Privacy Policy

In using the services on the sites www.voltus.co and voltapp.voltus.co (“VoltApp”), you are
deemed to have read and agreed to the following Privacy Statement. “Client”, “Customer”,
“You” and “Your” refers to you, the person accessing this website. "Personal Information" refers
to information by which you may be personally identified, as this term and similar terms are used
in applicable law. "Client Records" refers to documents, agreements, or other materials that are
provided by a Client or Customer to us or that are generated by our relationship with other third
parties or partners, and that do not contain our proprietary information. In some circumstances,
Client Records may include your Personal Information. “The Company”, “Ourselves”, “We” and
“Us”, refers to our Company – Voltus, Inc. and its subsidiaries. “Party”, “Parties”, or “Us”, refers
to both the Client and ourselves, or either the Client or ourselves. Any use of the above
terminology or other words in the singular, plural, capitalization and/or he/she or they, are taken
as interchangeable and therefore as referring to same.

Privacy Statement

Voltus is firmly committed to protecting your privacy.

Only authorized employees on a need-to-know basis have access to any Personal Information
collected from you. We regularly review our systems and data to ensure the best possible service
to our Customers. We are, however, not liable for any damage caused by theft of data due to
actions outside the control of Voltus, its employees and its affiliates.

Our products, services, websites, and apps are designed for businesses and are not intended for
personal or household use. Accordingly, we treat all Personal Information covered by this
Privacy Statement as pertaining to individuals acting as business representatives (rather than in
their individual capacity). If you are a residential homeowner participating in a smart thermostat
savings program through a Voltus partner, or any other similar residential or consumer
programs, our privacy terms applicable to your participation in the programs are located here.

Confidentiality

Client Records are regarded as confidential and therefore will not be shared with any third party,
other than our affiliates, partners or service providers who have agreed to keep such information
confidential. Upon reasonable notice and request, Clients may request to see or receive copies of
the Client Records we keep. Clients are requested to retain copies of any literature issued in
relation to the provision of our services. Where appropriate, we shall issue Clients with
appropriate written information, handouts or copies of records as part of an agreed contract, for
the benefit of both Parties.

Relationship with Your Utility or Grid Operator

Voltus may provide its solution through your utility or grid operator energy portal under their
brand or a joint brand with Voltus. In this scenario your energy utility or grid operator will
provide us with your energy usage information under strict confidentiality restrictions. The
Personal Information you provide on your utility or grid operator branded or co-branded portal,
such as email address, home appliance and demographic information, may be shared between
your utility or grid operator and us and will not be shared with any third-party without your
explicit consent.

Your Personal Information

Voltus may collect your name, business email, and phone number. This information is used for
notifications during Demand Response dispatches and to send important energy market updates.
Additionally, your email address may be used as a component of your access credentials to
VoltApp. If you are listed as a billing contact for your business, your name and email address, as
well as your business’s bank account number and routing number, may be used by our third-
party payment provider during the bank account verification process.

The chart below shows the categories of Personal Information we collect, the business purposes
for which we use that information, and the categories of third parties to whom we disclose this
Personal Information for business purposes.

In the preceding 12 months, we may have collected any and all of these categories of Personal
Information from you, and disclosed such Personal Information to third parties for a business
purpose as described in this chart.

We will not sell, share, or rent Personal Information we may receive from you to any third party
or use your e-mail address for unsolicited mail. Any emails sent by this Company will only be in
connection with the provision of agreed services and products.

Voltus does not knowingly collect or process personal information of individuals under age 16 or
data that would be considered "sensitive" under applicable privacy laws.

Your Banking Information

If you are listed as a billing contact for your business, you may be asked for bank account
information, including routing numbers and account numbers. This information will be provided
to our third-party payments provider for verification and to enable direct, automatic payments to
your business for Demand Response performance. Voltus does not store your banking
information, and this information does not pass through a Voltus server. If you would prefer to
receive payments via paper check, please contact your account manager or email support
at support@voltus.co.

