Legal

Privacy Policy

Last updated: April 1, 2025

1. Introduction

GridKern, Inc. ("GridKern," "we," "us," or "our") operates the website gridkernx.com and provides AI-powered load forecasting and demand-response optimization software services to electric utilities and grid operators. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you access our website, use our software platform, or communicate with us.

We are headquartered at 11501 Domain Dr, Austin, TX 78758. You can reach our privacy team at info@gridkernx.com or by calling +1 (512) 384-6129.

By accessing gridkernx.com or using any GridKern service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not use our website or services.

This policy applies to: visitors to gridkernx.com; customers and trial users of the GridKern platform; employees and contractors of organizations that purchase GridKern services ("Customer Personnel"); and individuals who contact us for information or support.

2. Data We Collect

We collect information in several categories depending on how you interact with GridKern.

2.1 Information You Provide Directly

Contact and inquiry data: When you fill out a contact form, request a demo, or email us, we collect your name, work email address, job title, company name, phone number, and the contents of your message or inquiry.

Account registration data: When you create a GridKern account or begin a pilot program, we collect your name, work email address, organization name, role, billing address, and payment information (processed through our payment processor; GridKern does not store full card numbers).

Support communications: When you contact technical support or customer success, we collect the content of your communications, including any technical information you share to describe your issue.

2.2 Data Collected Automatically

Log and usage data: When you visit gridkernx.com, our servers automatically record your IP address, browser type and version, operating system, referring URL, pages viewed, time spent on each page, and the date and time of each request. This information is used for security monitoring, site optimization, and aggregate traffic analysis.

Cookies and similar technologies: We use cookies, web beacons, and local storage to maintain session state, remember your preferences, and collect aggregate usage statistics. See our Cookie Policy for detailed information about the specific cookies we use and how to manage them.

Device information: We collect information about the device you use to access our services, including device type, screen resolution, and browser language settings.

2.3 Operational Data (Platform Customers)

Customers who deploy the GridKern platform transmit operational data from their SCADA systems, smart meters, and related infrastructure. This data typically consists of: interval-level electrical load measurements (in MW or kWh); equipment status and telemetry; weather data inputs; and demand-response asset availability and performance records.

This operational data is processed by GridKern to provide load forecasting and demand-response services under our Customer Agreement. It is treated as Customer Data — property of the customer — and is subject to confidentiality protections described in the Customer Agreement. GridKern uses this data solely to provide contracted services and does not use it for our own commercial purposes, aggregate analysis, or disclosure to third parties without customer authorization.

2.4 Data From Third Parties

We may receive information about you from third parties, including: publicly available professional profiles (LinkedIn, company websites) when conducting due diligence on potential enterprise customers; marketing data providers who help us identify organizations that may benefit from GridKern services; and analytics providers who help us understand aggregate website usage patterns.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Improving Services

We use your information to: respond to inquiries and fulfill demo requests; create and manage your account; deliver load forecasting and demand-response services; process payments and manage subscription billing; provide technical support and customer success services; and improve the accuracy, reliability, and features of our platform.

3.2 Communications

We use your contact information to: send transactional messages (account confirmations, billing receipts, service notifications); respond to your support requests; and, with your consent, send marketing communications about GridKern products, technical articles, and industry events. You can unsubscribe from marketing communications at any time using the link in any email or by contacting us at info@gridkernx.com.

3.3 Security and Compliance

We use information to: detect and prevent fraud, abuse, and security incidents; comply with applicable laws and regulations; respond to legal process and government requests; and enforce our Terms of Service and Customer Agreements.

3.4 Analytics and Business Development

We use aggregate, non-identified usage data to: understand how visitors use our website; identify technical issues and optimize site performance; and analyze market segments and demand patterns for business planning purposes.

4. Legal Bases for Processing (GDPR)

For individuals in the European Economic Area, United Kingdom, or other jurisdictions with similar data protection laws, we process personal data under the following legal bases:

  • Contractual necessity: Processing required to fulfill our contracts with customers and to respond to your requests for services or information.
  • Legitimate interests: Processing for fraud prevention, security monitoring, and business analytics, where our interests are balanced against your rights.
  • Consent: For marketing communications and non-essential cookies, where you have provided explicit consent that you can withdraw at any time.
  • Legal obligation: Processing required to comply with applicable law, regulatory requirements, or legal process.

5. How We Share Your Information

We do not sell personal information. We share information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including: cloud infrastructure providers (for hosting and data processing); payment processors (for billing); email service providers (for communications); analytics providers (for website usage analysis); and customer relationship management platforms. These providers are contractually bound to use your information only to provide services to GridKern and to maintain appropriate security measures.

5.2 Business Transfers

If GridKern is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected users if this occurs and if the privacy practices that apply to their information will change.

5.3 Legal Requirements

We may disclose information when we believe disclosure is required by law, legal process, or government authority; necessary to protect the rights, property, or safety of GridKern, our customers, or others; or necessary to prevent or investigate fraud or security incidents.

5.4 With Your Consent

We may share information for other purposes with your explicit consent.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account and customer data: Retained for the duration of the customer relationship and for 5 years after account closure, to comply with financial recordkeeping obligations and to resolve disputes.
  • Website log data: Retained for 12 months, then deleted or anonymized.
  • Marketing inquiry data: Retained for 3 years from the date of last interaction, unless you request deletion earlier.
  • Operational/SCADA data: Retention period is specified in the Customer Agreement, typically matching the customer's own data retention requirements (3–7 years for NERC compliance purposes).
  • Support communications: Retained for 2 years from resolution of the support request.

When data is no longer needed, we delete it securely or anonymize it so that it cannot be used to identify you.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to our legal retention obligations.
  • Portability: Request a machine-readable copy of personal information you have provided to us.
  • Restriction: Request that we restrict processing of your personal information in certain circumstances.
  • Objection: Object to our processing of your personal information based on legitimate interests.
  • Withdraw consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us at info@gridkernx.com with the subject line "Privacy Rights Request." We will respond within 30 days. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

If you are located in the EU or UK and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use cookies and similar tracking technologies on gridkernx.com. Our Cookie Policy describes the types of cookies we use, their purpose, and how you can manage your cookie preferences. You can also manage cookies through your browser settings, though disabling certain cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organizational security measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • TLS 1.2 or higher encryption for all data transmitted between your browser and our servers.
  • AES-256 encryption for data stored at rest in our cloud infrastructure.
  • Role-based access controls limiting internal access to personal information to employees with a legitimate need.
  • Regular security assessments and penetration testing of our platform infrastructure.
  • Employee training on data protection and security practices.
  • Incident response procedures for identifying and addressing security events.

No transmission or storage system is completely secure. If you believe your account credentials have been compromised, please contact us immediately at info@gridkernx.com.

10. International Data Transfers

GridKern is headquartered in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws different from those in your country. For transfers of personal data from the European Economic Area or United Kingdom, we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission. For more information about these safeguards, contact us at info@gridkernx.com.

11. Children's Privacy

GridKern's services are designed for business users and are not directed at children under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from a child under 16, we will delete it promptly. If you believe we have collected information from a child, please contact us at info@gridkernx.com.

12. Third-Party Links

Our website may contain links to third-party websites, resources, or services that are not operated by GridKern. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will post the revised policy on this page with an updated "Last updated" date and, where appropriate, provide notice to registered users by email. We encourage you to review this policy periodically.

14. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal information, contact us at:

GridKern, Inc.
Attn: Privacy
11501 Domain Dr
Austin, TX 78758
Email: info@gridkernx.com
Phone: +1 (512) 384-6129