Privacy Policy

This Notice at Collection and Privacy Policy (“Privacy Notice”) describes how Palmetto Solar, LLC (“Palmetto,” the “Company,” “we,” “our,” or “us”) collects, uses, and discloses, processes, and/or retains personal information of U.S. state residents (“Information Practices”). This Privacy Notice explains the privacy rights available to you under applicable U.S. state privacy laws and how you can exercise those rights. We respect your privacy and are committed to providing a transparent notice of our privacy practices.

This Privacy Notice applies when you visit our website (www.palmetto.com), use the Palmetto App, and all features, applications, social media channels, browser plugins, content, downloads, and other online services that we make available or that link to this Privacy Notice (together, the “Platform”). This Privacy Notice also covers information we collect about you offline, from third parties, or when you contact us by phone.

Certain states provide specific rights to their residents as listed below. While we will attempt to respond to a request from any U.S. resident, we reserve the right to deny requests if allowed under applicable law. Unless you are a California resident, any rights that may be available in your state are not afforded to you under this Privacy Notice while you are operating in your commercial or employment capacity.

If you are a California resident who has interacted with us in an employment or job applicant capacity, you will receive a separate California Employee Notice at Collection and Privacy Policy.

The terms used in this Privacy Notice have the same or similar meaning as those terms in each of the applicable state laws, or the closest approximation of such terms.

Notice at Collection

The following notice identifies the categories of personal information to be collected from you and the purposes for which the personal information will be used, including whether that information is sold or shared for the purposes of cross-context behavioral advertising (e.g., targeted advertising).

General Personal Information

We collect, use, and process the categories of personal information described in the table below for the business and commercial purposes listed in this notice. The purposes that apply to all categories of personal information are set out immediately below. Additional purposes that apply to specific categories are identified in the table.

Universal Purposes. We collect, use, and process each category of personal information described below for the following purposes:

• To fulfill or meet the reason for which you provided the information, and to provide you with the products, services, or information you request.
• For auditing relating to consumer transactions, including ad impressions where applicable, and for compliance with regulations and internal policies.
• For fraud prevention, security monitoring, and detection of and protection against malicious, deceptive, fraudulent, or illegal activity.
• For debugging to identify and repair errors that impair existing or intended functionality.
• To undertake internal research for technological development and demonstration.
• To undertake activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance that service or device.
• To share personal information with service providers and contractors that perform services on our behalf and carry out the business purposes described in this notice.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.
• To comply with applicable laws, regulations, legal processes, and enforceable governmental requests, and to establish, exercise, or defend legal claims.
• For any other purpose disclosed to you at the time of collection or with your consent.

In addition to the universal purposes above, we use each category of personal information for the additional purposes described in the table below.

Note: We do not collect Professional or Employment-Related Information, or Education Information in the consumer context.

Sensitive Personal Information

Note: We do not collect other sensitive personal information under applicable state laws.

Retention Periods

The period of time for which we retain information depends on the purposes for which we collect or use that information. We will delete or de-identify information when it is no longer needed to fulfill the purposes listed for each category above, unless a longer retention period is required to comply with applicable laws. There may be technical or other operational reasons where we are unable to fully delete or de-identify your information. Where this is the case, we will take reasonable measures to prevent further processing your information.

Notice of Sale and/or Share

Our use of tracking technologies may be considered a sale or sharing with third parties for cross-context behavioral advertising (e.g., targeted advertising) under applicable state law. You can opt-out of being tracked by these third parties by clicking the “Do Not Sell or Share My Personal Information” link and choosing your preferences. Please note that this link provides opt-out rights under all applicable state laws, also known as “opt-out rights” or “personal data use opt-out”. You may also opt out by enabling a recognized opt-out preference signal such as the Global Privacy Control (“GPC”) on your browser or device, see “Making Requests to Opt-Out; Opt-Out Preference Signals” below for details.

Privacy Policy

The purpose of this Privacy Policy is to provide you with a comprehensive description of our online and offline practices regarding our Information Practices. You have certain rights to control the use of your personal information. This privacy policy describes your rights as it relates to our Information Practices as to your personal information and how you can exercise those rights.

The following table includes disclosures for the preceding 12 months of: categories of personal information we have collected about consumers, the categories we have disclosed for a business purpose, and categories of third parties with whom we shared the personal information during that period.

General Personal Information

We collect, use, and disclose the categories of personal information described in the table below for the business and commercial purposes listed here. The purposes and service provider categories that apply to all categories of personal information are set out below. Additional purposes and service provider categories that apply to specific categories of personal information are identified in the table.

