This Privacy Policy describes how you collect, use, and share your information when using the service.

The role of FoxESS may vary depending on the service scenarios:

During installer account registration, personal data is collected from installer users for the purpose of providing the account registration service for installers. In this scenario, FoxESS is the data controller.

In other scenarios, if you are a self-registered installer, you can collect personal data from your employees (installers) or customers (owners) and upload the data to PVMS. FoxESS provides services for your employees or customers based on your instructions. In these scenarios, FoxESS is the data processor. The installer is the data controller and is obliged to provide a privacy statement to the data subjects and obtain necessary consent/authorization before collecting data.

This Policy describes how this service processes your personal data, but it may not address all possible data processing scenarios. Regarding the collection of product- or service-specific data, supplementary policies may be provided, or notices may be provided before such data is collected.

This Policy helps you understand the following:

1.The definition of personal Information which we could collect.

Information you provide to us. Personal information you provide to us through the Service or otherwise may include:

Business and personal contact information, such as your first and last name, email and physical addresses, phone number, professional title, and company name.

Content you choose to upload to the Service, such as text, images, audio, video, and digital signatures, along with the metadata associated with the files you upload.

Profile information, such as your username and password that you may set to establish an online account with us, your account name, account number, Enphase system identification number, photograph, interests, and preferences.

Registration information, such as information that may be related to a service, an account or an event for which you register.

Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.

Demographic Information, such as your street address, city, state, country of residence, and postal code.

Energy information, such as your energy production, electric bill, solar installation contract, energy consumption, battery settings and usage history, other load consumption or production, and other information relating to any of your energy resources.

Site information, such as information related to your solar installation including roof type, house size, device configuration settings, appliance usage, microinverter details, system configuration settings, electrical circuit breaker and panel details, permit information, and photographs.

Financial information, such as your electric bill. Information provided to make a purchase such as payment card information, financial account number, and billing information is never collected or stored by Enphase, but is provided directly to third-party payment processors such as Paypal (depending on the site).

Transaction information, such as information about your billing address, payments to and from you, customer number, and other details of products or services you have purchased from us.

Usage information, such as information about how you use the Service and interact with us, including information associated with any meter identifier (make, model and serial number) or augmented revenue grade meter data (such as cumulative counter ending values as of the end of the month), output information, efficiency and other technical variables, content you upload to the websites or otherwise submit to us, and information you provide when you use any interactive features of the Service.

Marketing information, such as your preferences for receiving communications about our activities, events, and publications, and details about how you engage with our communications. We also may conduct user surveys, and research and analysis about your use of, or interest in, our products and surveys.

Other information that we may collect which is not specifically listed here but which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection. Information we collect through our products: The FoxEssUS is the networking hub that connects FoxESS hardware of an FoxESS Energy System suite to our monitoring and management software. Once the FoxEssUS is connected to the internet, it begins reporting your energy production, consumption, and site information to us and will continue to do so as long as it is online.

Information we obtain from social media platforms. We may maintain pages for Enphase on social media platforms, such as Facebook, LinkedIn, Twitter, Google, YouTube, Instagram, and other third party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy.

Cookies and Other Information Collected by Automated Means. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and activity occurring on or through the Service. The information that may be collected automatically includes your computer or mobile device operating system type and version number, manufacturer and model, device identifier (such as the Google Advertising ID or Apple IDFA for Advertising), browser type, screen resolution, IP address, the website you visited before navigating to our website, general location information such as city, state or geographic area; and information about your use of and actions on the Service, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and length of access. Our service providers and business partners may collect this type of information over time and across third-party websites and mobile applications. If it is an FoxESS advertising partner that has collected your personal information, its privacy policy will govern its use of that information.

On our webpages, this information is collected using cookies, browser web storage (also known as locally stored objects, or “LSOs”), web beacons, and similar technologies. Our emails may also contain web beacons. In our mobile application, we may collect this information directly or through our use of third-party software development kits (“SDKs”). SDKs may enable third parties to collect information directly from our mobile application.

