Privacy Policy

What Constitutes Personal Data

For the purposes of this Privacy Policy, "Personal Data" refers to any information relating to an identified or identifiable individual. It does not include aggregated, de-identified, or anonymized data that cannot reasonably be used to identify a specific person.

Information We Collect

We collect only the Personal Data that is reasonably necessary to fulfill the technical, operational, and research purposes outlined in this policy:

• Information You Provide Directly: When you contact us by email, request access to technical papers, submit inquiries regarding pilot deployments, or sign up for research updates, we collect your name, institutional or professional email address, organization/affiliation, and the contents of your inquiry.
• Technical and Usage Data: When you visit the Website, our servers automatically log standard network request metadata, including your Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, and timestamps.
• Cookies and Minimal Analytics: We use minimal, privacy-conscious session cookies and analytics tools solely to assess website performance, monitor system stability, and improve user navigation. We do not deploy invasive cross-site tracking, behavioral advertising cookies, or third-party ad pixels.

Legal Bases for Processing (GDPR, PDPA, and Applicable Laws)

Where data protection laws (such as the EU/UK General Data Protection Regulation or the Singapore Personal Data Protection Act) require a legal basis for processing, we rely on the following grounds:

• Legitimate Interests: Operating, maintaining, and securing our Website; responding to technical and professional inquiries; analyzing aggregate traffic to ensure technical performance; and engaging with industry researchers and partners.
• Consent: Where you have explicitly opted in to receive direct technical publications, research newsletters, or announcements. You may withdraw your consent at any time.
• Performance of a Contract: Fulfilling preliminary or formal requests, technical evaluations, or non-disclosure agreements prior to or during a pilot engagement.
• Legal and Regulatory Compliance: Satisfying applicable statutory obligations, subpoenas, or legal proceedings, and enforcing our Terms of Use.

How We Use Personal Data

We process collected Personal Data exclusively for the following purposes:

• To administer, operate, and maintain the security and availability of the Website
• To evaluate and respond to research collaborations, pilot inquiries, and technical feedback
• To distribute requested position papers, RFC responses, and architecture updates
• To investigate and prevent fraudulent activity, unauthorized access, or technical abuse of our infrastructure
• To comply with applicable legal, regulatory, and reporting requirements

Data Sharing and Third-Party Disclosures

We do not sell, rent, or trade your Personal Data. We share information only under strict confidentiality controls in the following circumstances:

• Infrastructure and Service Providers: We engage trusted third-party service providers (e.g., secure cloud hosting, technical infrastructure monitoring, and encrypted email delivery). These providers process data solely on our behalf and in compliance with strict contractual data protection terms.
• Legal Requirements: We may disclose Personal Data if required to do so by law, regulation, subpoena, or competent governmental authority, or where we believe in good faith that disclosure is necessary to protect our legal rights, physical safety, or the security of our platform.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or transfer of core assets, personal data may be transferred as part of the transaction, subject to customary confidentiality assurances and continued adherence to this Privacy Policy.

International Data Transfers

Wattness operates globally and coordinates across various regional power market domains. Your Personal Data may be stored and processed on secure cloud infrastructure located outside your jurisdiction of residence. Where cross-border data transfers occur, we implement appropriate standard contractual clauses, technical encryption, and organizational safeguards to ensure that your data receives a level of protection comparable to that required under applicable local laws.

Security and Safeguards

We implement industry-standard administrative, physical, and technical safeguards to protect Personal Data against unauthorized access, destruction, loss, alteration, or disclosure. All web traffic to the Website is encrypted in transit via Transport Layer Security (TLS/HTTPS), and internal access to diagnostic logs is strictly restricted to authorized engineering personnel on a need-to-know basis.

However, no electronic transmission over the internet or automated storage system can be guaranteed to be entirely secure. You acknowledge that you provide information at your own risk.

Data Retention

We retain Personal Data only for as long as reasonably necessary to fulfill the purposes for which it was collected, including the satisfaction of legal, accounting, dispute-resolution, or audit requirements. Once data is no longer required, it is securely deleted, overwritten, or irreversibly anonymized.

Your Rights and Choices

Depending on your jurisdiction (including under the GDPR, UK GDPR, California Consumer Privacy Act / CPRA, or Singapore PDPA), you may hold specific statutory rights regarding your Personal Data, including:

• Access: The right to request confirmation of whether we process your data and to obtain a copy of that data.
• Rectification: The right to request the correction of inaccurate or incomplete information.
• Erasure: The right to request the deletion of your Personal Data, subject to applicable legal retention exemptions.
• Restriction and Objection: The right to object to or request restrictions on certain processing activities based on legitimate interests.
• Data Portability: The right to receive your data in a structured, machine-readable format.
• Withdrawal of Consent: The right to revoke consent at any time where processing was based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@wattness.ai. We will respond to verified requests within the statutory timeframe mandated by applicable law (typically 30 days).

Children's Privacy

The Website and its associated technical content are directed solely at professionals, researchers, and individuals aged eighteen (18) and older. We do not knowingly collect or solicit Personal Data from children under the age of eighteen. If we become aware that an individual under eighteen has submitted Personal Data to us, we will promptly delete that information from our records.

Third-Party Links

The Website may contain links to external websites, public regulatory repositories (such as FERC or state utility commission dockets), independent system operators (ISO/RTO portals), or open standards bodies. Wattness is not responsible for the privacy practices, content, or policies of third-party websites. We encourage you to review the privacy documentation of any external sites you visit.

Updates to This Privacy Policy

Wattness reserves the right to amend or update this Privacy Policy periodically to reflect changes in our technical practices, operational scope, or legal obligations. When updates are published, the "Last Updated" date at the top of this document will be revised accordingly. Material changes will be accompanied by a prominent notice on the Website.

Contact and Inquiries

If you have questions, comments, or requests regarding this Privacy Policy or our data protection practices, please contact: