We have updated our Privacy Notice, effective from June 1, 2021, to:

- Data Retention and Security

- Region-Specific Disclosures

If you have any questions about these changes, do not hesitate to contact us at support@blocpower.io. Prior versions of this Privacy Notice are available there.

Last Modified:June 1, 2021

BlocPower Public Benefit Corporation (together with its affiliates, subsidiaries, successors and assigns "BlocPower", "we" or "us") believes that transparency is vital to protecting people's privacy. This privacy notice explains how BlocPower collects, uses, and shares personal information. This privacy notice applies to our collection of personal information online through our websites, including blocpower.io(our "Sites"), through your use of our software, energy services, energy technologies, from your interactions with us (collectively, our "Services") and personal information we may collect offline through third parties in conjunction with the Services.

Please note that this privacy notice does not cover or apply to our processing of information about employees, contractors or non-personal information that we process, including aggregate or de-identified information. We may also provide additional privacy policies to you at the time we collect your information, which will govern how we process the information you provide at that time.

By accessing or using the Services, our users signify that they have read, understood and agree to our collection, storage, use and disclosure of their personal information as described in this Privacy Notice and our Terms and Conditions. This Privacy Notice is not a contract and does not create any legal rights or obligations.

Contents:

What is Personal Information?

Information We Collect

Website Visitors

How We Use Information

How We Share Personal Information

Customer Data

Control Over Information

Data Retention and Security

Links to Third-Party Websites and Services

California Privacy Rights

Nevada Privacy Rights

Children's Privacy

Changes to Privacy Notice

Contact Us

When we use the term "personal information" in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual. It does not include aggregated or deidentified information that is maintained in a form that is not reasonably capable of being associated with or linked to an individual.

We collect your information from a variety of sources, including directly from an individual and automatically when an individual interacts with the Services. At times, we may collect personal information about an individual from other sources and third parties.

We collect personal information about different categories of individuals through the provision of the Services. These include our customers and prospective customers (including representatives of our business customers) and visitors to our websites.

The categories of information we may collect from our customers or prospective customers in connection with the Services include:

• Information directly provided to us. We may collect information that an individual provides to us when they set up an account with us, use the Services, or communicate with us, including:
• Registration. When applying or signing up for our Services, registering for an online account, or purchasing our products and services, we may collect name, postal address, email address, telephone number, payment information, certain financial information about our business customers (e.g., information on cash flow, balance sheets, statements from QuickBooks, copies of tax returns, mortgage documents, and bank statements) and applicable information about your business (e.g., corporate name, registered agent, number of employees, building information).
• Communications. When communicating with us through any paper or electronic form, we collect your contact information, such as your name, address, email address and phone number, the content of the communication and the metadata associated with the communication.
• Newsletters. When signing up to receive news or alerts from us, we collect contact information, applicable interests and communication preferences in order to send you regular updates about the Services. We use this information to manage our communications with you and send you information about products and services we think may be of interest to you. If you wish to stop receiving email messages from us, please see the "Control Over Information" section below.
• Public Comments. We may also collect any communications between such individuals and BlocPower provided through content or commentary on the Services in the form of blog posts, comments, and the like (collectively, "User Content"). Please note that User Content is published on our site and will be viewable by the public.
• Data collected through the use of the Services. We may collect information on how an individual uses the Services and their actions on the Services, including energy usage and payment information.

Website visitors interact with our websites in ways that lead us to collect personal information about them. The amount and type of personal information that we gather depends on the nature of the interaction with our websites. We may collect the following personal information from our website visitors:

• Inquiry Information. When submitting a contact form submission, we collect contact information and the content of your submission and the metadata associated with the communication.
• Employment Applications. If you apply for employment, we collect your contact and demographic information, educational and work history, employment interests, information obtained during interviews and any other information you choose to provide. We use this information to evaluate your candidacy for employment, to communicate with you during the application process and to facilitate the onboarding process.
• Personal Information Automatically Collected. As is true of most digital platforms, we collect certain personal information automatically when website visitors visit our online Services, including:
• Log File Data, including internet protocol (IP) address, operating system, browser type, browser id, date/time of visit, and pages visited.
• Analytics Data, including the electronic path taken to the Services, through the Services and when exiting the Services, as well as usage and activity on the Services, such as the links and objects viewed, clicked or otherwise interacted with. We may also use third-party analytics tools such as Google Analytics to help us measure traffic and usage trends for the Services and to understand more about the demographics of our users. To learn more about the use of data collection technologies by Google for analytics and to exercise choice regarding those technologies, please visit the Google Analytics Opt-Out browser add-on page.
• Location Data, including general geographic location based on IP address or more precise location when accessing our online Services through a mobile device.
• Cookies and Other Data Collection Technologies. We, and our third-party partners, may automatically collect certain types of usage information through a variety of data collection technologies, including cookies, web beacons, embedded scripts, location-identifying technologies, file information and similar technology (collectively, “cookies”). For example, we may collect information about an individual's device and its software, such as IP address, browser type, Internet service provider, platform type, device type, operating system, date and time stamp, and other similar information.