Universal Purposes. We use each category of personal information described below for the following purposes:

• For our operational purposes and the operational purposes of our service providers and contractors.
• Ensuring security and integrity as reasonably necessary and proportionate for this purpose.
• Debugging to identify and repair errors that impair existing functionality.
• Short-term, transient use.
• Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing financing, providing analytic services, storage, or other similar services.
• Undertaking internal research for technological development.
• Undertaking activities to verify or maintain the quality or safety of a service or device and to improve or enhance a service or device.
• Complying with applicable laws, regulations, legal processes, and enforceable governmental requests, and establishing, exercising, or defending legal claims.

Universal Service Providers and Contractors. We disclose each category of personal information described below to the following categories of service providers and contractors:

• Information technology service providers
• Cloud storage providers
• Web hosting service providers
• Cybersecurity providers
• Data analytics providers
• Operating and management companies

Sensitive Personal Information

Unless otherwise allowed by applicable state law, we will only collect certain types of sensitive personal information with your consent. We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under applicable state law, including California.

For each category of personal information identified above, we also disclose such personal information to the following categories of third parties:

• At Your Direction. We may disclose your personal information to any third party with your consent or at your direction. For example, at your direction and with your consent, we may disclose information to financial institutions in connection with financing your solar installation.
• Business Transfers or Assignments. We may disclose or transfer your personal information to a buyer, successor, or other entity as reasonably necessary to facilitate a merger, divestiture, restructuring, reorganization, dissolution, joint venture, collaboration, assignment, sale, transfer, or other disposition of all or any portion of our business, assets, or stock (including as a going concern or in connection with any bankruptcy, liquidation, or similar proceeding), in which personal information held by Palmetto about our Platform users is among the assets transferred.
• Legal and Regulatory. We may disclose your personal information to government authorities, regulatory agencies, law enforcement, and courts as reasonably necessary to comply with any court order, law, or legal process, including to respond to any government, regulatory, or law enforcement request; to enforce or apply our Terms and Conditions and other agreements, including for billing and collection purposes; to assert and defend legal claims; to protect the rights, property, or safety of Palmetto, our customers, or others, including exchanging information with other companies and organizations for the purposes of fraud protection; and as otherwise permitted or required by law.

Mobile information. We do not share mobile information with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all categories of information we disclose and will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

De-identified and aggregated information. We may disclose aggregated information about our users and de-identified data or information that does not identify an individual, without restriction.

Where we maintain de-identified data (data that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable individual), we commit to the following: (1) we take reasonable measures to ensure the data cannot be associated with an individual; (2) we publicly commit to maintaining and using the data in de-identified form and will not attempt to re-identify the data, except for the purpose of determining whether our de-identification processes comply with applicable law; and (3) we contractually obligate any recipients of the de-identified data to comply with all applicable requirements regarding de-identified data.

Sources of Personal Information. The categories of personal information identified above were collected from the following categories of sources: you directly; solar inverters, energy monitors, and other hardware installed at your home; utility companies and utility data access platforms; identity verification service providers; credit reporting agencies; advertising networks; internet service providers; data analytics providers; government entities; operating systems and platforms; social networks; data brokers; and third-party reporting services.

What We Sell to Third Parties or Share with Third Parties for Cross-Context Behavioral Advertising and Right to Opt-Out

We have sold or shared with third parties for cross-context behavioral advertising (e.g., targeted advertising) the following categories of personal information to advertising networks and data analytics providers in the preceding 12 months: Identifiers; Internet or Other Similar Network Activity; Commercial Information; Geolocation Data; and Inferences / Profile Data.

We do not sell or share your sensitive personal information without your consent.

Right to Opt-Out of Sale/Sharing or Targeted Advertising

You have the right to direct us to stop selling or sharing your personal information (the “Right to Opt-Out”). You may exercise this right by: (1) Clicking “Do Not Sell or Share My Personal Information” to use our interactive opt-out form; or (2) Submitting your request through an Opt-Out Preference Signal/Universal Opt-Out Mechanism, as described further below in the section titled “Making Requests to Opt-Out; Opt-Out Preference Signals.”

We do not have actual knowledge that we sell the personal information of minors under 16 years of age.

