RI Shifted Energy DERMS Product Privacy Notice

1. Purpose and Scope

This Product Privacy Notice explains how Resource Innovations, Inc. ("RI," "we," "us," or "our"), through its RI Shifted Energy DERMS platform, collects, uses, discloses, retains, and protects personal information in connection with its energy-management, demand response, distributed energy resource management, connected-device, forecasting, optimization, customer engagement, and utility-reporting services, collectively referred to as the "Shifted Services."

This notice supplements the Resource Innovations Enterprise Privacy Policy by describing privacy practices specific to the Shifted Services. A utility, program administrator, or other client may provide additional privacy disclosures for a particular program or implementation. Applicable agreements may further define the responsibilities of RI and its clients.

If a utility or program administrator provides you with access to the Shifted Services, that organization may determine why and how your information is processed. RI may process that information on the organization's behalf and according to its instructions. Responsibility for certain processing activities may vary by implementation.

2. About the Shifted Services

The Shifted Services help utilities, program administrators, and participating consumers manage energy usage, support demand response and energy-efficiency programs, coordinate distributed energy resources, interact with connected devices, analyze energy performance, and support utility and grid operations.

Depending on the implementation, the Shifted Services may:

Receive utility customer and account information.
Receive energy consumption, meter, telemetry, and device data.
Monitor the condition and connectivity of supported devices.
Produce forecasts, capacity calculations, diagnostics, and operational insights.
Coordinate or send authorized device-control and dispatch instructions.
Support automated device actions and demand response events.
Perform measurement and verification, settlement, device enrollment qualification, participation verification, and utility-reporting activities.
Provide customer support and program administration.
Generate recommendations or operational decision support for utilities and program administrators.

3. Information We Collect

A. Account and Contact Information

We may collect:

Name.
Email address.
Telephone number.
Mailing or service address.
Username or other account identifier.
Utility account number.
Customer, premise, meter, device, or program identifier.
Internet Protocol (IP) address.
Registration, enrollment, consent, preference, and program-participation information.

B. Utility, Energy, and Program Information

We may collect:

Interval, hourly, daily, monthly, or other energy-consumption information.
Utility account, customer, meter, premise, and program information.
Demand response enrollment and participation information.
Event dispatch, response, override, and opt-out information.
Measurement and verification information.
Settlement, performance, participation, device enrollment qualification, and reporting information.
Grid-interaction and distributed energy resource information.

C. Device and Telemetry Information

When a supported device or operational system is connected to the Shifted Services, we may collect:

Device identifiers, including device ID, asset ID, serial number, MAC address, OEM device ID, group ID, and fleet information.
Device or asset type, firmware version, operational status, and related metadata.
Energy usage, power, voltage, frequency, resistance, current, relay status, relay activity, uptime, and similar operational telemetry.
Time and date of device transmissions.
Device schedules, event information, dispatch instructions, commands, overrides, and control activity.
Network, connectivity, and device-authentication information, such as signal strength, response time, and network connection information.
Device alarms, maintenance indicators, suspected failures, safety flags, and efficiency indicators.

D. Usage, Preferences, and Interaction Information

We may collect:

Event opt-out status and settings.
Time-of-use settings.
Vacation or EcoMode settings.
Device schedules and button settings.
Feature-use information.
Support interactions and diagnostic information.
Browser state and cookies used to maintain the service experience.
Website or portal analytics information, where enabled.

E. Location-Related Information

Certain implementations may process location-related information associated with a service address, utility account, device, energy resource, or network connection. This information may be used to support program administration, device management, demand response participation, device enrollment qualification, energy operations, and related services.

F. Information Received from Other Organizations

We may receive information from:

Utility clients and program administrators.
Device manufacturers and original equipment manufacturers.
Connected-home and energy platforms.
Metering, AMI, DERMS, and utility-system integrations.
Aggregators, energy-data providers, and authorized program partners.
Other service providers or systems authorized for the applicable implementation.

4. Information We Generate or Infer

The Shifted Services may derive information from utility, account, energy, device, telemetry, connectivity, event, and program information.

Depending on the implementation, derived information may include:

Baseline and capacity forecasts.
Estimated device or asset types.
Expected or delivered demand response capacity.
Energy-efficiency or time-of-use potential.
Device connectivity or performance predictions.
Suspected leaks, failed components, inefficiency, or maintenance conditions.
Control, dispatch, and operational recommendations.
Aggregated fleet, group, or program-performance information.

These outputs may support utility planning, capacity management, demand response dispatch, program operation, measurement and verification, settlement, maintenance, reporting, and operational decision support.

5. How We Use Information

We may use information to:

Provide, operate, maintain, and support the Shifted Services.
Create and administer accounts, enrollment, preferences, and program participation.
Connect with authorized utilities, meters, devices, DERMS platforms, and partner systems.
Monitor device status, connectivity, telemetry, and performance.
Schedule, initiate, manage, and evaluate demand response and grid events.
Send authorized device instructions or support automated device actions.
Generate energy, capacity, performance, and participation forecasts.
Perform measurement and verification, settlement, participation verification, device enrollment qualification, and utility-reporting activities.
Identify operational, connectivity, efficiency, safety, and maintenance conditions.
Provide customer and program support.
Analyze service use and improve authorized service performance.
Maintain security, reliability, continuity, and appropriate records.
Meet applicable contractual, legal, regulatory, audit, and reporting obligations.
Carry out purposes disclosed at collection or otherwise permitted by applicable law.

We do not automatically use information collected through one RI service in another RI service. Cross-product use must be permitted by the applicable agreement, client authorization, program requirements, or other appropriate authorization.