Referrals. Users of the Service may have the opportunity to refer other individuals to us. If you are an existing user, you may only submit a referral to us if you have permission to provide the referral’s contact information to us so that we may contact them.

2. How Does This Service Collect and Use Your Personal Data?

Personal data means any data that, either on its own or jointly with other data, can be used to identify a natural person. Such data will be directly submitted to this service by you when you use or interact with this service. If you are an installer, this service will obtain your personal data when you register on or use the website of this service. If you are an owner, the installer will obtain your personal data during creating an account for you or when you use the website of this service after obtaining your prior consent.

The personal data collected by this service varies depending on the service scenario.

If you are a self-registered installer, this service collects your personal data, including your company name, username, email address, mobile number, and login information (account and password) when you register an account.

If you are an employee of an installer, the data collected by this service, as required by the installer, includes your username, full name, company name, contact person, contact information, site picture, region where the site is located, site address, site longitude and latitude, company address, company longitude and latitude, detailed mailing address, email address, mobile number, login information (account and password), avatar, UUID, location information (GPS location information of users who have the mobile O&M permission), and IP address from which the access is initiated.

If you are an owner, the personal data collected by this service, as required by the installer, includes your username, full name, contact person, contact information, site picture, site location, site address, site longitude and latitude, detailed mailing address, email address, mobile phone number, SIM card number, login information (account and password), avatar, UUID, and IP address from which the access is initiated.

This service also collects the information you provide to this service and the messages you send to this service, such as the query information you enter or the questions or information you provide to obtain customer service support. You may need to provide your personal data when using this service. You may choose not to provide personal data to this service. However, in this case, it might be impossible to provide related products or services for you, or respond to or resolve your problems.

The installer will share the information it collects with FoxESS, which is the platform provider, so that FoxESS can provide support and services, such as device monitoring, device management, company management, and site management, to the installer and its users as stated by the installer.

This service may use the preceding personal data for the following purposes:

As a data controller, FoxESS processes data only for the purposes of installer self-registration and password retrieval.

In other scenarios, the installer is the data controller, and personal data may be collected for the following purposes, depending on the service/function and subject to the privacy statement provided by the installer.

(1) To use the site management and operations management functions, you need to provide the contact person, contact information (such as email address and mobile number), site picture, site address, region, longitude, and latitude to facilitate the maintenance of the site and the query of third-party users through operations interfaces.

(2) When you use the device management function, your SIM card number in your device needs to be collected to support 4G communication of the device.

(3) To use the alarm management function, you need to enter your mobile number or email address to receive alarm information.

(4) To use the user management function, you need to enter the personal information about the users, including the username, full name, password, mobile number, and email address.

(5) When you log in, your UUID, account login, and operations will be logged. The UUID is used to maintain a persistent connection. The logs contain the username and the IP address from which the connection is initiated and are used for audit and troubleshooting.

(6) To use the alarm setting function, you need to enter an email address to receive alarms.

(7) When you use the device commissioning or site setup wizard, the GPS location of your mobile terminal will be collected to recommend the device update package and power grid code that suit your area, and to set the longitude and latitude of the inverter to display the location of inverters on the management system.

(8) Sending you important notifications, such as alarms, subscribed reports, test messages, regular maintenance, update and installation notifications.

(9) Providing you with personalized user experience and content.

(10) Improving products and services through internal audits, data analysis, and research.

(11) Analyzing the efficiency of business operations and evaluate the market share.

(12) Troubleshooting when you provide error details.

(13) Synchronizing, sharing, and storing the data that you upload or download and the data needed for the uploading and downloading.

(14) Ensuring the security of this service and customers or users; executing and improving loss prevention and anti-fraud programs.

(15) Complying with and enforcing applicable legal requirements, industry standards, or policies.

(16) Providing services for you under other circumstances.

