Privacy Policy

Last updated: August 2026

Introduction

Wattnest ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at wattnest.net, use our operations platform, or interact with us in any other way.

Wattnest is headquartered in the Bay Area, California. By using our services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide when you interact with us, including:

  • Contact information: Name, email address, phone number, company name, and job title when you fill out a contact form, request a demo, or subscribe to our communications.
  • Account information: Login credentials and profile information when you create an account on our platform.
  • Communication data: Content of emails, messages, and other communications you send to us.
  • Payment information: Billing address and payment method details processed through our third-party payment processor. We do not store full credit card numbers on our servers.

Information Collected Automatically

When you visit our website or use our platform, we automatically collect certain information, including:

  • Device and browser data: IP address, browser type and version, operating system, device type, and screen resolution.
  • Usage data: For signed-in platform users, we record the account email address, sign-in time, session and screen changes (including dashboard sections), visible engagement time, scroll milestones, named controls used, exits, repeated-click signals, and browser errors. We do not record text entered into form fields. We use this first-party information to understand customer journeys, identify usability bottlenecks, improve the platform, and administer access.
  • Location data: General geographic location based on your IP address.

Building-System and Service Data

When you use our operations platform, we may process authorized operational data from HVAC, controls, or refrigeration systems and related service records. Depending on the qualified data path, this can include sensor readings, equipment status, alarms, point mappings, trend data, system relationships, and work-order history associated with your organization's account. Building-system data is not intended to contain personal information about building occupants.

How We Use Your Information

We use the information we collect for the following purposes:

  • Providing our services: To operate, maintain, and improve our operations platform, including data ingestion and normalization, service-case prioritization, workflow connections, and customer-facing views.
  • Communication: To respond to inquiries, send service updates, and deliver requested information about our products.
  • Analytics and improvement: To understand how our website and platform are used, identify trends, and improve user experience.
  • Product improvement: To improve the accuracy and usefulness of AI-assisted prioritization, likely-cause hypotheses, and diagnostic guidance. Operational data may be used in anonymized, aggregated form to evaluate and improve our systems where permitted by the applicable agreement.
  • Security: To detect, prevent, and respond to fraud, security threats, and technical issues.
  • Legal compliance: To comply with applicable laws, regulations, and legal processes.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activity on our website. Cookies are small text files stored on your device that help us provide and improve our services.

  • Essential cookies: Required for basic website functionality, such as session management and security features. These cannot be disabled.
  • First-party product analytics: For approved, signed-in platform users, temporary browser-session storage and authenticated activity records help us connect screen views into a journey. These records are associated with the signed-in account as described above; they do not capture form-field contents.
  • Functional cookies: Remember your preferences and settings to provide a more personalized experience.

You can control cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of our website. Most browsers allow you to refuse cookies or alert you when cookies are being sent.

Third-Party Services

We may share information with the following categories of third-party service providers:

  • Cloud infrastructure: We use cloud hosting providers to store and process data. All data is stored in data centers located within the United States.
  • Analytics infrastructure: We use our cloud infrastructure to store and analyze authenticated product-usage records.
  • Payment processors: Payment information is handled by PCI-compliant third-party payment processors.
  • Communication tools: We use third-party services for email delivery and customer support.

We require all third-party service providers to maintain appropriate security measures and to use your information only for the purposes we specify. We do not sell your personal information to third parties.

Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
  • Role-based access controls limiting data access to authorized personnel.
  • Regular security audits and vulnerability assessments.
  • Secure development practices including code review and dependency scanning.
  • Edge devices communicate with cloud infrastructure over encrypted channels with certificate-based authentication.

While we strive to use commercially acceptable means to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Account information is retained for the duration of your account and for a reasonable period thereafter. Signed-in dashboard usage records are retained for up to 12 months. You may request deletion of your data at any time by contacting us.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to certain legal exceptions.
  • Portability: Request a copy of your data in a structured, machine-readable format.
  • Opt-out: Opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.
  • Do Not Sell: We do not sell personal information. California residents may exercise their rights under the CCPA by contacting us.

To exercise any of these rights, please reach us via the contact page. We will respond to verified requests within 30 days.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

International Data Transfers

Our services are primarily operated from the United States. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our services, you consent to such transfer. We take appropriate measures to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of our services after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: