Privacy Policy

1. Scope and our data roles

This Privacy Policy explains how CoreGrid Power, Inc. ("CoreGrid," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information in connection with our websites, platform, services, events, sales, supplier relationships, and other business activities.

"Personal information" means information that identifies, relates to, describes, or can reasonably be linked with an individual. It does not include information that is lawfully made public, deidentified, or aggregated so that it cannot reasonably identify an individual.

When CoreGrid determines the purpose

CoreGrid acts as a business or controller when we use information for our own website, account administration, sales, supplier management, security, product improvement, and corporate operations.

When CoreGrid acts for a customer

CoreGrid may act as a service provider or processor when a customer uses our platform to submit or manage project information. In that role, the customer determines why the information is processed and CoreGrid processes it under the customer agreement and applicable law. Requests concerning information in a customer-controlled workspace may need to be directed to that customer.

This Policy does not govern third-party websites or services, or information handled in an employment or contractor relationship where a separate notice applies.

2. Information we collect

Information you or your organization provide

• Account and business contact information: Name, business email address, telephone number, job title, company, account identifiers, authentication information, and related profile information.
• Communications: Information contained in inquiries, support requests, meeting records, feedback, and other correspondence.
• Project and customer content: Specifications, requirements, schedules, drawings, documents, supplier information, decisions, and other material submitted to or created through the services.
• Commercial information: Subscription, proposal, transaction, invoice, purchase-order, and payment-remittance information. CoreGrid does not directly store complete payment-card information.
• Event and marketing information: Information you provide when requesting communications or participating in an event, survey, or product discussion.

Information collected automatically

When you use our websites or services, we may collect IP address, browser and device information, operating system, referring pages, access times, feature interactions, configuration settings, diagnostic records, and security or system logs.

Information from other sources

We may receive business contact, company, project, and professional information from your organization, customer-authorized project participants, suppliers, business partners, service providers, and lawful public sources.

3. How we use information

We may use personal information to:

• Provide, configure, operate, secure, and support our platform and related services.
• Process customer-provided project content and support project, supplier, procurement, and delivery workflows.
• Administer accounts, subscriptions, transactions, billing, and customer relationships.
• Respond to inquiries, provide support, and communicate about the services.
• Understand usage, troubleshoot problems, and improve our products and customer experience.
• Send service communications and, where permitted, relevant product or marketing communications.
• Protect CoreGrid, our customers, and project participants; detect fraud or misuse; and enforce agreements.
• Manage supplier, partner, adviser, and corporate relationships and evaluate business opportunities.
• Comply with law, legal process, and regulatory obligations.

Legal bases

Where applicable law requires a legal basis, we process personal information to perform a contract, comply with legal obligations, pursue legitimate interests that are not overridden by individual rights, protect vital interests, or act with consent.

4. How we disclose information

We may disclose personal information to:

• Service providers and processors supporting hosting, security, communications, analytics, customer management, billing, document processing, and other business operations.
• Customer-authorized project participants such as customers, suppliers, manufacturers, engineers, contractors, and advisers when directed by the customer or reasonably necessary to provide the services.
• Professional and corporate advisers such as attorneys, accountants, auditors, insurers, lenders, and investors subject to appropriate obligations.
• Transaction participants in connection with a financing, merger, acquisition, reorganization, diligence process, asset transfer, or similar corporate event.
• Government authorities or other parties when required by law or reasonably necessary to protect rights, safety, property, or the integrity of our services.

We may also disclose information at your direction, with your consent, or in a deidentified or aggregated form. CoreGrid does not sell personal information as that term is defined under applicable privacy law. Under our current practices, we do not share personal information for cross-context behavioral advertising.

5. Retention and security

Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. The period depends on the type of information, customer instructions and agreements, the duration of the relationship, security needs, and legal, accounting, tax, audit, dispute-resolution, and enforcement requirements. We may retain deidentified information where permitted by law.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information, taking into account its nature and the risks of processing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights and choices

Depending on where you live and subject to applicable exceptions, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; restrict or object to certain processing; withdraw consent; or appeal a privacy decision.

We may need information reasonably necessary to verify your identity, authority, and request. If CoreGrid processes the relevant information only for a customer, we may direct the request to that customer and assist as required by our agreement and applicable law.

You may unsubscribe from marketing emails using the link in the message. Service, security, transactional, and account communications may continue.

California residents can review our California Privacy Notice.

7. Other provisions

International processing

CoreGrid is based in the United States. Personal information may be processed in the United States and other countries where CoreGrid, its customers, project participants, or service providers operate. Where required, we use legally recognized safeguards for international transfers.

Third-party services

Our websites and services may link to or integrate with third-party services. Their privacy practices are governed by their own notices and agreements.

Children

Our services are designed for businesses and are not directed to children under 18. We do not knowingly collect personal information from children through the services.

Changes to this Policy

We may update this Policy as our practices, services, or legal obligations change. We will post the revised Policy with a new effective date and provide additional notice when required by law.

8. Contact CoreGrid

Send privacy questions or applicable rights requests to our privacy contact. Please describe the request and the CoreGrid relationship or service involved so we can route it appropriately.