other information as follows:
How Your Personal Information is Disclosed
We may disclose the information we receive as follows:
What we don’t do with your information:
Requests Regarding Your Personal Information Collected on Behalf of our Clients
AutoGrid Systems has no direct relationship with the end users whose personal information it processes on behalf of its Clients. An individual who seeks access, or who seeks to correct, amend or delete inaccurate data should direct their request to the Client directly. If requested to remove data by our Clients, we will respond within a reasonable timeframe.
We will retain personal information we process on behalf of our Clients for as long as needed to provide Client Services to them. AutoGrid Systems will retain this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Requests Regarding Your Personal Information Collected By Us as Controller
We may also collect and process certain personal information in our role as a controller under applicable privacy laws. For example, we act as a controller with respect to information of representatives of our Clients and uses of our Customer Services. If you are an individual from whom we have collected your personal information in such a capacity, you may request access to or to correct, amend or delete your personal information by emailing us at email@example.com . We will respond to those requests to the extent required by applicable law.
Regional Privacy Notices
A.California Privacy Notice
This California Privacy Notice supplements the Policy and contains the disclosures required under the California Consumer Privacy Act (“CCPA”) and applies to the personal information of California residents. For individuals who are California residents, the CCPA requires certain disclosures about the categories of personal information we collect and how we use it, the categories of sources from whom we collect personal information, and the categories of third parties with whom we share it.
Requests by California Residents
If you are a California resident who has provided personal information to us, or a California resident who reasonably believes that we have collected or store their personal information, you have the right to request us to:
We do not offer a right to opt-out of the sale or sharing (for cross-context behavioral advertising) of your personal information, because within the meaning of the CCPA, we have not sold or shared personal information to any third party within the last twelve months.
We do not offer a right to limit the use or disclosure of sensitive personal information because, within the meaning of the CCPA, we do not use sensitive personal information for inferring characteristics.
You can only make two Requests to Know in a 12-month period.
Methods For Submitting A Request Under California Privacy Laws
You may submit Requests to Know and Requests to Delete by emailing us at firstname.lastname@example.org
Please note that following your verified request, we will send you your personal information from the following email address: email@example.com. (Any response to your request, including any personal information may be sent as an encrypted file.)
Please note that once you have submitted a request, we will send you a receipt, acknowledging your request, within 10 business days. If, for some reason, you do not receive such a receipt within 10 business days of your submitted request, please send us an email firstname.lastname@example.org, as an error may have occurred.
We will process and respond to your request within 45 calendar days after it is received (in some cases, as is allowed under the CCPA, this process may be extended by an additional 45 calendar days).
Verification of Requests
We will need to verify your identity to respond to Requests to Delete and Requests to Know. If you have an account with us that is password-protected, we may verify your identity through our existing authentication practices for your account. If you do not have an account with us, and your request concerns “categories” of personal information collected, we can request from you two data points of personal information to verify your identity. If you do not have an account with us, and your request concerns specific pieces of personal information, we can request from you at least three data points of personal information as well as a signed declaration with penalty of perjury to verify your identity.
If a request concerns household information, and the household does not have a password-protected account with us, we will not comply with a Request to Know specific pieces of personal information about the household or a request to delete household personal information unless all of the following conditions are satisfied: (1) All consumers of the household jointly request access to specific pieces of information for the household or the deletion of household personal information; (2) we have individually verified all the members of the household under the CCPA; and (3) we have verified that each member making the request is currently a member of the household.
As a California resident, you have the right to designate an agent to exercise these rights on your behalf. We may require proof that you have designated the authorized agent to act on your behalf and to verify your identity directly with us. Please contact us at email@example.com for more information if you wish to submit a request through an authorized agent.