For information about our and our third-party partners' use of cookies and related technologies to collect information automatically, and any choices individuals may have in relation to its collection, please refer to the Control Over Information section of this privacy notice below.

We also obtain personal information from third parties, which we often combine with personal information we collect either automatically or directly from an individual. We may receive the same categories of personal information as described above from the following third parties:

• Service providers. Our service providers that perform services solely on our behalf, such as payment processors and analytics providers. For example, we receive personal information from our service providers that conduct marketing or analytics activities.
• Business partners. Our business partners may collect personal information in connection with the Services provided and may share some or all of the information with us.
• Publicly available sources. We collect personal information about individuals that we do not otherwise have, including address verification and interest in our Services, from publicly available sources, such as government records or social networks. We may combine this information with the information we collect from an individual directly. We use this information to contact individuals, to send promotional materials or to personalize our Services and to better understand the demographics of our users. Individuals should always review, and if necessary, adjust their privacy settings on third-party websites and social media networks and Services before linking or connecting them to our Services. An individual's interactions with those features are governed by the privacy policies of those companies.

We may use an individual's information, including their personal information, as follows:

• To operate, maintain, and provide the features and functionality of the Services;
• To provide individuals with products or services that they request or in which they express interest;
• To conduct, manage and grow our organization;
• For billing purposes and to process payments;
• To remember an individual's information so they will not have to re-enter it during a subsequent visit; recognize and contact an individual across multiple devices; provide, improve, test, enhance, update and monitor the Services; or diagnose or fix technology problems;
• To improve, market or promote BlocPower's Services, for research and product development, and to perform analytics;
• To communicate directly with our users, such as to send updates and messages in connection with the Services or users' accounts (e.g., account verification, change or updates to features of the Services, technical and security notices);
• To customize our advertising campaigns;
• To alert individuals to product upgrades, special offers, updated information and other new products and services offered by BlocPower, our customers and our third-party partners;
• To respond to comments, questions or requests for customer service;
• To address a violation of the Terms and Conditions, rules, regulations or policies of BlocPower relating to the Services;
• To prevent, investigate and provide notice of fraud, unlawful or criminal activity, unauthorized access to or use of personal information, the Services or our data systems, and to meet legal, regulatory, judicial and institutional policy obligations;
• For any other purpose we may describe when an individual provides the information; and
• For any other lawful, legitimate, business purpose.

We may share personal information in the instances described below. For further information on the choices an individual has regarding their information, see the Control Over Information section of this Privacy Notice below.

• Publicly, if Requested. We may share personal information with third parties at an individual's request, including information or content that you voluntarily disclose for posting to the Service, such as User Content. To change your privacy settings on the Service, please change your profile setting. If you remove information that you posted to the Service, copies may remain viewable in cached and archived pages of the Service, or if other Users have copied or saved that information.
• Service Providers We may share personal information with third-party service providers or business partners who help us deliver or improve our service or who perform services on our behalf, such as job application platforms, background check providers, recruiters, back-office service providers, event coordinators, market research providers, marketing partners and technology providers (including technology support providers, email communications providers, analytics providers, data storage and management providers and web and video hosting providers and developers).
• Marketing Partners. We may share information with third parties for marketing purposes.
• Aggregate and De-Identified Data. We may aggregate, or strip information of personally identifying characteristics, and then share that aggregated or anonymized information with third parties.
• Regulatory or Legal Requirements, Safety and Terms Enforcement. We may share or disclose personal information if we determine, in our sole discretion, that we are required to do so under applicable law or regulatory requirements, including for tax or accounting purposes, in response to their requests for such information or to assist in investigations. We may also disclose personal information if we reasonably believe disclosure is necessary to prevent harm or financial loss, or in connection with preventing fraud or illegal activity, and/or to enforce our Terms and Conditions.
• Affiliates. We may share with other companies and brands in the BlocPower family of companies, which also includes our subsidiaries (i.e., any organization we own or control) or our ultimate holding company (i.e., any organization that owns or controls us) and any subsidiaries it owns. These companies will use personal information in the same way as we can under this Privacy Notice.
• Business Transfers. We may buy, sell, divest or transfer BlocPower (including any shares in the company), or any combination of its products, services, assets and businesses. Customer information such as customer names and email addresses, User Content and other user information related to the Service may be among the items sold or otherwise transferred in these types of transactions. We may also sell, assign or otherwise transfer such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganizations, liquidations, similar transactions or proceedings involving all or a portion of BlocPower.