Log Files & IP Addresses

We may collect IP addresses to analyze trends, administer the site, identify problems accessing
the site, and gather broad demographic information for aggregate use. Additionally, for systems
administration, detecting usage patterns and troubleshooting purposes, our web servers
automatically log standard access information including browser type, access times/open mail,
URL requested, and referral URL. This information is not shared with third parties and is used
only within this Company on a need-to-know basis. Any individually identifiable information
related to this data is not used in any way different to that stated above without your explicit
permission. Sensitive data (such as passwords) is not logged.

Energy Demand Data

Voltus receives energy demand data from its own network of meters (Voltlets), from your utility
or grid operator, and potentially from third-party metering providers. This data is used to track
demand response performance in real time and to secure demand response payments from
program operators. This data may be shared with your utility or grid operator in order to validate
demand response performance and secure earnings. This data is not shared with any third parties
not named in your Customer agreement without your explicit consent.

Cookies

Like most interactive web sites, we use cookies to enable us to retrieve user details for each visit
and to maintain a secure session while browsing www.voltus.co. Some areas of our website may
not function properly without enabling cookies. Some affiliate partners may also use cookies.

To view and change your cookie preferences, click “cookie preferences” at the bottom of our
website here.

Our website is not configured to recognize "Do Not Track" signals.

Marketing Outreach

Voltus uses email outreach to keep potential Customers and stakeholders informed of industry
trends, product updates, upcoming events, Voltus news, and other select content. Email addresses
are collected through multiple sources, including forms filled on our website, trade show
attendance, communication with our team, public records, and webinar attendance. Voltus
collects this information in order to communicate with you effectively and respond to your
requests. We strive to provide relevant and interesting content. In order to do this, we need to
process information about you, and therefore do so on the basis of legitimate interest. If you wish
to unsubscribe, please email support@voltus.co.

Use of Personal Information

We generally collect, use and disclose the Personal Information, as well as other information,
identified in this Privacy Statement to operate our businesses and to serve our Customers,
including for the following purposes (the “Purposes”):

• to communicate with you regarding demand response events, performance, ongoing
  account support, or any concerns or queries you may have;
• to verify Customers’ identity with utilities and grid operators, authorized partners, and
  grid operators for program participation
• to share the required information with utilities and grid operators to process information
  regarding your performance and payment settlements;
• to share with third party payment providers (as described above) to issue payments;
• to communicate with you regarding any changes to this Privacy Statement or to any of
  the programs you’re enrolled in;
• with consent, or as permitted by law, to communicate with you regarding promotions,
  contests, offers, incentives, rewards, surveys, questionnaires and other pertinent matters
  such as but not limited to products and services available through partners that may be of
  interest to you;
• to develop, enhance, market and/or provide products and services;
• for marketing and analytics purposes, as set out in the Marketing Outreach section above;
• to comply with applicable legislation and regulatory requirements; and
• for investigation and law enforcement purposes.

We retain your Personal Information only as long as necessary for the Purposes described above
or otherwise disclosed to you when you provide your personal information.

System Security

We have put in place measures designed to secure our systems and Personal Information we
collect and store from unauthorized access, use, alteration, and disclosure. Please note that any
information transmitted to us electronically may not be secure, especially during transmission.
We recommend that you do not use unsecure channels to communicate with us. Please be aware
that, despite our best efforts, no security measures are perfect or impenetrable, and we cannot
guarantee the security of any information transmitted to us through our website or otherwise.

Your California Privacy Rights

If you are a California resident, you may have certain privacy rights, including:

• The right to confirm whether we process your Personal Information;
• The right to request access to or delete certain Personal Information (subject to certain
  exceptions);
• The right to request correction of inaccuracies in your Personal Information;
• The right to request your Personal Information in a portable format; and
• The right to limit or opt out of certain forms of Personal Information processing.

To exercise any of these rights, please contact us (or contact us through an authorized agent)
using the information below in the "Contact" section of this Privacy Statement. We review,
verify, and process all requests in accordance with applicable law.

We will not retaliate against you or otherwise discriminate against you for exercising any of your
privacy rights.

Contact

If you have any questions about Voltus’s privacy policy, please contact us at compliance@voltus.co