Cookies and Other Tracking Technologies

The Platform may use first-party and third-party “cookies,” as well as other tracking technologies, to enhance the experience of the Platform and for advertising and analytics purposes. These technologies are used for record-keeping purposes, to ensure the Platform operates properly, to track how website visitors interact with the Platform, and for advertising. Cookies are small files that a website places on a website visitor’s hard drive through their web browser. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you choose to refuse cookies, please note that some parts of the Platform may not function properly as a result.

Right to Opt-Out of Marketing Communications

You may opt out of marketing communications at any time:

• Email marketing: Use the unsubscribe link in the footer of any marketing email.
• SMS/text marketing: Reply “STOP” to any marketing text message, or text STOP to 1-843-720-1844.
• Telemarketing calls: Inform the sales representative who calls you, or email help@palmetto.com with your request.

Third Party Links

The Platform may contain links to other websites or applications. Please be aware that we are not responsible for the content or privacy practices of such other websites or applications. We encourage our users to be aware when they leave our Platform and to read the privacy statements of any other website or application that collects personal information.

Your State Law Privacy Rights

Right to Know/Access: Certain states provide the right to request our disclosure of any of the following:

• The categories of personal information we have collected about you (which may include any inferences).
• The categories of sources from which the personal information is collected.
• the business or commercial purpose for collecting, selling, or sharing with third parties for cross context behavioral advertising (e.g., targeted advertising).
• The categories of third parties to whom we disclose personal information.
• The specific third parties to whom we disclose personal information.
• The specific pieces of personal information we have collected about you.

Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes of our processing. We may request documentation from you to help assess accuracy. If we determine the contested information is more likely than not accurate based on the totality of circumstances, we may deny the request and will explain the basis for our decision.

Right to Delete: You have the right to request that we delete personal information we have collected from or about you, subject to certain exceptions permitted by law. If we cannot fully comply with a deletion request, we will explain why and delete the information that is not subject to an exception.

Right to Opt-Out of Sale/Sharing; Targeted Advertising: You may have the right to “opt out” of the “sale”, “sharing” of your personal information for cross-context behavioral advertising, or processing of your personal data for purposes of targeted advertising (as those terms are defined by applicable state law).

Right to Withdraw Consent: Where we have collected or used your personal information based on your consent, you have the right to withdraw your consent at any time. Upon receiving your withdrawal request, we will stop processing the applicable personal data as soon as practicable, but not later than 30 days after receiving your request (or such shorter period as required by applicable state law).

Right to Opt-Out of Certain Profiling: Under certain state laws, you have the right to opt out of the processing of your personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Right to Appeal: If we deny your request to exercise any of the rights described above, you may have the right to appeal that decision by submitting a request to appeal to us.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your state privacy rights. However, we may still offer you certain financial incentives permitted under applicable state law, such as discounts, rewards, premium features, loyalty accounts, or club card programs that can result in different prices, rates, or quality levels.

How to Exercise Your Rights

Making Requests to Know/Access, Delete, or Correct: You may exercise your rights, as applicable by state law, by submitting a verified consumer request to know information (and to receive your personal information in a portable format), to correct information, or for deletion.

The response to a request to know will provide the personal information we have collected and maintained about you, in a portable format, unless an exception under applicable state law applies. Please note that, depending on the applicable state law, we may not be required to provide personal information to you if you make multiple requests in a certain time period.

To submit a valid request, please use our webform at https://palmetto.com/privacy-and-data-requests or by calling toll-free 1-855-339-1831. Your request will be verified using information you provide as described on our webform at https://palmetto.com/privacy-and-data-requests. If you call 1-855-339-1831 you will be asked to provide the same information requested on the webform for verification purposes. If you submit a request that is not through one of the above designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies with your request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Once we receive your verifiable consumer request, we will confirm receipt of the request within 10 business days, or as allowed under applicable law, describing our verification process. We will confirm receipt of the request and respond to your request, consistent with applicable law, if we are able to verify your identity. Requests for deletion will require a separate confirmation that you want your information deleted. We do not knowingly collect information of minors under the age of 18.

Making Requests to Opt-Out; Opt-Out Preference Signals: Our use of tracking technologies may be considered a sale/sharing for targeted advertising under applicable state law. You can exercise your Right to Opt-Out of being tracked by these third parties by clicking the “Do Not Sell of Share My Personal Information” link at the bottom of our website and selecting your preferences, or by broadcasting an Opt-Out Preference Signal/Universal Opt-Out Mechanism, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). Your request to opt-out of sale/sharing (or targeted advertising) will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. Because the signal is browser-specific, you will need to broadcast subsequent signals if you are accessing our website through different online devices (e.g., computers, smartphones, tablets).

