Overview

When you use our services or our software, EdgeStream, you’re trusting us with your information. This Privacy Policy applies to all the services and products offered by Brompton Group and is meant to help you understand what information we collect, why we collect it, and how you can manage your information.

Information Brompton Group Collects

We collect information to provide better services to all our users and to better optimize your operations. The data Brompton Group collects depends on how you interact with us.

When you create an EdgeStream account, download the EdgeStream application, contact us via our website or email, browse our website, or otherwise interact with Brompton Group, we may collect a variety of information, including:

• Account Information: Your EdgeStream account and related details, including username, email address, phone number, and devices registered
• Device Information: Data from which your device could be identified, such as device serial number, or about your device, such as make/model or browser type
• Contact Information: Data, such as name, email address, physical address (customer address), phone number, or other contact information
• Usage Data: Data about your activity on and use of our offerings, such as app downloads, production interaction, browsing and search history, crash data, performance and other diagnostic data, and other usage data
• Location Information: Data about what customer you are associated with and IP address to help understand who is using our services, which also helps identify and prevent fraud
• Operations Information: Data about your operations, such as HVAC, BMS, and utility usage data
• Other Information You Provide to Us: Details you provide in communications with Brompton Group, including interactions with customer support

You are not required to provide the personal data that we have requested; however, if you choose not to do so, we may not be able to provide you with our products or services or respond to requests you may have.

Why Brompton Group Collects Data

We use the information we collect to power our services, to communicate with you, for security and fraud prevention, and to comply with law. We may also use personal for other purposes with your consent.

Brompton Group uses your personal data only when we have a valid legal basis to do so. Therefore, we may rely on your consent or the fact that use is necessary to fulfill a contract with you, protect you and other users, or to comply with law.

Brompton Group may use your personal data for the following purposes:

• Provide Our Services: Brompton Group collects personal data necessary to power our services, which may include data collected to improve our offerings, to conduct internal audits or data analysis, or to troubleshoot.
• Communicate With You: Brompton Group collects and uses personal data to respond to communications, to alert you regarding operational issues, to request information or feedback, or to provide other relevant information. To provide alerts and communications regarding changes to our terms, conditions, or policies, which are important to your interaction with Brompton Group and our application EdgeStream, you may not opt out of receiving these important notices.
• Security and Fraud Prevention: To protect individuals, customers, and Brompton Group from loss prevention or to prevent fraud, we use information to improve the safety and reliability of our services, including detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm Brompton Group or our customers.
• Comply with Law: Brompton Group uses data as required to comply with applicable law.

Brompton Group does not use algorithms or profiling to make any decision that would significantly affect you without the opportunity for human review. Brompton Group also does not use or disclose sensitive personal data for any purposes that would require a user to exercise a right to limit processing according to California law.

Retaining Your Data

Brompton Group retains personal data only for so long as necessary to fulfill the purposes for which it was collected, including as described in this Privacy Policy, or as required by law. When assessing retention periods, we examine whether it is necessary to retain the personal data collected and, if retention is required, work to retain the personal data for the shortest possible period permissible under law.

Your Privacy Controls

When you’re signed in to your EdgeStream account, you can review and update information in Settings, which allows you to manage your contact information and password.

Sharing Your Information

Brompton Group does not share personal data with third parties for their own marketing purposes, nor does Brompton Group sell your personal data, including as “sale” is defined in California, or “share” your personal data as that term is defined in California.

Brompton Group may share personal data with our developers, service providers who act on our behalf, our partners, or others at your direction.

• Developers: Our developers may use personal data for the purposes of improving services and the EdgeStream application, monitoring performance, identifying fraud or security issues, troubleshooting the EdgeStream application, and terminating your account access.
• Service Providers and Publishers from Whom You Get an Application: Brompton Group may engage third parties to act as our service providers and to perform certain tasks on our behalf, such as processing or storing data, including personal data, in connection with your use of our services and delivering our EdgeStream application and products to customers. Brompton Group service providers are obligated to handle personal data consistent with this Privacy Policy and according to our instructions. They cannot use the personal data we share for their own purposes and must delete or return the personal data once they’ve fulfilled our request.
• Partners: At times, Brompton Group may partner with third parties to provide services or other offerings. From example, subscription payments are offered by Brompton Group and our partners. Brompton Group requires its partners to protect your personal data.
• Others: Brompton Group may share personal data with others at your direction or with your consent. We may also disclose information about you if we determine that for purposes of law enforcement or other issues of public importance, disclosure is necessary or appropriate.

Keeping Your Information Secure

Brompton Group works hard to protect you and us from unauthorized access, alteration, disclosure, or destruction of information we hold. We use administrative, technical, and physical safeguards like the following to protect your personal data considering the nature of the personal data, the processing, and the threats posed.

• We use encryption to keep your data private while in transit
• We offer multi-factor authentication (MFA) to help you protect your account
• We review our information collection, storage, and processing practices, including physical measures, to prevent unauthorized access to our systems
• We restrict personal information to Brompton Group employees, contractors, and agents who need that information to process it; anyone with this access is subject to strict contractual obligations and may be disciplined or terminated if they fail to meet these obligations

Transfer of Personal Data Between Countries

Brompton Group has customers and operations around the world. Therefore, in connection with your uses of our products and services, your information may be processed on servers located outside of the country where you live. Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections described in this Privacy Policy. We also comply with certain legal frameworks relating to the transfer of data.