6. Forecasting, Machine Learning, and Automated Operations

Certain Shifted Services use forecasting, machine learning, optimization, and automated operational tools.

Inputs may include:

Utility customer and account information.
Device and meter identifiers.
Energy usage and telemetry.
Event participation and response information.
Opt-out preferences.
Device status and connectivity information.

Outputs may include:

Baseline and capacity forecasts.
Capacity-delivery calculations.
Dispatch or control instructions.
Efficiency, maintenance, connectivity, or safety indicators.
Device and asset classifications.
Operational recommendations for utilities or program administrators.

These tools may support:

Demand response dispatch and event management.
Grid and energy optimization.
Measurement and verification.
Settlement calculations, performance measurement, and operational reporting.
Connected-device operations.
Utility and program reporting.
Recommendations or operational decision support provided to utilities and program administrators.

RI does not use personal information collected through the Shifted Services to train unrelated external models. Any use of utility customer information, device telemetry, or program information for model training, tuning, improvement, forecasting, or optimization is limited to the authorized Shifted service purpose and applicable agreement.

7. When We Disclose Information

We may disclose information, as necessary for an authorized purpose, to:

The utility, program administrator, client, or partner sponsoring or administering the applicable program.
Cloud hosting and infrastructure providers.
Device manufacturers and connected-device platforms.
Utility, meter, AMI, DERMS, energy-data, grid-system, and authorized integration providers.
Customer support, communications, analytics, observability, customer-management, and service-management providers.
Auditors, professional advisers, and compliance providers subject to applicable confidentiality requirements.
Government, judicial, regulatory, or law-enforcement authorities when required or permitted by law.
Other parties at the individual's direction or with appropriate authorization.

8. Sale, Targeted Advertising, and Cross-Product Use

RI does not sell personal information collected through the Shifted Services.

We may use analytics technologies to understand service usage, maintain, improve, and support the Shifted Services.

We do not use personal information collected through the Shifted Services for cross-context behavioral advertising, targeted advertising, remarketing, audience sharing, or similar advertising purposes.

Information collected through one RI service is not automatically used by another RI service unless permitted by the applicable agreement, client authorization, or program requirements.

9. Cookies and Similar Technologies

Shifted portals or websites may use cookies and similar technologies to:

Maintain browser state.
Remember user preferences.
Support authentication and security.
Maintain service functionality.
Understand portal or service use.
Support authorized analytics.

10. Retention

Retention periods depend on the applicable utility program, contract, legal requirements, operational needs, and type of information involved.

We retain information only for as long as reasonably necessary to:

Provide the applicable service or program.
Meet utility, contractual, audit, reporting, settlement, and recordkeeping requirements.
Maintain security, continuity, recovery, and appropriate backup records.
Resolve disputes or enforce agreements.
Comply with applicable law.

When information is no longer required, it will be deleted, de-identified, or otherwise handled under applicable retention and disposal requirements.

11. Security

RI maintains administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and destruction.

No security measure can guarantee absolute security. We take reasonable steps to protect information consistent with applicable legal and contractual obligations.

12. Processing Locations

Information may be stored and processed in the United States and Canada.

13. Privacy Rights and Choices

Depending on applicable law, individuals may have certain rights regarding their personal information, including rights to access, correct, delete, or request information about how their data is processed.

To submit a privacy request, contact:

Resource Innovations Privacy Team
Email: Privacy@Resource-Innovations.com

We may need to verify your identity or authority and may request additional information before completing a request. Some information may be exempt from a request or retained as permitted or required by law.

If RI processes information only for a utility, program administrator, or other client, we may refer the request to that organization or assist it in responding.

14. Consent and Preferences

Where required, the applicable enrollment or service experience may request authorization or consent to:

Collect, use, and process information for service or program participation.
Connect to and interact with supported devices, energy resources, or utility systems.
Support enrollment, participation, performance measurement, settlement, reporting, authorized device control, demand response, grid-support, and related program operations.
Disclose information to a utility, program administrator, device manufacturer, connected-device platform, or authorized integration partner as necessary to operate the applicable service or program.

Authorization, enrollment, participation terms, consent records, or related records may include the date and time of acceptance, Internet Protocol (IP) address, method of authorization or consent, and version of the applicable privacy notice, terms, enrollment documentation, or program materials accepted.

You may withdraw consent where consent is the applicable legal basis for processing. Depending on the implementation, withdrawal of consent, revocation of authorization, removal of a connected device, or termination of program participation may affect your ability to participate in a utility program, receive program benefits, or use features that rely on the applicable information, device connectivity, or program authorization.

Some processing activities may continue where required to comply with legal obligations, maintain records associated with prior participation, support settlement or reporting requirements, protect the security and integrity of the Shifted Services, or otherwise fulfill obligations under applicable agreements.

15. Children's Privacy

The Shifted Services are not directed to children under 13, and RI does not knowingly collect personal information directly from children under 13 through the Shifted Services.

If we learn that we collected personal information directly from a child under 13 without required authorization, we will take appropriate steps to delete or otherwise address the information.

16. Program-Specific Privacy Notices

Certain utility programs, clients, or implementations may provide additional privacy disclosures that apply to their specific services, programs, or regulatory requirements.

17. Changes to This Notice

We may update this notice from time to time. Material changes will be reflected by an updated effective date.

18. Contact Us

For questions about this notice or the privacy practices of the Shifted Services, contact:

Resource Innovations Privacy Team
Email: Privacy@Resource-Innovations.com
Privacy Officer: Data Protection Officer
Mailing Address: 400 N. Michigan Ave., S600, Chicago, IL 60611