Withdrawing Consent: Where we have collected or used your personal information based on your consent, you may withdraw your consent by submitting a withdrawal request through our webform or via toll-free number 1-855-339-1831. If you call us toll-free we will ask that you provide the information requested in our webform.

Appealing a Denial of a Request: If we deny or decline to take action on your verified consumer request, you have the right to appeal. To submit an appeal, email us at data.privacy@palmetto.com within 90 days of receiving our denial. We will inform you in writing of any action taken or not taken in response. We will also include a written explanation of the reasons for our decision and information about how to file a complaint with your state Attorney General or applicable regulatory authority.

Using an Authorized Agent to Submit a Request

California: Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information, to opt-out of sale or sharing, or to limit the use or disclosure of your sensitive personal information. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly by submitting a verified consumer request according to the procedures in the section “How to Exercise Your Rights,” and directly confirm with us that you provided the authorized agent permission to submit the request. To submit authorized agent documentation, contact us at data.privacy@palmetto.com.

Other States: If you use an authorized agent, you may provide a power of attorney executed pursuant to applicable state law. If a power of attorney is not submitted, you may be required to provide commercially reasonable identification of your identity and evidence of your authorized agent’s authority to act on your behalf. For example, you may need to provide the authorized agent signed permission to submit a request, verify your identity directly by submitting a verified consumer request according to the procedures in the section “How to Exercise Your Rights,” and directly confirm with us that you provided the authorized agent permission to submit the request, by contacting us at data.privacy@palmetto.com.

Notice of Financial Incentive Program

Creating a Palmetto Account is required to access the Palmetto portal and its core features, including system monitoring, Energy Balance tracking, and account management. The Rewards Program and Marketplace discounts are included as features of every Palmetto Account by default. Because participating in the Rewards Program involves the collection and use of personal information beyond what is strictly necessary for portal access, including detailed energy performance tracking against personalized budgets, Energy Importer/Exporter classification, quiz and trivia responses, Quest completion data, Learn center engagement tracking, and preference data, and because this participation generates discounts that constitute a price difference on third-party products, the Rewards Program and associated Marketplace discounts constitute a “financial incentive” under California law. This applies to all earning paths: energy budget performance, daily trivia and quizzes, Educational Quests, and Learn center engagement.

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Platform and update the notice’s “Last Revised/Reviewed” date. Your continued use of our Platform following the posting of changes constitutes your acceptance of such changes.

Use of AI in the Hiring Process

Palmetto Solar, LLC uses artificial intelligence ("AI") tools as part of our hiring process. This notice describes how these tools work, what they evaluate, and your rights.

AI Tools We Use

Application Review and Job Matching

We use an AI-powered system to review applications and assess candidates' qualifications for open positions. This system reads application materials you submit (including resumes, cover letters, and application responses), rates your qualifications against the requirements of the position, and generates a score or ranking.

A human recruiter reviews all AI-generated assessments before any hiring decision is made. The AI system does not make final hiring decisions.

Interview Note-Taking and Summarization

With your consent, we use AI to assist with taking notes during interviews and summarizing interview content.  The tool does not evaluate your personality, emotional state, or facial expressions. Interview recordings and AI-generated summaries are retained but may be deleted upon your request within 30 days.

Application Verification

We use automated tools to verify certain application information, including comparing the geographic location associated with your internet connection against location information you provide. This is used solely to detect potential fraud in the application process. A location mismatch does not result in automatic disqualification; all flagged applications are reviewed by a human member of our recruiting team before any action is taken.

Your Rights

• Alternative process: You may request an alternative selection process that does not rely on AI-assisted evaluation. Requesting an alternative process will not negatively affect your candidacy.
• Information request: You may request additional information about the AI tools used in your evaluation, including the role the AI system played in the decision-making process and the main elements of any decision made with AI assistance.
• Data deletion: You may request deletion of interview recordings and AI-generated summaries. We will process deletion requests within 30 days.
• Questions and concerns: For requests and questions about our use of AI in hiring, contact recruiting@palmetto.com

Contact for More Information

If you have any questions or comments about this notice, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under applicable state law, please do not hesitate to contact us at:

Phone: 1-855-339-1831
Email: legal@palmetto.com
Postal Address:
Palmetto Solar, LLC
Attn: General Counsel
1616 Camden Rd, Suite 300
Charlotte, NC 28203