Review Date: 30 July 2013

The Scope of This Privacy Policy

This Privacy Policy is incorporated into the GridSpy Terms of Service, and applies to the information obtained by us through your use of this website, the Products related to the purchased GridSpy Energy Monitoring Solution, the GridSpy Service and Subscription and other GridSpy products and services. Capitalised terms used in this Privacy Policy and not otherwise defined shall have the meanings provided for those terms in the Terms of Service.

Will This Privacy Policy Ever Change?

As GridSpy evolves, we may need to update this Policy to keep pace with changes in the Service, our Product and laws applicable to us and you; we will, however, always maintain our commitment to respect your privacy.

We will post any revisions to this Policy, along with their effective date, in an easy to find area of our web site, so we recommend that you periodically check our website to stay informed of any changes. We will ask for your consent to such changes if required by applicable law; in other cases, please note that your continuation of your GridSpy Service and online account after any change means that you agree with, and consent to be bound by, the new Privacy Policy. Any purchase of GridSpy Product constitutes agreement with the terms of this Privacy Policy. If you disagree with any part of this Policy or changes to this Policy and do not wish your information to be subject to the Policy, you will need to close your account before the new Policy becomes effective.

I. Information Collection and Use

Information GridSpy Collects

We collect very little personal information about our users. A list of the “Personal Information” GridSpy may collect, and why we collect it, follows:

Your username, email address, organisation details (if relevant) and contact preferences.

This lets us create your online dashboard account, provide you with convenient and personalised access to your account, and deliver and support the Service. This information also helps us communicate with you about your use of the Service, Product support and announcements and software/firmware updates, as well as respond to your requests for assistance (including providing account verification support if you’re having difficultly accessing your account).

The geographic area where you use your computer and mobile devices

(as indicated by an IP address or similar identifier), and the language you select when interacting with the GridSpy Service. We collect this information in order to help us deliver and support the GridSpy Service, including by localising your GridSpy experience. It also helps us improve our understanding of how our users use the Service. We keep records on the GridSpy products and services you use. This information helps us deliver and support the Service and the Products you use and respond to your requests for assistance. We also collect this information to improve our understanding of how our customers use the Service.

Any Content and Data you or your devices add to your account

we may view at any time. We don’t use this information for any purpose other than to make sure it is available to you and functioning correctly when you use the Service. We will never use your personal, organisational, Content or Data information for marketing unless you expressly permit it. We will never sell your personal, organisational, Content or Data information.

GridSpy’s website, Products and applications such as the Cloud Dash also collect and receive information from your computer or mobile device, including the activities you perform within your account, the type of hardware and software you are using (for example, your operating system or browser), and information obtained from cookies.

Gathering this described above information helps us administer the Service, provide convenient and personalised user access, improve the features and usability of our Products and Service, analyse user trends and information about users’ use of our Service (including the extent to which our users make public their dash or keep private and how many users view the dash), collect information about use and growth of the Service in specific regions, and evaluate the content and organisation of our site.

We do NOT collect information about you to deliver any targeted third-person advertising to you, or track your visits to any third-party websites.

We may automatically gather non-personally identifiable information that indicates your association with one of our business partners or certain promotions. We use this information to determine the amount of revenue share payments to make to partners with whom we might have such arrangements and to provide anonymous aggregate reports.

Communicating with GridSpy

We may need to email you with information relating to your account and Service and products you use. From time to time, we may want to contact you with information about GridSpy Product announcements, software updates and GridSpy special offers. You may opt out of such communications at any time by clicking the “unsubscribe” link found within GridSpy email Product and Service updates.

II. Information Access and Disclosure

GridSpy is not in the business of selling or renting user information, and we only disclose information when:

• We have your explicit consent to share the information.
• We need to share your information with affiliated and unaffiliated service providers who process data on our behalf and subject to strict data protection requirements.
• We need to share your information with affiliated and unaffiliated service providers to fulfill your Product or Service requests.
• We believe it is necessary to investigate potential violations of our Terms of Service, to enforce those Terms of Service, or where we believe it is necessary to investigate, prevent or take action regarding illegal activities, suspected fraud or potential threats against persons, property or the systems on which we operate the Service.
• We determine that the access, preservation or disclosure of information is required or permitted by law to protect the rights, property or personal safety of GridSpy and our users or is required to comply with applicable laws, including compliance with warrants, court orders or other legal process.
• We need to do so in connection with the sale or reorganisation of all or part of our business, as permitted by applicable law.