Notice at Collection and Notice of Personal Information We Have Collected
Pursuant to the CCPA California Privacy Laws, this serves as notice of the categories of personal information that we may collect and have collected through the Site and Services, the business or commercial purposes for which such personal information was collected, the categories of sources of such personal information, and the categories of third parties to whom such personal information was disclosed in the past twelve (12) months.
|Category||Collected||Business or Commercial Purpose||Categories of Sources||Categories of Third Parties to Whom Disclosed|
|A. Identifiers.||YES||We use this information to provide the Site and Services, respond to|
your request and inquiries, process job applications, and for other
purposes as described in this Policy.
|Clients, consumers directly (for Consumer Services).||Clients for Client Services.|
|B. Personal information categories listed in the California Customer|
Records statute (Cal. Civ. Code § 1798.80(e)).
|YES||We use this information to provide the Site and Services, respond to|
your request and inquiries, and for other purposes as described in this
|Clients for Client Services, consumers directly||Clients for Client Services|
|C. Protected classification characteristics under California or federal|
|YES||N/A (subject to statutory exceptions described within this document)||N/A (subject to statutory exceptions described within this document)||N/A (subject to statutory exceptions described within this document)|
|D. Commercial information.||YES||To provide the Services, to improve the Services and for other purposes|
specified in the Policy
|Clients for Client Services, consumers directly|
|E. Biometric information.||NO|
|F. Internet or other similar network activity.||YES||To provide the Site and Services, to improve the Site and Services, to|
prevent fraud and breaches of security and for other purposes specified
in the Policy.
|Consumers directly, data analytics providers|
|G. Geolocation data.||YES||To provide the Services, to coordinate energy usage and savings with|
utility programs in the region where the consumer resides, and for
research and analytical purposes to improve the Services.
|Clients (for Client Services), consumers directly|
|H. Sensory data. Audio, electronic, visual, thermal, olfactory, or|
|YES||To provide the Services, to coordinate energy usage and savings with|
utility programs in the region where the consumer resides, and for
research and analytical purposes to improve the Services.
|Clients (for Client Services), consumers directly|
|I. Professional or employment-related information.||YES||To process job applications and for other purposes described in this Policy.||Consumers directly; job and recruiting sites such as Indeed|
|J. Non-public education information (per the Family Educational Rights|
and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
|YES||To process job applications and for other purposes described in this|
|Consumers directly; job and recruiting sites such as Indeed|
|K. Inferences drawn from other personal information.||YES||To provide the Services, for research and analytical purposes to improve the Services, and for other purposes as described in this Policy.||Clients, consumers directly||Clients (for Client Services), data analytics providers|
Notice of Sale or Sharing of Personal Information for a Business Purpose
In the preceding 12 months, we have not sold or shared personal information identified in the above categories to any third parties for purposes of cross-context behavioral advertising.
We will retain personal information of California residents we process on behalf of our Clients for as long as needed to provide Client Services to them. For Consumer Services, we will retain personal information of California residents for as long as they maintain an account with us, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
California Shine the Light Notice
Under California’s “Shine the Light” law, California residents who provide personal information in obtaining products or services for personal, family or household use are entitled to request and obtain from us once a calendar year information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year.
California Do Not Track Disclosure
California law requires that operators of websites and online services disclose how they respond to a Do Not Track signal. Some browsers have incorporated “Do Not Track” features. Most of these features, when turned on, send a signal or preference to the website or online service that a user visits, indicating that the user does not wish to be tracked. Because there is not yet a common understanding of how to interpret Do Not Track signals, we do not currently respond to Do Not Track signals.
B. United States Regional Privacy Notices
This United States Regional Privacy Notice supplements the Policy and contains the disclosures required under the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act (collectively, the “U.S. Privacy Laws”). While we may not be subject to these U.S. Privacy Laws, we will endeavor to comply with them. The U.S. Privacy Laws require certain disclosures about the categories of personal information we collect and how we use it, the categories of sources from whom we collect personal information, and the third parties with whom we share it.
Depending on where you live and subject to certain exceptions, you may have some or all of the following rights to request to:
We do not offer a right to opt-out of the processing of personal information because, within the meaning of U.S. Privacy Laws, we have not used the personal information for purposes of targeted advertising, sales of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
To submit a request to exercise your rights, and as applicable, to appeal a consumer rights action, please send us an email to firstname.lastname@example.org . You may also contact the Attorney General if you have concerns about the result of an appeal.
