Last Updated: 08/07/2026

Please read this notice carefully.

Gridware is a technology company pioneering Active Grid Response (“AGR”), a new category of grid management focused on monitoring the electrical, physical, and environmental conditions using high-precision sensing to identify hazards early.

This Product Privacy Notice describes how Gridware Technologies Inc. (“Gridware”, “we”, “us”, and/or “our”) handles personal information that we collect through:

• the Gridware customer dashboard, currently known as the Gridware web app (app.gridware.io);

• the Gridware mobile application (the “Mobile App”);

• Gridware alerting and reporting services;

• related support, training, implementation, and customer communications; and

• associated websites and services that link to this Product Privacy Notice.

Collectively, we describe the foregoing and all related content, features, platforms, and other activities as our “Services”. This Product Privacy Notice also describes certain legal rights you may have, subject to applicable law, and how you can exercise them.

This Product Privacy Notice applies primarily to utility personnel, contractors, lineworkers, dispatch personnel, engineering personnel, asset management personnel, and other authorized users of Gridware’s products and services. For information about how we collect and use Personal Information about prospective customers, business partners, investors, media contact and other visitors to our public website, please see our general web Privacy Notice.

Personal Information

For the purposes of this Product Privacy Notice, “Personal Information” means information about an identified or identifiable person. This includes information that alone or in combination with other information may be used to identify, contact, or locate you, such as your name, address, email address, or phone number. Personal Information includes equivalent terms (such as “personal data”) as defined by applicable law.

Information Processed on Behalf of Utility Customers

Gridware provides the Services to utility companies and other organizations. To the extent we process Personal Information on behalf of a utility customer in connection with its use of the Services, we do so pursuant to our agreements with that customer and its instructions. In many cases, the utility customer controls how information relating to authorized users is collected, used, disclosed, and retained. If you use the Services through an account provided by a utility customer, you may wish to contact that utility customer regarding the handling of your Personal Information.

Information We Collect

Information you give us directly

Some information we collect directly from you. For instance, we collect information that you voluntarily provide in the following ways:

• Account creation. We collect information associated with user accounts, including first name, last name, email address, password credentials managed through our authentication providers, optional telephone number, and other information necessary to establish or administer user accounts. We may collect authentication-related information, including account identifiers, log-in credentials managed through third-party authentication providers, and information provided through single-sign-on integrations implemented by our utility customers.
  

• Communications, product updates, and events. We may collect your name, email address, communication preferences, and related information when you subscribe to newsletters, product updates, release notifications, webinars, training opportunities, user groups, conferences, or other communications relating to our Services.

• Direct communications. If you choose to communicate with us by email, telephone, SMS, physical mail, or in person, we will collect the contents of your communication which can include any information you choose to provide. This typically includes general identification and contact details and details related to the past, existing, or potential relationship between you and us.
  

• Conferences, trade shows, or other in-person events. We may collect Personal Information from individuals who provide information to us at conferences, trade shows, or other events we may host, sponsor, or participate in. This information may include your first and last name, job title, company/organization name, business contact information, and social media profile.
  

• Contests, promotions, and community features. If you choose to submit photographs, videos, comments, or other content in connection with contests, promotions, recognition programs, community initiatives, or similar opportunities offered by Gridware, we may collect the information you provide and use it to administer the program, communicate with participants, and showcase selected submissions through our marketing materials, social media accounts, publications, and other business communications.
  

• Online events. From time to time, we may offer webinars, trainings, or other online events. To enable these events, we stream video and audio feed of interactions between participants as well as the contents of any communications enabled by integrated chat features within any third-party services that we may use to provide the events. This includes collecting your image, voice, movements, physical environment, and any other information provided during the event. Occasionally, we may record events and make those recordings accessible to other Gridware users or the general public. If we do so, we will indicate that the event will be recorded.
  

• Social media interactions. If you choose to interact with us through social media on a Gridware-administered social media page, such as LinkedIn, certain Personal Information (such as your name, your profile picture, and the fact that you are interested in our business) may be visible to all visitors of your personal social media page (depending on your privacy settings on the relevant social media platform) and will also be visible to us. You can delete any information that you share on these platforms through your relevant social media platform’s account.

