Privacy Policy

Effective Date: February 20, 2026  |  Last Updated: February 20, 2026

GridFlow Technologies ("GridFlow," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, website, and services (collectively, the "Services").

1. Information We Collect

1.1 Information You Provide

• Account & Contact Information: Name, work email address, job title, company name, and phone number when you register for an account or submit a contact/demo request form.
• Platform Data: Utility asset data, geospatial data, work orders, sensor readings, and other operational data you upload or generate within the GridFlow platform.
• Communications: Content of emails, support tickets, or chat messages you send to us.

1.2 Information We Collect Automatically

• Usage Data: Pages visited, features used, session duration, and actions taken within the platform.
• Device & Log Data: IP address, browser type, operating system, and referral URLs.
• Cookies: We use essential cookies for session management and optional analytics cookies to improve the platform. You may opt out of analytics cookies via our cookie settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the GridFlow Services
• Process transactions and send related information
• Respond to comments, questions, and requests
• Send technical notices, updates, security alerts, and support messages
• Send marketing communications (you may opt out at any time)
• Monitor and analyze trends, usage, and activity to improve our Services
• Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Trusted third-party vendors who assist in operating our platform (e.g., cloud hosting, payment processing, analytics) under strict data processing agreements.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
• Legal Requirements: When required by law, court order, or governmental authority.
• Protection of Rights: To protect the rights, property, or safety of GridFlow, our users, or others.

4. Data Security

We implement industry-leading security measures including AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, multi-factor authentication, and regular third-party security audits. We are SOC 2 Type II certified and ISO 27001 compliant. However, no method of transmission over the Internet is 100% secure.

5. Data Retention

We retain personal data for as long as necessary to provide the Services and fulfill the purposes described in this Policy, unless a longer retention period is required by law. Upon account termination, we will delete or anonymize your data within 90 days, except where retention is legally required.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request a machine-readable export of your data.
• Objection / Restriction: Object to or restrict certain processing of your data.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time.

To exercise these rights, contact us at privacy@gridflow.io.

7. International Transfers

GridFlow operates globally. If you are located outside the United States, your data may be transferred to and processed in the United States or other countries. We implement appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers in compliance with GDPR and applicable law.

8. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact:

GridFlow Technologies
Email: privacy@gridflow.io
Postal: 123 Innovation Drive, Tech City, TC 12345, USA