Notice of Personal Information We Collect
We collect the following categories of personal information: identifiers, protected classification characteristics, commercial information, internet or other similar network activity, geolocation data, professional or employment-related information, non-public education information, and inferences drawn from any of the information identified.
The purposes for processing personally identifiable information are described in the “How Your personal information Is Used” section of our Policy.
Notice of Disclosures of Personal Information for a Business Purpose
We may disclose the following categories of personal information to third parties: identifiers and inferences drawn from any of the information identified. We may disclose each category with Clients and data analytics providers.
Nevada Opt-out Rights
We do not sell your personal information as that term is defined under Nevada Law. However, if you are a Nevada resident and wish to exercise an opt-out right under Nevada law, you may email us at email@example.com .
C. European Union and United Kingdom Notices
Legal Bases for Collection of Personal Information
To the extent required by applicable law, we rely on the following legal bases to process your personal information:
European Union/United Kingdom Data Subject Rights
If you are a resident of the European Union or the United Kingdom, you have the right to ask us to fulfill one or more of the following requests.
To make a request, please email us at firstname.lastname@example.org. We may request additional information to verify your identity before responding to such a request.
D. Other International Privacy Notices
For other international privacy notices, please email us at email@example.com. We may request additional information to verify your identity before responding to such a request.
Retention of Personal Information
In broad terms, we will only retain your personal information for as long as is necessary for the purposes for which it was collected. This means that the retention periods will vary according to the type of personal information and the reason that we have collected the personal information in the first place. For example, some personal information related to the provision of the Services may be kept for a number of years in order to comply with various finance and tax related legal obligations.
We use the following types of cookies:
Disabling Cookies.Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to the Site who disable cookies will not be able to browse certain areas of the Site or use the Services.
Minors and Children’s Privacy
Protecting the privacy of young children is especially important. The Services are not directed to children under the age of 18, and we do not knowingly collect personal information from children under the age of 18 without obtaining parental consent. If you are under 18 years of age, then please do not use or access our website at any time or in any manner. If we learn that personal information has been collected on site from persons under 18 years of age and without verifiable parental consent, then we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child under 18 years of age has submitted personal information to AutoGrid, then you may alert us at firstname.lastname@example.org and request that we delete that child’s personal information from our systems.
Cross-Border Transfers of Personal Information
We operate in the United States. If you provide personal information through the Site or Client Services, you consent to the transfer of your personal information to the United States, which may have less protections for your personal information than your jurisdiction of residence.
We also provide Client Services in the European Union. All data that is collected by the Client Services in the European Union is stored in the European Union and never transferred to other regions.
Security of Personal Information
No company, including ours, can fully eliminate security risks associated with consumer information. We strive to protect your information. We follow generally accepted standards to protect the information we receive. However, no method of transmission, or method of electronic storage, is 100% secure. Technical mistakes are possible, and if such a mistake takes place, we will take commercially reasonable steps to correct it. We cannot guarantee absolute or warrant the security of any information you transmit to use or receive from us.
Links to Other Websites
Our Site and Client Services may include links to third party websites and services (“Third-Party Services”) whose privacy practices may differ from ours. If you submit personal information to Third-Party Services, your information is governed by their privacy statements. We are not responsible for the use of your information by such Third-Party Services.
Updates and Changes to the Policy
We reserve the right to modify or update our Policy from time to time. If we modify our policy, we will indicate when such terms are effective and will also update the “last updated” date. We will post the changes on the Site. By using the Site or Services after such changes have been posted, you will be deemed to have accepted such changes.
If you have any questions or complaints about this Policy or our information practices, please contact us at email@example.com and we will try to address your complaint or concerns.
If you are a resident of the European Union or the United Kingdom, you have the right to file a complaint with your data protection authority. In the United Kingdom, complaints can be filed with the Information Commissioner’s Office; please visit https://ico.org.uk/make-a-complaint/ for more information.