DATA RIGHTS

People should be able to understand how their data is being used, so GRID has chosen to use as few legal and technical terms as possible in this document.

1. Executive Summary

GRID collects power monitoring data through IoT sensors and related environmental data
Customer owns Customer specific data; GRID owns environmental background data
We protect your data through strong security measures
You have rights to access, correct, and delete your data
We only share your data with your consent or when necessary for service delivery
Contact [email protected] with any questions

2. Legal Basis for Data Processing

GRID processes your data based on the following legal grounds:

Contract Performance

Processing necessary to provide the Services you have contracted for
This includes collecting power monitoring data, analyzing usage patterns, and providing insights through the CurrentSee platform
Managing your account and providing customer support

Legitimate Interests

Improving and developing our Services
Ensuring network and data security
Preventing fraud and unauthorized access
Conducting business analytics to understand better and serve our customers
These interests are balanced against your privacy rights, and implemented safeguards

Legal Obligations

Complying with regulatory requirements
Responding to legal requests from authorities
Maintaining required business records

Consent

Marketing communications (where applicable)
Collection of sensitive Customer-Specific Data
Sharing of Customer-Specific Data with third parties beyond what is necessary for Services delivery
You can withdraw your consent at any time by contacting [email protected]

3. Definitions

“GRID” means the company Grid Clarity.
“IoT Sensor” means the physical devices provided by GRID that collect and transmit data but do not permanently store data about the physical environment in which it is placed after successfully transmitting data.
“Customer-Specific Data” means any power monitoring data generated by, or collected through, a Customer’s use of the IoT Sensor and/or the Services, including but not limited to power sensor readings, usage patterns, and configurations specific to that Customer’s account.
“General Background Data” means data collected from publicly available sources or derived from environmental conditions surrounding but not explicitly linked to any individual Customer power network, such as but not limited to weather conditions, air quality, radiation including visible light, infrared, radio waves, X-rays, and ultraviolet radiation, sounds, vibrations, movement, or other EMF waves from outside the power network infrastructure.
“Services” means the software applications, platforms, and functionalities GRID provides accessible through the CurrentSee website, CurrentSee APIs, or other designated means.
“Customer” means any individual or entity that has entered into an agreement with GRID to use the Services and IoT Sensor(s).
“Processing” means any operation performed on data, including collection, storage, analysis, or sharing.

4. Data Ownership

Customer-Specific Data: Customer owns all rights, titles, and interests in and to Customer-Specific Data. GRID does not claim ownership of Customer-Specific Data.
General Background Data: GRID retains all rights, titles, and interests in and to General Background Data. This data may be used to enhance the Services or IoT sensors, conduct research, and improve GRID offerings for its Customers.

5. Data Collection and Minimization

Customer-Specific Data:

The IoT Sensor collects data such as voltage, current, impedance, harmonics, and waves. This data is transmitted to the Services and is associated with your account. GRID collects information about your use of the Services, including features used, pages visited, and interactions with the platform. GRID may also collect information you provide directly, such as during account registration or customer support interactions. GRID will obtain your explicit written consent before collecting any sensitive Customer-Specific Data.

General Background Data: GRID may collect General Background Data from weather APIs, government databases, public research datasets, and additional sensors embedded into the IoT Sensor. This data may provide context and insights within the Services and is not linked to individual Customers.

6. Data Usage

Customer-Specific Data: GRID uses Customer-Specific Data to:

Provide and operate the Services, including delivering IoT sensor readings, generating reports, and enabling platform functionality.
Personalize your experience by providing customized insights and recommendations based on your data.
Communicate with you, including sending service updates and notifications and responding to your inquiries.
Improve the Services, including analyzing usage patterns, troubleshooting issues, and developing new features.

General Background Data: GRID use General Background Data to:

Enhance the Services for all Customers, such as providing environment-related insights.
Conduct research and analysis to improve our offerings and understand environmental influences on readings and trends.
Develop aggregated and anonymized datasets that may be used for research, reporting, or business development purposes.

7. Data Sharing

Customer-Specific Data: GRID will not share your Customer-Specific Data with third parties except:

With your consent in writing,
With service providers who assist us in providing the Services (e.g., data storage, advanced processing, etc.) and are bound by confidentiality obligations, meet minimum security requirements, and are regularly audited for compliance;
As required by law or legal process; or
To protect the rights, property, or safety of GRID, our Customers, or others.

General Background Data: GRID may share General Background Data with third parties:

This includes research partners, non-utility customers, or other entities for analytical or collaborative purposes.
In aggregated and anonymized formats that do not identify individual Customers.

8. Data Security and Breach Notification

Security Measures:

GRID implements appropriate technical and organizational security measures to protect Customer-Specific Data and General Background Data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit and at rest.
Access controls and authorization procedures.
Regular security assessments and vulnerability testing.
Adherence to industry best practices and security standards.
Regular third-party audits.

Breach Notification:

Customers will be notified within 72 hours of breach discovery
Notification will include:

Nature of the breach
Categories of data affected
Approximate number of records affected
Likely consequences
Measures taken or proposed

9. Data Retention and Portability

Customer-Specific Data:

GRID retains Customer-Specific Data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements.
We make Customer-Specific Data available for export in common formats (CSV, JSON) and fulfill export requests within 30 days of receiving them.

General Background Data:

GRID retains General Background Data for as long as it is necessary for the purposes for which it was collected and as is permitted by applicable law.

10. Data Subject Rights

You have the following rights concerning your Customer-Specific Data:

Access: You can request, authorize, and access your Customer-Specific Data.
Rectification: You can request correction of inaccurate or incomplete Customer-Specific Data.
Erasure: Deletion is subject to retention requirements of Section 9.
Portability: Export in machine-readable format.

To exercise these rights, contact GRID at [email protected].

11. Cookies and Tracking

Types of Cookies Used:

Essential cookies for service operation
Analytics cookies (with consent)
Preference cookies

12. International Data Transfers and Access

For Customers accessing GRID Services and data in countries outside the country of data collection.
In that case, the Customer or Customer’s delegate is solely responsible for ensuring access, transfer, and protection comply with applicable data protection laws and regulations between the hosting and access countries.

13. Updates to the Data Rights Document

GRID may update this Data Rights Document from time to time. GRID will notify you of any material changes by periodically posting the updated document on GRID’s website or through other communication channels.

14. Contact Information

General inquiries: [email protected]
Legal matters: [email protected]
Phone: +1-804-918-1982
Address: 7405 Whitepine Road, Richmond, VA 23237, USA

15. Revision Date

January 16, 2025.