Information we collect automatically

• Cookies, analytics, and similar technologies. We and our service providers may use cookies, local storage, analytics tools, and similar technologies to authenticate users, maintain sessions, remember preferences, understand usage patterns, improve functionality, troubleshoot issues, monitor performance, and protect the security of our Services. Information collected through these technologies may include IP address, device information, browser information, operating system information, usage data, feature utilization, interaction events, performance data, diagnostics information, and approximate location information derived from IP address. We may also use technologies to collect information relating to how users interact with the Services, including clicks, navigation paths, user interface interactions, application flows, network requests, console logs, diagnostic traces, screenshots, session-replay data, DOM state information, and network traffic information to assist with debugging, troubleshooting, performance monitoring, security, and service improvement.

• Email analytics. We also use third-party services to help us send emails, manage subscribe/unsubscribe features, and improve the effectiveness of our emailing services. Emails contain a unique link to a transparent image which is loaded when the email is opened. We track the requests to download this hosted image. When you click on a hyperlink in the email, the unique redirect URL will reach our service for tracking then immediately forward you to the target destination. We use this information to better understand what information is of interest to our subscribers so we can produce more of that content for them. These third-party services do not use or sell this information.
  

• Support and feedback tools. We may use third-party service providers to facilitate support requests, customer feedback submissions, bug reports, and related communications. These providers may process information that you submit together with technical information necessary to deliver those services.
  

• Routing, addressing, and signaling information. Any routing, addressing, or signaling information (such as IP addresses and URL data) is collected as part of standard internet communications necessary to enable communication from your device to our server and to deliver website content and functionality. We do not collect this information for the purposes of intercepting private communications unrelated to your interaction with our Services.
  

• Field installation and operational data. When users interact with the Mobile App, we may collect information relating to field installations and operational activities, including: installation timestamps; installation status information; installation locations; photos and images captured during installation activities; information relating to utility poles, circuits, spans, and equipment; user identifiers associated with installation activities; and information necessary to verify completion of field work.
  

• Mobile device information. We may collect information relating to devices used to access our Services, including IP address, mobile device identifiers, operating system information, device type, application diagnostics, logs, crash reports, performance information, and similar technical information.
  

• Camera and image data. The Mobile App may require access to a device camera to allow users to capture photographs and other installation-related information. Photographs submitted through the Mobile App may be stored and associated with installation records and customer reporting functions. These photographs are collected to document installation activities, utility infrastructure, and related field conditions. Gridware does not collect photographs for the purpose of identifying individuals and does not use photographs to create biometric identifiers, biometric information, or facial recognition templates.
  

• Location data. The Mobile App may request access to location information from your mobile device. Location data is used to assist users with installation activities and to associate installation records with relevant utility infrastructure. Gridware does not currently transmit a user’s real-time device location to its servers solely because location permissions are enabled. However, installation records may contain location information and timestamps associated with completed installations.

Information we collect from other sources

• Your employer. Your employer (or another individual in your organization) may provide us with certain information about you, including your business contact information and information relevant to your role and job duties. Specifically, utility customers, contractors, and other organizations may provide us with information about personnel who require access to our Services, including names, business email addresses, phone numbers, job-related information, and account permissions.
  

We may combine the information we collect about you from these various sources. If a combination of information that we collect identifies you as an individual, we will treat the combined information as Personal Information.

How We Use Your Information

We use the information described above to:

• Provide our Services (including authenticating users; generating utility alerts, tracking and verifying installations, providing reports to utility customers; associating completed work with installers; and supporting troubleshooting and performance monitoring);
  

• Communicate with business contacts (including responding to your requests, inquiries, comments, and suggestions);
  

• Operate and improve our Services (including monitoring and analyzing usage, trends and activities related to the Services and identifying, fixing, and troubleshooting bugs and service errors);

• Comply with legal and regulatory obligations (including general business and legal recordkeeping requirements);
  

• Protect our rights and property (including for purposes of fraud prevention, audits, investigations, dispute resolution or insurance purposes, litigation, and defense of claims);

• Protect against, identify, investigate, and respond to misuse of our Services (including preventing and detecting unauthorized access, and other unlawful behavior); and

• Carry out any other purpose described to you at the time the information was collected.

How We Share Your Information

We may share information about you with certain third parties in the following circumstances:

• Companies under common control. We may share data between and among any current or future parents, subsidiaries, affiliates, and other companies under common control and ownership with Gridware.

• Vendors and service providers. We may share Personal Information with vendors, consultants, and other service providers who need to access the data in order to perform services on our behalf. This includes cloud-hosting and email marketing services which help us operate our business.

• Utility customers. We may provide utility customers and other organizations that authorize users to access the Services with information relating to authorized users, including account information, installation activities, installation records, photographs, timestamps, location-related installation information, and other records generated through use of the Services, to the extent necessary to administer their Gridware deployment and monitor field operations.

