Privacy Policy

This Privacy Policy applies to personal information we collect from and about:

• Site visitors, meaning anyone who visits or interacts with the Site;
• Hosts, meaning owners, landlords, property managers, homeowners and condominium associations and their board members and representatives, at properties where we propose to install or have installed charging equipment, and individuals who inquire about hosting;
• End Users, meaning residents, tenants, guests and other drivers who use the Charging Services, including under a subscription;
• Personnel of our channel partners, dealers, contractors, subcontractors, suppliers and professional advisers, in their business capacity; and
• Individuals who otherwise contact us, including through our published email addresses.
• Individuals whose information is captured incidentally in media recorded through an Application, including people, vehicles and vehicle license plates appearing at a site.

Personal information about our own personnel, job applicants, independent contractors, directors and officers, collected in that capacity, is not covered by this Privacy Policy and is addressed in a separate notice provided to those individuals at or before the point of collection.

In this Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, with a particular individual or household. It does not include information that has been deidentified or aggregated so that it can no longer reasonably be used to identify an individual or household. Where we hold deidentified information, we will maintain and use it in deidentified form and will not attempt to reidentify it.

You can sign in to Moon Five with your Google Account. When you do, Google sends us a limited set of identity claims under the openid, email, and profile scopes. Specifically we receive your Google Account email address, whether Google has verified that address, your name, your profile picture where you have one, and the stable Google account identifier that lets us recognize you on your next visit.

We use that data for one purpose only: to create and secure your Moon Five account, and to show you the right name and email inside the product. We do not use it for advertising, we do not build advertising profiles from it, and we do not sell it. We never request access to your Gmail messages, your Google Drive files, or your Google Calendar for a resident or prospective customer account.

Separately, our internal tooling offers an opt in Google Workspace connection, intended for our own employees and contractors, that operates on the connected work account. Its scopes are broader than the sign in scopes above, so we state them plainly: it can read, send, organize and archive mail in that account, it has read only access to that account's Drive files, and it can read and manage that account's calendar events. It cannot permanently delete mail. This connection is never offered to, and never touches, a resident or prospective customer Google Account.

Moon Five's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Moon Five's access to your Google Account at any time from your Google account permissions page. Revoking access does not delete the Moon Five account itself; to delete that, email us using the address at the bottom of this page.

We use personal information for the following purposes:

• To assess a proposed site, including feasibility, electrical capacity, permitting and program eligibility, and to prepare and negotiate agreements and statements of work;
• To review media captured through an Application in order to assess a site remotely, to plan and prepare an installation, and to reduce the need for visits to the site;
• To install, own, operate, monitor, maintain, repair, replace and decommission the charging equipment, and to provide the Charging Services;
• To manage electrical load and energy delivery at a site and to protect the safety and integrity of the equipment and the electrical system;
• To create and administer accounts and subscriptions, to authenticate and authorize charging sessions, and to provide customer and technical support;
• To meter, invoice and collect for the Charging Services, to calculate and make revenue share and other payments, to process refunds and disputes, and to meet our tax and financial reporting obligations;
• To apply for, administer, report on and demonstrate compliance with incentive, grant, rebate and utility programs, and to satisfy the reporting, audit, verification and record retention obligations those programs impose on us and on the sites we serve;
• To comply with permitting, inspection, licensing, prevailing wage, safety and other regulatory requirements applicable to the work;
• To communicate with you, including to send service, outage, maintenance, safety and billing notices, and to respond to your inquiries;
• To send you marketing communications about our products and services, subject to your right to opt out at any time and to any consent required by law;
• To measure and analyze use of the Site and the Charging Services, to conduct research and development, and to improve and develop our equipment, software and services;
• To detect, investigate, prevent and address fraud, theft of service, tampering, misuse, security incidents and violations of our agreements and applicable law;
• To create deidentified and aggregated information, including site and fleet level utilization and energy statistics and spatial models derived from media captured through an Application, which we may use and disclose for any lawful business purpose. Where we intend to retain media captured through an Application for any purpose other than the installation at the site where it was captured, we deidentify it at the point we receive it; and
• To comply with applicable law and legal process, to establish, exercise or defend legal claims, to enforce our agreements, and for any other purpose we describe to you at or before the time of collection or to which you consent.

We and our service providers use cookies and similar technologies on the Site in the following categories: strictly necessary technologies, which are required to operate and secure the Site and cannot be disabled; functional technologies, which remember your preferences.

We do not use advertising or targeting technologies on the Site. We use only strictly necessary and functional technologies and do not display a consent banner. If we later deploy analytics or advertising technologies, we will update this Privacy Policy and provide an appropriate consent or opt-out mechanism before doing so. You can also control cookies through your browser settings. Browsers and other platforms may transmit a Do Not Track signal. There is no common industry or legal standard for responding to those signals, and we do not respond to them. We do not permit third parties to collect personal information about your online activities over time and across different websites or online services through the Site. Because we do not sell or share personal information as described in Section 6, there is at present nothing for an opt-out preference signal to apply to. If that changes, we will honor recognized opt-out preference signals, including the Global Privacy Control, and will update this Privacy Policy before doing so.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising, and we do not process personal information for targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects. We do not knowingly sell or share the personal information of any individual we know to be under 16 years of age.