This service may also collect and use non-personally identifiable information (non-PII). Non-PII is information that cannot be used to identify a particular individual. For example, this service will collect statistical data, such as the number of visits to its website. This service collects the data to understand how users use the websites, products, and services to improve services and better satisfy your needs. Non-PII data may be collected, used, processed, transferred, or disclosed for other purposes without prior notice or consent. Reasonable efforts will be made to isolate your personal data from non-PII and ensure that the two types of data are used separately. If personal data is combined with non-PII data, it will still be treated as personal data during processing.

This service processes your personal data following the requirements of applicable laws based on an appropriate legal basis:

(1) When FoxESS is the data controller, FoxESS collects and processes personal data of installers during account registration and password retrieval based on the necessity of providing services and fulfilling contracts.

(2) When the installer is the data controller, the installer may process your (installer's employee/owner) personal data on the following legal basis (For details, see the privacy statement provided by the installer.), including:

Processing your personal data to fulfill the contract when responding to a transaction or service request;

Processing your personal data with your consent:

Processing based on the legitimate interests of the installer or a third party when they use your personal data to contact you, conduct marketing or market surveys, improve provided products and services, execute and improve loss prevention and anti-fraud programs related to this service, and other purposes. Legitimate interests include enabling more effective management and operation of the business and provision of products and services; protecting the security of the businesses, systems, products, services, and customers; internal management; complying with internal policies and processes; and other legitimate interests described in this policy;

Processing your personal data as necessary to comply with and fulfill legal obligations.

3. How Does This Service Use Cookies and Similar Technologies?

To ensure normal website functions, this service may at times place a small piece of data known as a cookie on your computer or mobile device. A cookie is a text file stored by a web server on a computer or mobile device. The content of a cookie can only be retrieved or read by the server that creates the cookie. Each cookie is unique to your web browser or mobile app.

Like most large websites or Internet service providers, this service uses cookies in order to improve user experience. Session cookies are deleted after each visit, while persistent cookies remain in place across multiple visits. Cookies allow websites to remember your settings such as language, font size, or other browsing preferences on your computer or mobile device. This means that a user does not need to reset preferences for every visit. On the contrary, if cookies are not used, websites will treat you as a new visitor every time you load a web page. For example, if you are redirected to another web page from a website you have already logged in to and then return to the original website, it will not recognize you and you must log in again. This service will not use cookies for any purposes not stated in this Policy. You can manage or delete cookies based on your own preferences. For details, visit AboutCookies.org. You can clear all the cookies stored on your computer, and most web browsers provide the option of blocking cookies. However, by doing so, you have to change your user settings every time you visit a website. Find out how to manage cookie settings for your browser here: Internet Explorer Google Chrome

By using this service, you consent to the use of cookies as described above.

4. How Does This Service Disclose Your Personal Data?

To comply with the law, the installer may also disclose your personal data in response to demands from courts, in lawsuits, and from law enforcement or other government agencies. If the installer is involved in a restructuring, merger & acquisition, or a bankruptcy or liquidation lawsuit in a given jurisdiction, your personal data may be disclosed in connection with the transaction. The installer may also disclose your data when appropriate, for example, to execute Terms and Conditions, when the installer believes disclosure is necessary or appropriate to prevent physical harm or financial loss, or when it is in connection with an investigation of suspected or actual illegal activity.

The installer will share the information it collects with FoxESS, which is the platform provider, so that FoxESS can provide support and services, such as device monitoring, device management, company management, and site management, to the installer and its users as stated by the installer. For details about the service and data usage, see 1 How Does This Service Collect and Use Your Personal.

5. How Can You Access or Modify Your Personal Data?

It is your responsibility to ensure that any and all personal data submitted to FoxESS is correct. Every effort will be made to maintain the accuracy and completeness of your personal data and keep your personal data up-to-date based on the information you provide. You can log in to the website or app of this Service, and view and modify your personal data in your personal information. You can Contact the installer to reject or restrict the use of your personal data by this Service, and ask the installer to delete your personal data.