• Business transfers. We may share Personal Information with another company in connection with or during negotiations of any merger, acquisition, financing, re-organization, bankruptcy, sale of all or a portion of our assets, or transition of services to another provider.

• Legal requirements. We may share Personal Information when we believe it is necessary to comply with a legal obligation, including lawful requests from public authorities to meet national security or law enforcement requirements. We may also share Personal Information when we believe it is necessary to protect Gridware’s rights and property, to protect the safety of our users, and to defend against legal liability.

• Consent. We may share Personal Information with third parties with your consent and at your direction, including if we notify you that the information you provide will be shared in a particular manner and you provide that information.

We may also share aggregate or de-identified information, which cannot reasonably be used to identify you, for analytics, service improvement, benchmarking, research, operational planning, and other lawful business purposes.

Your Rights and Choices

You have a variety of rights and choices related to our use of your Personal Information.

• Opting out of email/text messages. Users may be able to manage certain communications and notification preferences through the Services or through their utility administrator. Certain operational, security, account-related, and service notifications may continue to be sent because they are part of the Services.

• Restricting cookies. You can configure most browsers to reject cookies or to notify you when you are sent a cookie, giving you a chance to decide whether or not to accept it. You can consult the help section of your browser to find out how to do this. Where available, you may also modify your cookie preferences through the cookie preference tools provided with the Mobile Applicable Service. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services.

• Accessing, updating, or deleting your Personal Information. If you would like to access, update, or delete Personal Information you have provided, please email us at legalfile@gridware.io. We will consider all requests and respond in accordance with applicable requirements. Please note that we may keep certain Personal Information as necessary to comply with our legal obligations or for legitimate business purposes, such as to resolve disputes or enforce our agreements. We may also keep cached archived copies of Personal Information for a certain period of time. Certain requests relating to user accounts may need to be coordinated with the utility customer or administrator responsible for your account.

• Mobile app permissions. The Mobile App may request access to certain device features and permissions, such as camera access and location services, in order to support installation workflows and related functionality. You can control many of these permissions through your device settings, although disabling certain permissions may affect functionality of the Mobile App.

‍

Additional Disclosures for California Residents

Notice at Collection

While this information is covered in greater detail in the “Information We Collect” section above, the categories of Personal Information that Gridware may collect, as described by the California Consumer Privacy Act (“CCPA”), include:

• Identifiers, such as name, business email address, telephone number, account identifier, username, utility-issued user identifier, IP address, device identifier, and similar identifiers.

• Professional or employment-related information, such as employer, utility affiliation, job title, role, permissions, and any other information relating to a user’s responsibilities within an organization.

• Internet or other electronic network activity information, such as usage data, authentication activity, account log information, application diagnostics, crash reports, performance information, interaction events, and similar information relating to use of the Services.

• Geolocation information, including installation location information, location-related installation records, and approximate location information derived from IP address.

• Audio, electronic, visual, or similar information, such as photographs and images submitted through the Mobile App in connection with installation activities.
  

• Commercial or service-related information, such as account information, service usage records, support requests, installation records, utility reporting information, and customer communications.
  

• Inferences, such as information derived from usage patterns, service interactions, or operational activity relating to the Services, to the extent such information may constitute “inferences” under the CCPA.

Business or Commercial Purpose for Collecting and Using Personal Information

We collect each category of Personal Information listed above for the business or commercial purposes described in the “How We Use Your Information” section above.

Categories of Sources of Personal Information

We collect each category of Personal Information listed above directly from you, through automatic data collection means, or through the third-party sources described in the “Information We Collect” above.

Categories of Personal Information Disclosed

In the preceding 12 months, we have disclosed the categories of Personal Information listed above in the circumstances described in the “How We Share Your Information” Section above.

Right to Know

You have the right to request information about the categories and specific pieces of Personal Information we collect, use, disclose, and sell (if applicable).

Right to Delete

You can request deletion of Personal Information we have collected about you, subject to exceptions permitted by law. In some circumstances, we may retain information where necessary to comply with legal obligations, detect security incidents, prevent fraud, exercise legal rights, fulfill contractual obligations, or otherwise comply with applicable law.

Right to Correct

You can request that we rectify, correct, or update your Personal Information.

Right to Opt-Out

California residents have the right to opt-out of:

• sales of their Personal Information; and

• sharing of their Personal Information for the purpose of cross-context behavioral advertising.

Gridware does not sell Personal Information subject to this Product Privacy Notice for monetary consideration and does not share Personal Information for cross-context behavioral advertising. Accordingly, Gridware does not currently offer a “Do Not Sell or Share My Personal Information” mechanism in connection with the Services as those activities are not part of its business practices.