Some applications or third parties that work with GridSpy and you may ask for permission to access your Content or other information about your account. Those applications will provide you with notice and request your consent in order to obtain such access or information. Please consider your selection of such applications, and your permissions, carefully.

Will GridSpy Ever Make Any of My Personal Information, Data or Content Public?

GridSpy will not publish any information, personal, organisational or site related without your express permission. You may choose to make your online dash public and will mean your site Data and Content are open to any online viewer. Any information that you post in these locations can be read, collected and used by anyone and could enable others to send you unsolicited messages. GridSpy enables you to determine whether or not to be public or private. GridSpy is not responsible for any publication or use of any Personal Information you choose to post in a dash open to the public.

III. Data Storage and Transfer

Secure Data Storage

When you use GridSpy products and the GridSpy Service Content and uploaded Data will be stored in the cloud on secure servers. If for any reason you take the GridHub offline, once on again it will synch in with the cloud and with the GridSpy Service, that Content will be stored on our servers, which are located in secure locked patrolled unmarked offices in New Zealand.

Please be aware that Personal Information and Content and Data submitted to GridSpy will be transferred to a secure data center in New Zealand. If you upload or post information to your online dash you are confirming your consent to such information, including Personal Information and Content, and site Data and energy use data being hosted and accessed in New Zealand.

Security of Data and Content on my Online Dash

GridSpy is committed to protecting the security of your information and takes reasonable precautions to protect it. We will never willfully endanger your privacy or allow third party access to your personal or private site Content and Data without express permissions. However, Internet data transmissions, whether wired or wireless, cannot be guaranteed to be 100% secure, and as a result, we cannot ensure the security of information you transmit to us; accordingly, you acknowledge that you do so at your own risk. Once we receive your data transmission, we make all commercially reasonable efforts to ensure its security on our systems.

Your GridSpy password is protected by encryption, is stored as a salted hash and only you have access to it. You take responsibility to keep your password private and change it regularly.

Your personal information and data stored in our systems is protected by various physical, electronic and procedural safeguards. It is housed in a secure facility, and GridSpy restricts physical and network access to this facility to select trained staff. We regularly evaluate our technologies, facilities, procedures and potential risks to maintain the security and privacy of our users’ data.

Certain GridSpy Services and Product support the use of standard SSL encryption to protect data transmissions. However, this is not a guarantee that such data transmissions cannot be accessed, altered or deleted due to firewall or other security software failures.

If GridSpy learns of a security system breach, we may attempt to notify you and provide information on protective steps, if available, through the email address that you have provided to us or by posting a notice on our web site.

IV. Information Deletion

What Happens If I Want to Stop Using GridSpy?

You cannot delete Content and Data you have posted to your online dash but you can request this of GridSpy at any time. You can stop using GridSpy at any time, please send us an email to request this. It is likely we will make a time to talk to you about this to confirm it is in your best interests to do this. Deleted Content may continue to exist on GridSpy’s back-up and archiving systems for up to one year due to the nature of those systems’ operations. If you cancel your account, the Content and Data in your account will not be deleted unless you purposely request a deletion of that information or if Gridspy uses its discretion to do so.

What Happens If GridSpy Closes My Account?

If GridSpy closes your account due to a Terms of Service violation, then you may contact GridSpy to request deletion of your data, and GridSpy will evaluate such requests on a case by case basis, pursuant to our legal obligations.

V. Contact Us

How Can I Contact GridSpy?

GridSpy welcomes your feedback regarding this Privacy Policy. If you have questions, comments or concerns about this Policy, please contact us by email at info@gridspy.com or postal mail at:

GridSpy LTD
PO Box 11 767
Ellerslie
Auckland 1542
New Zealand

You can contact directly GridSpy staffers here.