01 Introduction‍

At WattMonk Technologies Pvt. Ltd. (including its subsidiaries and affiliated companies, referred to as "WattMonk", "we", "us" or "the Company"), we understand that you are trusting us with confidential information. We believe you have a right to know our practices regarding the information we collect, use, and share when you use our services or interact with us in any manner.

WattMonk is a cloud-based web platform that enables organizations to manage design-specific requirements in the solar industry. This includes our suite of services and AI-powered products — including PlanSetIQ (our solar plan set design tool), the Solar Agent Hub, WattPay, and our Mobile Apps — as well as our main website at wattmonk.com.

A User may be either:

● An entity (e.g., an employer who has executed an agreement with WattMonk or with WattMonk's resellers or distributors) — referred to as a "Customer"; or

● A Customer's users (e.g., employees, sub-users, or users of the Website) — referred to as "End Users".

Customers and End Users are collectively referred to as "Users" or "you".

This Privacy Policy describes the policies and procedures of WattMonk on the collection, use, access, correction, and disclosure of your Personal Information on wattmonk.com, any of its subdomains, our products (including PlanSetIQ), and our Mobile Apps.

This Privacy Policy does not apply to third-party applications or software that can be accessed from the Site, Services or Mobile Apps — such as external applicant tracking systems, social media websites, or partner websites ("Third Party Services").

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

GDPR Controller: For the purposes of GDPR and European Economic Area data protection law, the data controller of data processed through the Service is the Customer. For data retained through the website or data processed not through the Service, WattMonk is the Controller.

02 Information We Collect

Non-Personal Information

Non-identifiable and anonymous information is gathered while Users are using the Service or the Website. This includes:

● Internet Protocol (IP) address

● Uniform Resource Locators (URL)

● Operating system, browser type, browser plug-in types and versions

● Screen resolution, Flash version, time zone setting

● Click-stream data on the Website and Services

● Time spent on specific pages and browsing behavior

Personal Information

We collect Personal Information provided consciously and voluntarily by a Customer, End User, or Customer's administrator, or through your use of the WattMonk platform. This may include:

● Name (first and last), nickname

● Phone number(s), email address

● Address, country, city, postcode

● Bank account details (bank name, account number, branch address) where required for payment processing

● Status in the system and workplace information

● IP address and other unique identifiers

● Any additional information the User chooses to provide

Location Information

We do not ask you to access or track any location-based information from your mobile device while downloading or using the Mobile Apps. However, if you are using the WattMonk Mobile App, your employer may enable location tracking technology for address-fetching purposes.

Contact Information

When you express interest in obtaining information about the Services, the Site, or Mobile Apps, WattMonk may ask for your name, email address, and phone number. This is used to communicate with you by responding to your requests, comments, and questions.

SMS Policy: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

Device Information

When using the Mobile Apps, we may request access to your device's camera and photo storage to allow you to take and upload pictures. You may revoke this access at any time at the device level. We also automatically collect device information such as operating system version, type, and hardware usage statistics.

PlanSetIQ & Product-Specific Data

When using PlanSetIQ or other WattMonk AI products, we may collect project-specific data including solar site information, equipment specifications, DXF files, design inputs, and plan set outputs. This data is used solely to provide the service and improve tool accuracy. It is not shared with third parties for commercial purposes.

03 How We Use Your Information

WattMonk uses collected information for the following purposes:

● To provide, operate, and maintain our Services and products

● To process transactions and send related information, including purchase confirmations and invoices

● To communicate with you — including responding to requests, questions, and support inquiries

● To send marketing and promotional communications (where you have opted in or where we have a legitimate interest)

● To improve our website, products, and services through usage analysis

● To detect, prevent, and address technical issues, fraud, or security concerns

● To comply with legal obligations

● To enforce our Terms of Service and other agreements

The GDPR legal basis for processing your information includes: contractual obligation (to perform our Services), legitimate interest (to communicate with you, improve our services, and ensure security), and consent (for marketing communications).

04 Cookies & Tracking Technologies

WattMonk uses cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

Types of Cookies We Use

● Essential Cookies: Necessary for the website to function. They cannot be switched off and are set in response to actions you take such as setting your privacy preferences, logging in, or filling in forms.

● Analytics Cookies: Allow us to count visits and traffic sources so we can measure and improve site performance (e.g., Google Analytics).

● Functional Cookies: Enable the website to provide enhanced functionality and personalisation such as remembering your preferences.

● Marketing Cookies: May be set through our site by advertising partners to build a profile of your interests and show relevant advertisements on other sites (e.g., Google Tag Manager, Meta Pixel).

Managing Cookies

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our Service may not function properly. You can opt out of analytics tracking via tools like the Google Analytics Opt-out Browser Add-on.

Web Beacons & Pixels

We may also use web beacons (pixel tags or clear GIFs) on our Site and in emails to track user behavior and measure communication effectiveness. These small electronic files record information such as whether you opened a particular email.

05 Sharing Your Information

Third-Party Services

At times, you may access Third-Party Services through the Site (e.g., by clicking on external links). We are not responsible for the privacy policies and/or practices of these Third-Party Services.