We may also share information with others in an aggregated or otherwise anonymized form that does not reasonably identify individuals directly.

In providing the Services, our customers may upload data to the Services, which may include personal information or data about our customers' end users (all of which we call "Customer Data"). Customer Data is owned and controlled by our customers, and any Customer Data that we maintain or process we consider to be strictly confidential. We collect and process Customer Data solely on behalf of our customers, and in accordance with our agreements with the customers. We do not use or disclose Customer Data except as authorized or required by our customers and as provided for in our agreements with our customers..

Email Communications. From time to time, we may send emails regarding updates to our Sites and Services, notices about our organization, or information about our offerings (or promotional offers from third parties) that we think may be of interest. To unsubscribe from such emails, simply click the “unsubscribe link” provided at the bottom of the email communication. Note that individuals cannot unsubscribe from certain Services-related email communications (e.g., account verification, confirmations of transactions, technical or legal notices).

Modifying Account Information. If a user has an online account with us, then they have the ability to modify certain information in their account (e.g., contact information) through “profile,” “account,” “settings,” or “preferences” options provided on the website or service. For any questions about modifying or updating any information in an account, please contact us at the email or postal address provided below. Please note that BlocPower does not own or control the Customer Data uploaded to the Services by our customers, and cannot modify or delete Customer Data except at the request of our customer, or as permitted by our Terms and Conditions. Please contact the customer you have a direct relationship with to request a modification or deletion of account information.

Cookies. Most Internet browsers and mobile devices allow you to remove or manage cookie functions and adjust your privacy and security preferences. For information on how to do this, access the “help” menu on your Internet browser, or access http://www.aboutcookies.org/how-to-control-cookies. Please note, however, that disabling our cookies may result in your inability to take full advantage of all of the features of our Services.

Online Advertising. We support the self-regulatory principles of the Digital Advertising Alliance (“DAA”). We work with advertisers, advertising networks, advertising servers, and analytics companies (“Ad Partners”) that use data collection technologies to understand how our Site and Services are being used and to analyze your browsing history in order to deliver advertising relevant to your interests, as well as to provide advertising-related insights. These advertisements may appear on other websites or services, including through social media networks. These Ad Partners may be able to associate devices across third party websites or services over time and link various devices used by the same individual.

For more information about how Ad Partners use the information collected by these technologies and your options for restricting cookies placed by some of these Ad Partners, please visit the DAA's opt-out page. The DAA's opt-outs are device- and browser-specific and may not work on all devices. If you choose to opt-out through the DAA's tools it does not mean you will cease to see advertising. Rather, the ads you see will be based on the website you are visiting and not your interests.

We will retain your personal information for the length of time needed to fulfill the purposed outlined in this Privacy Notice, unless a longer retention period is required or permitted by law. We store data on servers in the U.S. If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that your personal information may be transferred to a country and jurisdiction that does not have the same data protection laws as your jurisdiction.

BlocPower cares about the security of your information and uses commercially reasonable physical, technical and organizational measures designed to preserve the integrity and security of all information we collect. However, no security system is impenetrable, and we cannot guarantee the security of our systems 100%. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.

For convenience, our website and the Services may provide links to third-party websites or services that are not governed by this Privacy Notice. To the extent that any linked third-party websites or services a user visits are not owned or controlled by BlocPower, we are not responsible for those websites' or services' content or information practices. We encourage our users to review the privacy policies of any site or service before providing any personal information.

California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year. California residents each may make one request each year by emailing us at support@blocpower.io or writing to us at 1625 Flatbush Avenue Box #222, Brooklyn, NY 11210.

Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. To submit such a request, please contact us at support@blocpower.io.

BlocPower's Sites and Services are intended for use strictly by adults over the age of 18. We do not knowingly solicit or collect personal information from children under the age of 13. If we learn that any personal information has been collected inadvertently from a child under 13, we will delete the information as soon as possible. If a user believes that we might have collected information from a child under 13, please contact us at support@blocpower.io.

We reserve the right to change this Privacy Notice from time to time in our sole discretion. We will post changes on this page and indicate the “Last Modified” date at the top of this page. Please check back often for any updates. Continued use of our Site or Services after any change in this Privacy Notice will constitute acceptance of such changes.

For additional inquiries about this Privacy Notice, please send us an email at support@blocpower.io, or contact us at 1625 Flatbush Avenue Box #222, Brooklyn, NY 11210.