California residents also have the right to opt-out of the use of automated decision-making technology (“ADMT”) to make significant decisions about them. Gridware does not currently use ADMT to make significant decisions about individuals subject to this Product Privacy Notice.

Universal Opt-Out

To the extent required by applicable law, Gridware will honor applicable universal opt-out preference signals. However, because Gridware does not currently sell Personal Information or share Personal Information for cross-context behavioral advertising, universal opt-out preference signals such as Global Privacy Control do not currently affect how Gridware processes Personal Information subject to this Product Privacy Notice.

Right to Limit Use of Sensitive Personal Information

Gridware does not use or disclose Sensitive Personal Information for purposes other than those permitted by the CCPA. To the extent Gridware collects Sensitive Personal Information, such information is used solely for providing and securing the Services, complying with legal obligations, preventing fraud, and other purposes permitted by applicable law. Gridware does not use photographs collected through the Services to identify individuals or create biometric identifiers or biometric information.

Non-Discrimination

You have the right not to receive discriminatory treatment by us for the exercise of your rights conferred by the CCPA. 

Exercising Your Rights

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. To designate an authorized agent, please contact us as set forth below and provide written authorization signed by you and your designated agent.

In many cases, Gridware processes Personal Information on behalf of utility customers that determine how information relating to authorized users is collected, used, disclosed, and retained. Certain privacy rights requests may therefore need to be directed to, or coordinated with, the Mobile Applicable utility customer.

Response Time and Extensions

We will confirm receipt of your request within 10 business days. We will respond to requests within 45 days, with a possible extension of another 45 days, if reasonably necessary.

“Do Not Track” Disclosure

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers. In the event that a universally accepted standard emerges on how organizations should respond to “do not track” or similar opt-out signals, we will assess and provide an appropriate response to those signals.

“Shine the Light”

The California “Shine the Light” law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. Gridware does not disclose Personal Information to third parties for their own direct marketing purposes.

Children’s Privacy

Our Services are directed at adults and we do not knowingly collect Personal Information from children. If you are a parent or legal guardian and think your child under 13 (or a higher age threshold where applicable) has given us Personal Information without your consent, please contact us at legalfile@gridware.io.

Links to Other Websites and Third-Party Content

We may provide links to third-party websites, services, and applications that are not operated or controlled by Gridware. This Product Privacy Notice does not apply to the privacy practices of those third parties. The fact that we link to a website, service, or application is not an endorsement, authorization, or representation of our affiliation with that third party. We encourage you to review the privacy notices of any third-party service before providing any Personal Information to or through them.

Data Retention

We only keep your Personal Information for so long as reasonably necessary to provide our Services, maintain customer relationships, meet contractual obligations, satisfy legal requirements, resolve disputes, enforce agreements, and support utility reporting and operational needs. Retention periods vary depending on the nature of the information, legal requirements, customer instructions, and the purposes for which the information was collected.

Outdated, unused, and obsolete data is either deleted or anonymized. Data may persist in copies made for backup and business continuity purposes for additional time.

Data Transfers

Personal Information may be processed and stored in the United States and other jurisdictions where Gridware or its service providers operate. For instance, Gridware hosts its Services using cloud infrastructure provided by Amazon Web Services (AWS) in the United States. By using the Services, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your jurisdiction of residence.

Security

Gridware uses generally accepted administrative, physical, and technical safeguards we believe are appropriate to protect the confidentiality, integrity, and availability of your Personal Information. Although we make reasonable efforts to protect Personal Information from loss, misuse, or alteration by third parties, you should be aware that there is always some risk involved in transmitting information over the Internet and storing information electronically. Gridware cannot and does not guarantee absolute security.

Changes to Our Product Privacy Notice

We may change this Product Privacy Notice from time to time to reflect changes in our practices or in the law. If we make changes to this notice, we will post the updated Product Privacy Notice on our Services and indicate when it was last revised. You are advised to review this notice periodically to stay informed of our practices. If we make material changes, we may provide you with additional notice, such as posting a statement on our homepage or sending you an email notification, if we have your email address on file. Your continued use of the Services after the revised Product Privacy Notice has become effective indicates that you have read, understood, and agreed to the current version of this Product Privacy Notice, to the extent permitted by law.

Contacting Us

If you have any questions about our Product Privacy Notice or how we protect your Personal Information please contact us at legalfile@gridware.io or you may write us at 945 Front Street, San Francisco, CA 94111.

‍