Service Providers

We may share your information with third parties who provide services to us, including:

● Email services to send marketing communications

● Mapping services

● Customer service or support providers

● Cloud computing infrastructure providers

● Payment processors

● Analytics providers

These third parties are authorized to use your Personal Information only as necessary to provide these services to us.

Sub-Processors

We employ and contract with Sub-Processors who perform certain tasks on our behalf (e.g., email service providers, mapping service providers, customer support providers). We may share Personal Information with Sub-Processors only as necessary to assist us. A list of WattMonk Sub-Processors that process Personal Information of individuals located in the EU is available upon request.

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, User information may be transferred as a business asset. You will be notified via email and/or a prominent notice on our Site of any change in ownership or uses of your Personal Information.

Legal Disclosure

We may disclose Personal Information where required to:

● Comply with any applicable law, regulation, legal process, or governmental request

● Enforce this Privacy Policy, including investigation of potential violations

● Detect, prevent, or address fraud, security, or technical issues

● Respond to user support requests

● Protect the rights, property, or safety of WattMonk, our users, or the public

We Do Not Sell Your Data: WattMonk does not sell, rent, or trade your Personal Information to third parties for their commercial purposes.

06 Data Retention

WattMonk retains data it processes on behalf of its Customers only for as long as required to provide the Service and as necessary to comply with its legal obligations, resolve disputes, and enforce its agreements.

● Backup files may be stored for up to 90 days for system continuity purposes.

● After termination of services by a Customer, an automated process permanently deletes data after 30 days. Once begun, this process cannot be reversed.

● Contracts and billing information may be retained as required by law, but at least five years from termination or expiration of the relationship.

● Anonymized aggregated data may be retained for as long as required to provide services.

● Metadata and statistical information may be retained in anonymized form for no longer than necessary to conduct our business.

Each User must keep appropriate backups of their data. WattMonk is not responsible for any deletion of data, breaches to the database, or erroneous data unless otherwise agreed with the Customer.

07 Data Security

We take the security of your Personal Information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. These measures include:

● SSL/TLS encryption for data in transit

● Encryption of sensitive data at rest

● Access controls and authentication mechanisms

● Regular security assessments and vulnerability testing

● Employee training on data privacy and security practices

● Incident response procedures for data breaches

While we strive to use commercially acceptable means to protect your Personal Information, no method of transmission over the Internet or method of electronic storage is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

08 International Data Transfers

WattMonk Technologies Pvt. Ltd. is headquartered in India and operates globally, including in the United States and the European Economic Area (EEA). Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

If you are located in the EEA, UK, or Switzerland, we ensure that transfers of your Personal Information are protected by appropriate safeguards, including:

● Standard Contractual Clauses (SCCs) approved by the European Commission

● Adequacy decisions where applicable

● Other lawful transfer mechanisms as required by applicable data protection law

By using our Services, you consent to the transfer of your information to countries outside your country of residence, including the United States and India, which may have different data protection rules.

09 Your Rights — GDPR & Data Protection Law

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under applicable data protection law:

👁 Right to Access: You may request a copy of the Personal Information we hold about you.

✏️ Right to Rectification: You may request correction of inaccurate or incomplete Personal Information.

🗑 Right to Erasure: You may request deletion of your Personal Information, subject to certain legal exceptions.

⏸ Right to Restrict Processing: You may request that we restrict the processing of your data under certain circumstances.

📦 Right to Data Portability: You may receive your data in a structured, machine-readable format and transfer it to another controller.

🚫 Right to Object: You may object to processing for direct marketing or where processing is based on legitimate interests.

🤖 Automated Decision-Making: You have the right not to be subject to decisions made solely by automated processing that significantly affect you.

↩️ Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at privacy@wattmonk.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10 California Residents — CCPA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

● Right to Know: You may request disclosure of the categories and specific pieces of Personal Information we have collected about you.

● Right to Delete: You may request deletion of your Personal Information, subject to certain exceptions.

● Right to Correct: You may request correction of inaccurate Personal Information we hold about you.

● Right to Opt-Out of Sale: WattMonk does not sell your Personal Information. However, if this changes, you will have the right to opt out.

● Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, please contact us at privacy@wattmonk.com or call us at (215) 671-6129. We will respond to verified requests within 45 days.

11 Children's Privacy

WattMonk's Services are not directed to individuals under the age of 16. We do not knowingly collect Personal Information from children under 16. If we become aware that a child under 16 has provided us with Personal Information without parental consent, we will take steps to delete such information.

If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at privacy@wattmonk.com and we will take appropriate action.

12 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activities tracked. WattMonk does not currently respond to browser DNT signals, as there is no consistent industry standard for compliance. However, you may use the cookie management options described in Section 4 to limit tracking on our Services.

13 Third-Party Links & Services

Our Service may contain links to third-party websites, applications, or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

14 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

● Update the "Last Updated" date at the top of this page

● Notify you by email (where we hold your email address) for material changes

● Post a prominent notice on our website for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes constitutes your acknowledgment of those changes.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Information, please contact us:

Company: WattMonk Technologies Pvt. Ltd.

Email: privacy@wattmonk.com

Phone: (215) 671-6129

Website: www.wattmonk.com

Subject Line: Privacy Request / Data Subject Request

For GDPR-related inquiries from EU/EEA residents, you also have the right to contact your local Data Protection Authority (DPA) if you believe your rights have been violated.

‍