Legal
California privacy notice
Effective September 15, 2026
This notice supplements our Privacy Policy and applies to California residents under the California Consumer Privacy Act as amended by the CPRA. Your utility usage data is personal information under California law, and interval readings in particular are treated as sensitive.
Notice at collection
We collect the categories below. Each is collected directly from you or, with your authorization, from your utility through UtilityAPI.
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| Identifiers | Name, email address, account identifier, IP address | Account creation, authentication, communication | Life of account |
| Customer records | Service address, billing address, utility billing account number, meter numbers | Identifying your service points and retrieving your data | Life of account |
| Commercial information | Billing history, charges, rate plan, line-item costs and credits | Spend analysis and fee breakdown | Life of account |
| Geolocation data | Map coordinates derived from your service address — not device location | Displaying your service point on a map | Life of account |
| Internet activity | Pages viewed, features used, browser and device type | Product improvement and security | 90 days |
| Inferences | Usage patterns, time-of-use profile, peak demand, load factor | The analysis shown on your dashboard | Life of account |
Sensitive personal information
Fifteen-minute interval electricity readings can imply when a residence is occupied. We treat this as sensitive personal information and use it for one purpose only: producing the usage analysis you asked us for. We do not use or disclose it to infer characteristics about you, and California law therefore does not require us to offer a separate “limit use” option — but you can delete it at any time.
We do not sell or share your personal information
We have not sold personal information in the preceding twelve months, and we do not share it for cross-context behavioral advertising as those terms are defined by the CCPA. We have no plans to.
We do honor the Global Privacy Control signal as an opt-out request, even though we have nothing to opt out of.
Your rights
- Right to know — the categories and specific pieces of personal information we have collected, where it came from, why we collected it, and who we disclosed it to
- Right to delete — request erasure, subject to narrow legal exceptions
- Right to correct — fix inaccurate personal information
- Right to opt out — of sale or sharing. We do neither, but the right stands
- Right to limit — restrict use of sensitive personal information
- Right to non-discrimination — we will not degrade your service or charge you differently for exercising any of these
How to exercise them
The fastest route is self-service: sign in and use Data & privacy in account settings to export or delete everything immediately, no waiting period.
You can also email privacy@growpros.com. We will confirm receipt within 10 business days and respond within 45 calendar days, extendable once by a further 45 days where necessary. To protect your data we will verify your identity by confirming control of the email address on the account.
Authorized agents
You may use an authorized agent. We will require written permission signed by you and will still verify your identity directly.
Contact
GrowPros, Inc.
123 Example Street, Suite 100, Los Angeles, CA 90001, United States
privacy@growpros.com