If allowed by applicable laws, you have the right to withdraw your consent at any time when this service processes your personal data based on your consent. You can withdraw your consent through system settings on most mobile platforms (such as iOS and Android). You can also withdraw your consent by disabling the mobile O&M function of the app. In this way, the service will stop collecting your GPS information. However, withdrawal does not affect the legitimacy and effectiveness of how this feature process your personal data based on your consent before the withdrawal is made; nor does it affect any data processing based on another justification other than your consent.

If you think that the way this service processes your personal information fails to comply with applicable data protection laws, you can contact the competent data protection authority. You can obtain the information for contacting US data protection authorities at https://www.congress.gov/bill/116th-congress/senate-bill/3300.

6. How Does This Service Protect and Retain Your Personal Data?

Your personal data will be stored on the server which you used when you registered the account. The personal data you submitted to this service will be deleted within three months after you submit your deregistration request. The GPS data collected during your use of the mobile O&M function will be automatically deleted 30 minutes after the collection.

The security of your personal data is important to this service. Appropriate physical, management, and technical measures will be used to protect your personal data from unauthorized access, disclosure, usage, modification, damage, or loss. For example, this service uses cryptographic technologies for data confidentiality, protection mechanisms to prevent attacks, and access control mechanisms to permit only authorized access to your personal data. Best efforts will be made to protect your personal data; however, please note that no security measure is perfect.

Keep your username, password, and other identity information secure. When you use this service, your username, password, and other identity elements will be used to determine your identity. The leakage of the aforementioned information may incur losses or other adverse impacts. If you find that your username, password, or other identity information may be or has been compromised, contact the installer immediately so that the installer can take corresponding measures in a timely manner to avoid or minimize the loss.

7. How Does This Service Process Children's Personal Data?

The product, website, and service are primarily intended for adults. A child must not create an account without the consent of a parent or guardian. If a child's personal data is collected with prior parental consent, this service will only use or disclose the data as permitted by law, with the explicit consent of the child's parents or guardians, or when necessary for the protection of the child. If a child's personal data is collected accidentally without verified prior consent from the child's parents, it will be deleted in the earliest possible time.

8. Third-Party Providers and Their Services?

To ensure a positive user experience, you may receive content or web links from this service or third parties related to this service, for example, the installer may provide the owner with its official website information and a redirection link, or you may find the partner's web page information on the About page of the system. This service does not have the right to control such third parties, but you can choose whether to use the links, view the content and/or access the products or services provided by third parties.

This service cannot control the privacy practices and data protection policies of third parties that are not subject to this Policy. When you submit personal information to such a third party, please read and refer to the privacy protection policy of the third party.

9. How Is Your Personal Data Transferred Internationally?

As a global company, your personal data collected by FoxESS may be processed or accessed in the country/region where you use our products and services or in other countries/regions where FoxESS or its affiliates, subsidiaries, service providers or business partners have a presence when FoxESS processes the personal data of installers as the data controller during activities such as account registration and password retrieval. These jurisdictions may have different data protection laws. In such circumstances, FoxESS will take measures to ensure that data is processed as required by this Policy and applicable laws, which includes when transferring the data subject's personal data from the US to a country or region which has not yet been acknowledged by the US as having an adequate level of data protection, we may use a variety of legal mechanisms, such as signing standard contractual clauses approved by the US, obtaining the consent to the cross-border transfer of a data subject in the US, or implementing security measures like anonymizing personal data before cross-border data transfer.

For details about the data controlled by the installer and the data transfer scenarios under this circumstance, see the privacy statement provided by the installer.

10. How Is This Policy Updated?

This Privacy Policy is subject to change without prior notice. If major changes are made to the Privacy Policy, the latest Privacy Policy will be released here. After the update, the last update date will be changed.

11. How Can You Contact FoxESS?

If you have any privacy complaints or issues, you could contact service@fox-ess.com

Last updated: July 2022