We do not use automated processing to make decisions about you that produce legal or similarly significant effects. We use automated systems to authorize charging sessions, to manage electrical load, to meter and bill, and to detect faults and misuse.

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and then delete, deidentify or aggregate it, except where a longer period is required or permitted by law or by a program in which a site participates. The periods set out below are the periods we generally apply. An actual period may be longer where required by law, by a program in which a site participates, or by a legal hold. Our retention periods are as follows:

• Host, site and project records, including agreements, site assessments, installation and commissioning records: for the term of the arrangement and for six years thereafter, and for any longer period required by law or by an applicable incentive or grant program;
• End User account and subscription records: for the term of the account and 24 months thereafter;
• Charging session and billing records: seven years from the end of the applicable tax year, or any longer period required by an applicable program;
• Equipment telemetry, diagnostic and fault records: 24 months, other than records of safety or tamper events, which we retain for six years;
• Program eligibility and compliance records: for the period the program requires and, where the program does not specify, for six years;
• Communications and support records: three years from the last communication;
• Media captured through an Application, in identifiable form: until the installation at the site where it was captured is complete and for 12 months thereafter, after which we delete it or retain it only in deidentified form;
• Marketing contact information: until you opt out, and thereafter only as necessary to honor your opt-out; and
• Records subject to a legal hold or necessary to establish, exercise or defend legal claims: for the duration of the matter and any applicable limitations period.

We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration and destruction, appropriate to the nature of the information and the size and complexity of our operations. These measures include the use of reputable hosting, payment and network management providers that maintain their own security programs, and access controls appropriate to the sensitivity of the information. We do not store full payment card numbers; card payments are processed by our payment processor.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and any access media issued to you. If we become aware of a security incident affecting your personal information, we will notify you and the applicable authorities to the extent and within the time required by applicable law.

Depending on where you live, you may have some or all of the following rights with respect to your personal information: to know what we have collected, the sources, the purposes and the categories of third parties to which we disclose it; to access a copy, including in a portable format; to correct inaccurate information; to delete information, subject to exceptions permitted by law; to opt out of any sale or sharing of personal information and of targeted advertising; to limit our use and disclosure of sensitive personal information; to opt out of profiling that produces legal or similarly significant effects; to withdraw consent where our processing is based on consent; to appeal a denial of a request; and to be free from unlawful discrimination or retaliation for exercising these rights.

Some information we hold cannot be deleted on request because we are required to keep it, including records we must retain for tax purposes and records we must retain and make available for audit under an incentive or grant program in which a site participates. Where an exception applies we will tell you which one and delete the balance.

The following disclosures supplement the sections above and are provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”). In the preceding 12 months we have collected the categories of personal information described in Section 2, being identifiers, customer records and commercial information, internet and network activity information, geolocation data, professional and employment-related information in a business capacity, inferences drawn from the foregoing and the categories of sensitive personal information described in Section 2.5; from the sources described in Section 2; for the business and commercial purposes described in Section 3; and we have disclosed those categories for a business purpose to the categories of recipients described in Section 4. Our sale and sharing position is stated in Section 6 and our retention periods in Section 8.

California residents may also request information about our disclosure of personal information to third parties for those parties' direct marketing purposes under California Civil Code Section 1798.83 by contacting us as described in Section 14.

We provide notice of the categories of personal information we collect and the purposes for collection at or before the point of collection by means of a conspicuous link to this Privacy Policy, including on the forms on the Site and in the documents through which we sign up Hosts and End Users.

Residents of other states that have enacted comprehensive consumer privacy legislation may have the rights described in Section 10, subject to the scope and the exceptions of the applicable statute, and may exercise them in the same way.

The Charging Services and the Site are not directed to children, and we do not knowingly collect personal information from anyone under 13 years of age. We do not sell or share the personal information of any individual we know to be under 16 years of age. If you believe a child under 13 has provided us with personal information, please contact us as described in Section 14 and we will investigate and delete it.

We operate in the United States and process personal information in the United States. The Site and the Charging Services are intended for users in the United States. If you access the Site from outside the United States, you do so on your own initiative and understand that your information will be processed in the United States.

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date above and post the updated policy at www.moonfive.tech/privacy. If we make a material change, including a change in the purposes for which we use personal information we have already collected, we will provide advance notice by a prominent notice on the Site and, where we hold an email address associated with your account or your project, by email, and will obtain your consent where required by law. A change to this Privacy Policy applies only to personal information collected after the change takes effect, unless we obtain your consent to apply it to information we have already collected. We retain prior versions of this Privacy Policy and will provide a copy on request.

If you have questions about this Privacy Policy or our privacy practices, or wish to exercise any of the rights described above, please contact us at: