Privacy Policy Effective Date: January 1, 2025 Ndili Technologies, Inc (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile apps, use our services, and when you authorize us to access your energy usage data through PG&E’s Share My Data program. Please read this Privacy Policy carefully. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. 1. Information We Collect We may collect the following types of information: a. Personal Information Name Email address Phone number Mailing address Account credentials b. PG&E Energy Usage Data When you authorize us through PG&E’s Share My Data program, we may collect: Electric and/or gas usage data Service account number Meter data, including interval usage data Billing and payment history c. Automatically Collected Information When you visit our website, we may automatically collect: IP address Browser type Operating system Device identifiers Usage data and analytics through cookies and similar technologies 2. How We Use Your Information We use the information we collect for the following purposes: To provide, operate, and maintain our services To deliver the services you have authorized via PG&E’s Share My Data program To communicate with you, including responding to inquiries and providing updates To analyze usage to improve our services To comply with applicable laws, regulations, and contractual obligations To protect against fraud and unauthorized access For any other purpose disclosed to you at the time we collect your information, with your consent 3. Sharing of Information We do not sell your personal information or your PG&E energy usage data. We may share your information only in the following circumstances: With Service Providers: We may share information with trusted third-party vendors who help us provide our services, subject to strict confidentiality agreements. As Required by Law: We may disclose information if required to comply with legal obligations, law enforcement requests, or government regulations. In Business Transfers: If our company is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. With Your Consent: We may share your information for any other purpose with your explicit consent. 4. Data Security We use reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security. 5. Data Retention We retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. If you revoke your authorization through PG&E’s Share My Data program, we will cease collecting new data from PG&E and will delete previously collected data as required by PG&E’s terms and applicable law. 6. Your Rights and Choices Access and Control: You have the right to: - Access and review your information - Request corrections to your information - Withdraw your authorization at any time through PG&E’s Share My Data program portal - Request deletion of your data in accordance with applicable laws Cookies: You can set your browser to refuse cookies or alert you when cookies are being sent. However, some features of our website may not function properly without cookies. 7. Children’s Privacy Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly. 8. Third-Party Links Our website may contain links to other websites not operated by us. We are not responsible for the privacy practices or the content of third-party websites. 9. Changes to This Privacy Policy We may update this Privacy Policy from time to time. We will post the updated version on our website and update the “Effective Date” above. We encourage you to review this policy periodically. 10. Contact Us If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at: Ndili Technologies, Inc Email: support@ndilitechnologies.com