Grecco

1. Introduction

This Privacy Policy explains how Grecco Inc. ("Company," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our software platform (the "Platform") or otherwise interact with us. Our Platform is used by contractors and service professionals to create project estimates and calculate available rebates, incentives, and financing options for their clients (the "End Customers").

This means we may process both: (1) data about our users (you, the account holder), and (2) data about your customers, which is entered into the platform by you or your team. We are committed to safeguarding all personal information in compliance with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable privacy laws.

2. Information We Collect

a. Information We Collect from Users (You)

We collect information directly from you, including:

Identifiers: Name, email, company name, phone number, account credentials
Device & Usage Data: Browser type, IP address, device identifiers, usage patterns, feature interactions
Payment Data: Billing information (processed by third-party payment processors)
Support Communications: Messages, attachments, and call recordings for customer service

b. Information Entered by Users About Their Customers

Users may input a wide range of personal and property-related data about their customers to create detailed project estimates and manage client relationships. This may include, but is not limited to:

Customer Identifiers: Name, phone number, email address, physical address, and utility provider
Household Information: Household size, approximate income level, homeowner or tenant status, residency type (primary residence or rental), utility account holder status
Tenant/Property Owner Information: When there is a tenant/homeowner relationship, household size and approximate income information for both parties, as this information may be required for certain rebate eligibility determinations
Existing Home Systems: Detailed information about installed appliances and systems, including fuel source, type/style, size/capacity, age, location within the home, and number of units. Examples include water heaters, heating and cooling systems, and electric panels
Planned Systems: Data on the contractor's planned installations, such as number of units, system size, whether it is part of a whole-home electrification project, specific attributes like refrigerant type, advanced features (e.g., no electric resistance, variable capacity), and approximate project cost
Uploaded Files: Photos, floorplans, diagrams, or other documentation related to the project

This information, including sensitive personal information such as approximate income and detailed household data, is collected exclusively to provide the core services of the Platform — generating project estimates, calculating rebate and incentive eligibility, determining financing options, and managing installation projects. We do not use this data for advertising or profiling, nor do we share it outside of what is necessary to deliver our services.

3. Optional Integrations, Location Data, and Cookies

Media Uploads

Users may upload media (photos, floorplans) which is stored securely using AES-256 encryption. We do not scan content beyond file storage and basic security screening.

Location Data

If you use our mobile platform or grant browser-based location access, we may collect approximate geolocation data (accurate to within 100 meters) such as job site coordinates. This data is used only to enhance service functionality like mapping and routing. You can disable location tracking through your device or browser settings at any time.

Third-Party Integrations

We may support optional integrations with third-party services in the future, which could include:

Rebate and incentive databases (would share project specifications, customer eligibility data)
Utility company portals (would share customer identifiers and project details for rebate verification and application submission)
Government incentive programs (would share project and household data for program qualification)
Financing platforms (would share project costs and customer qualification data)
Permitting databases (would share project type, location, system specifications)
CRM systems (would share contact information, project status)

When available, these integrations would be entirely optional. For each integration, we would exchange only the minimum data necessary for functionality and would provide clear notice before any data sharing occurs. Third parties would have their own privacy practices, and links to their privacy policies would be provided before you authorize any integration. You would be able to disconnect integrations at any time through your account settings.

Cookies and Tracking

We use cookies and similar technologies to:

Maintain your login session
Remember your preferences
Analyze platform usage through Google Analytics
Provide customer support chat functionality

You can control cookie preferences through your browser settings. Disabling certain cookies may limit platform functionality.

4. How We Use Information

For User Data:

Create and manage user accounts
Deliver and improve platform services
Process payments and maintain billing records
Communicate about service updates, support, and account matters
Comply with legal obligations and enforce our terms of service
Analyze usage patterns to improve our platform (aggregated data only)

For Customer Data:

Generate project estimates and proposals
Calculate eligibility for rebates, incentives, and financing programs
Evaluate qualification requirements based on project specifications, income details, or household characteristics
May manage installation records and project timelines (planned feature)
May facilitate communication between you and your customers through the platform (planned feature)
May submit rebate applications to utility companies and government agencies with user authorization (planned feature)

We do not use customer data for our own marketing purposes or retain it beyond what is necessary for service delivery.

5. Sharing of Information

We may share personal data with:

Service Providers: Cloud hosting providers, payment processors, customer support platforms, analytics services, email delivery services, and other vendors who help us operate our platform
Legal Authorities: When required by law, subpoena, or to protect our rights and safety
Business Transfers: In connection with a merger, acquisition, or sale of assets, provided the acquiring party agrees to honor existing privacy commitments and provides users notice of any material changes to this policy
With Your Consent: For specific purposes you authorize

We do not sell personal information or customer data. We do not share data for advertising purposes.

6. Data Retention

We retain data only as long as necessary to provide services, comply with legal obligations, or resolve disputes. General retention practices include:

User Account Data: Retained while account is active and for a reasonable period after closure
Customer Project Data: Retained for business purposes such as warranty support, record-keeping, and regulatory compliance as needed
Payment Records: Retained as required by law and accounting standards
Support Communications: Retained for a reasonable period after resolution

Users may request earlier deletion of their data at any time, subject to legal retention requirements. We make retention decisions based on business necessity, legal obligations, and user preferences.

7. Your Privacy Rights

California Residents (CPRA Rights)

Under CPRA, California residents have the right to:

Know what personal information we collect, use, and disclose
Access their personal information (up to twice per year)
Correct inaccurate personal information
Delete their personal information
Limit use of sensitive personal information (though we don't use SPI for advertising, so this may not apply)
Non-discrimination for exercising these rights

Non-California Residents

While our services primarily serve California customers, if you are located outside California, please contact us at support@greccofortrades.com regarding your privacy rights under applicable law.

How to Exercise Your Rights

To make a privacy request:

Email us at support@greccofortrades.com with "Privacy Request" in the subject line
Include your full name, email address, and specific request
We may ask for additional verification information
We will respond within 30 days (may extend to 60 days for complex requests)
Responses will be provided in a portable format when applicable

8. End Customer Data Requests

If you are an End Customer whose data has been entered by one of our users, you should first contact that contractor directly. You may also contact us at support@greccofortrades.com for assistance, though we may need to coordinate with the contractor who entered your information.

9. Sensitive Personal Information

We currently collect the following data considered Sensitive Personal Information under California law:

Approximate household income and enrollment in low-income assistance programs (for rebate and incentive eligibility determination)
Precise geolocation (job site addresses)
Environmental justice community status based on zip code (for certain incentive programs)

We may collect additional Sensitive Personal Information in the future, such as:

Energy usage patterns and utility account information (for rebate calculations and program qualification)
Additional qualifying information as required by specific rebate and incentive programs (such as government ID verification)
Other information that may be classified as sensitive under applicable privacy laws when collected for legitimate business purposes related to rebate and incentive qualification

We will provide notice and update this policy before intentionally collecting any new categories of Sensitive Personal Information not described above.

This data is used solely to provide core platform functionality and is not shared, sold, or used for profiling or advertising purposes.

10. Data Security

We implement reasonable technical and organizational safeguards to protect personal information from unauthorized access, disclosure, alteration, and destruction. These measures are designed to provide a level of security appropriate to the sensitivity of the information we process.

While no system is completely secure, we are committed to maintaining appropriate security practices and will respond promptly to any security incidents. In the event of a data breach involving personal information, we will notify affected users within 72 hours of discovering the breach.

11. Children's Privacy

Our platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately. Parents who believe we may have collected information from their child should contact us immediately.

12. Changes to This Privacy Policy

We may update this policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this policy and provide reasonable notice to users.

Continued use of the platform after changes constitutes acceptance. We will provide reasonable notice of material changes (such as updating the effective date), and users who disagree may close their account.

We review this policy annually.

13. Contact Us

For Privacy Requests: support@greccofortrades.com

Subject Line: Privacy Request

For the fastest response, please email us with specific details about your request and include relevant account information for verification.