Privacy Policy

CoreGrid Power, Inc.

Effective Date: November 4, 2025

Last Updated: November 4, 2025

1. Introduction

CoreGrid Power, Inc. ("CoreGrid," "we," "us," or "our") provides a SaaS platform and procurement services for critical power components, specializing in datacenter and grid power infrastructure. We are committed to protecting the privacy of our business customers, partners, and website visitors.

This Privacy Policy explains how we collect, use, share, and protect personal information in connection with our platform, procurement services, and business operations. This Policy applies to business-to-business relationships and does not cover employee or human resources data.

2. Information We Collect

2.1 Information You Provide

Account and Profile Information: Name, business email address, phone number, job title, company name, and business address
Communications: Content of inquiries, support requests, meeting notes, and other business correspondence
Project and Procurement Data: Specifications, requirements, project details, and preferences related to power component procurement
Payment and Billing Information: Invoicing details, purchase order information, and payment remittance data (we do not store credit card information directly)
Event and Marketing Information: Registration details for webinars, events, or marketing communications

2.2 Information We Collect Automatically

Platform Usage Data: Features used, time spent, interaction patterns, search queries, and configuration settings
Technical Information: IP address, browser type and version, device information, operating system, referring URLs, and access times
Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies (see Section 9)
Log Data: Server logs, error reports, and system performance data

2.3 Information from Third Parties

Business Information: Contact details and company information from your employer, business partners, or publicly available sources (e.g., LinkedIn, company directories)
Service Providers: Data from analytics providers, CRM systems, and other business tools
Vendors and Suppliers: Information shared during procurement processes

3. How We Use Your Information

We use personal information for the following purposes:

3.1 Service Delivery and Platform Operations

Provide access to and functionality of our SaaS platform
Process and fulfill procurement requests and orders
Deliver white-glove service and procurement support
Manage customer accounts and subscriptions
Provide technical support and troubleshooting

3.2 Business Operations and Improvements

Analyze platform usage to improve features and user experience
Develop new products, services, and functionality
Conduct research and analytics on power component markets and trends ● Generate insights and recommendations for procurement optimization

3.3 Communications

Respond to inquiries and provide customer support
Send transactional messages (order confirmations, account updates, system notifications)
Provide product updates, industry news, and marketing communications (with appropriate consent)
Conduct surveys and request feedback

3.4 Security and Compliance

Detect, prevent, and address fraud, security threats, and technical issues ● Enforce our terms of service and acceptable use policies
Comply with legal obligations and respond to legal requests
Protect our rights, property, and safety, and that of our users

3.5 Business Development

Manage vendor and partner relationships
Facilitate introductions and business networking
Evaluate potential business opportunities

4. Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal information based on the following legal grounds:

Contract Performance: Processing necessary to provide our services and fulfill our contractual obligations
Legitimate Interests: B2B sales and marketing, platform improvement, fraud prevention, security, and network/information security—where not overridden by your privacy rights
Consent: Where you have provided specific consent (e.g., for certain marketing communications)
Legal Obligations: Compliance with applicable laws, regulations, and legal processes

5. How We Share Your Information

5.1 Service Providers and Processors

We share information with trusted third-party service providers who perform services on our behalf, including:

Cloud infrastructure and hosting providers (e.g., AWS, Google Cloud) ● Analytics and monitoring tools (e.g., Google Analytics, Mixpanel)
Customer relationship management (CRM) systems (e.g., Salesforce, HubSpot) ● Email and communication platforms
Payment processors and billing systems
Customer support tools

These providers are contractually obligated to protect your information and may only use it to provide services to us.

5.2 Business Partners

With your consent or as necessary to fulfill procurement services, we may share relevant information with:

Vendors and suppliers in our network
Manufacturing partners and distributors
Third-party contractors involved in project delivery

5.3 Professional Advisors

We may share information with lawyers, accountants, auditors, and other professional advisors as needed.

