Privacy Policy

1. Introduction

Energy Enterprise Platform ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Platform:

• Account Information: Name, email address, company name, phone number, and password
• Profile Data: Job title, department, professional credentials, and profile photo
• Project Data: Site information, equipment specifications, system designs, and operational data
• Payment Information: Billing address and payment method details (processed securely through Stripe)
• Communications: Messages, support tickets, and feedback you send to us

2.2 Automatically Collected Information

When you use the Platform, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking: Session cookies, preference cookies, and analytics cookies

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Provide, operate, and maintain the Platform and its features
• Account Management: Create and manage your account, authenticate users, and process subscriptions
• Communication: Send service updates, security alerts, and respond to inquiries
• Improvement: Analyze usage patterns to improve features and user experience
• Security: Detect, prevent, and address technical issues and security threats
• Compliance: Comply with legal obligations and enforce our Terms of Service
• Marketing: Send promotional materials (with your consent, where required)

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We share data with third-party service providers who perform services on our behalf, including cloud hosting (AWS), payment processing (Stripe), email delivery, and analytics. These providers are contractually obligated to protect your data.

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection and security
• Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you delete your account, we will delete or anonymize your personal data within 90 days, except for data we are required to retain for legal or regulatory purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for data processing (where applicable)

To exercise these rights, please contact us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for authentication and platform functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use the Platform
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

You can control cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data during international transfers.

10. Children's Privacy

The Platform is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on the Platform. Your continued use of the Platform after such changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

13. Regional Specific Provisions

13.1 For European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

13.2 For California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt-out of the sale of your personal information (we do not sell personal information).