5.4 Business Transfers

If CoreGrid is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

5.5 Legal Requirements

We may disclose information when required by law, regulation, legal process, or governmental request, or when necessary to:

Comply with legal obligations
Protect our rights, property, or safety
Investigate potential violations of our terms
Respond to emergencies

5.6 With Your Consent

We may share information for other purposes with your explicit consent.

We do not sell personal information to third parties.

6. International Data Transfers

CoreGrid is based in the United States, and we may process and store information in the U.S. or other countries. If you are located in the EEA, UK, Switzerland, or other regions with data protection laws, your information may be transferred to countries that may not provide the same level of data protection.

When we transfer personal information internationally, we implement appropriate safeguards, including:

Standard Contractual Clauses approved by the European Commission ● Adequacy decisions by relevant data protection authorities
Other legally approved transfer mechanisms

7. Data Retention

We retain personal information for as long as necessary to:

Fulfill the purposes described in this Policy
Maintain your account and provide services
Comply with legal, regulatory, tax, and accounting obligations
Resolve disputes and enforce our agreements
Support business operations and recordkeeping

When information is no longer needed, we will securely delete or anonymize it. Retention periods vary based on data type and applicable legal requirements but typically range from 3-7 years for business records.

8. Your Rights and Choices

8.1 Access and Correction

You may request access to or correction of your personal information by contacting us at privacy@coregrid.com.

8.2 Rights for EEA, UK, and Swiss Users

If you are located in these regions, you have additional rights under GDPR and similar laws:

Right to Access: Request a copy of your personal information
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data (subject to legal obligations) ● Right to Restriction: Limit how we process your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact privacy@coregrid.com. We will respond within the timeframe required by applicable law (typically 30 days).

8.3 Marketing Communications

You may opt out of marketing emails by:

Clicking the "unsubscribe" link in any marketing email
Contacting us at privacy@coregrid.com
Updating your communication preferences in your account settings

Please note that you will continue to receive transactional and service-related communications.

8.4 California Privacy Rights

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and share, and the right to request deletion. California residents also have the right to opt out of "sales" of personal information. CoreGrid does not sell personal information as defined by the CCPA.

To exercise CCPA rights, contact privacy@coregrid.com or call [phone number].

9. Cookies and Tracking Technologies

Our website and platform use cookies and similar technologies to provide functionality, analyze usage, and improve user experience.

9.1 Types of Cookies We Use

Essential Cookies: Necessary for platform operation and security
Analytics Cookies: Help us understand how users interact with our services (e.g., Google Analytics)
Functional Cookies: Remember your preferences and settings
Marketing Cookies: Track the effectiveness of marketing campaigns (where applicable) Cookies

9.2 Managing

You can control cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. For more information, see our Cookie Policy [link to separate cookie policy if available].

10. Security

We implement reasonable technical, physical, and organizational security measures to protect personal information from unauthorized access, loss, misuse, or disclosure. These measures include:

Encryption of data in transit and at rest
Access controls and authentication mechanisms
Regular security assessments and monitoring
Employee training on data protection
Vendor security requirements

However, no security system is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Third-Party Links and Services

Our platform may contain links to third-party websites, services, or integrations. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

12. Children's Privacy

Our services are designed for businesses and are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Policy on our website with a new "Effective Date" and "Last Updated" date.

Material changes will be communicated through:

Prominent notice on our website
Email notification to account holders
In-platform notifications

Your continued use of our services after changes become effective constitutes acceptance of the updated Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

CoreGrid Power, Inc.

Email: privacy@coregrid.com

Address: 100 Church Street #800, New York, New York 10007

For EEA/UK Users:

If you are located in the European Economic Area or United Kingdom and have concerns about our data practices, you may contact our EU/UK representative at legal@coregridpower.com or lodge a complaint with your local data protection authority.

This Privacy Policy was last updated on November 4, 2025.