Privacy Policy

1. Introduction

GridBrain ("we", "us", or "our") is operated by Tyche LLC. This Privacy Policy explains how we collect, use, and protect your information when you use our website at getgridbrain.com and our grid intelligence API services.

By using GridBrain, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

**Information you provide directly:** - Email address (when you sign up, contact us, or use the ROI calculator) - Company name and facility type (when you request API access) - Usage information you share during onboarding

**Information collected automatically:** - IP address and browser type - Pages visited and time spent on our website - API request logs (timestamps, endpoints called, response status)

**Information we do NOT collect:** - Payment card numbers (handled by third-party processors) - Social Security numbers or government IDs - Sensitive personal information

3. How We Use Your Information

We use your information to:

- Provide and improve the GridBrain service - Send your savings estimates and reports when requested - Communicate about your account, pilot program, or subscription - Send product updates and relevant energy market insights (you can opt out at any time) - Analyze usage patterns to improve our signal accuracy - Comply with legal obligations

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL database hosted on AWS). We implement industry-standard security measures including:

- Encrypted connections (HTTPS/TLS) for all data transmission - Row-level security on our database - Access controls limiting who can view your data - Regular security reviews

We do not sell, trade, or rent your personal information to third parties.

5. Third-Party Services

GridBrain uses the following third-party services that may process your data:

- **Supabase** — Database and authentication (supabase.com/privacy) - **Vercel** — Website hosting (vercel.com/legal/privacy-policy) - **Railway** — Backend infrastructure (railway.app/legal/privacy) - **ERCOT** — Grid data source (we access their public API only)

Each service has its own privacy policy governing their data practices.

6. Cookies

GridBrain uses minimal cookies necessary for the website to function. We do not use advertising cookies or sell cookie data to third parties.

You can control cookie settings through your browser settings. Disabling cookies may affect some website functionality.

7. Your Rights

You have the right to:

- **Access** — Request a copy of the personal data we hold about you - **Correction** — Request correction of inaccurate data - **Deletion** — Request deletion of your personal data - **Opt-out** — Unsubscribe from marketing emails at any time - **Portability** — Request your data in a portable format

To exercise any of these rights, email us at: privacy@getgridbrain.com

8. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

- Email addresses: Until you request deletion or unsubscribe - API usage logs: 90 days - Grid signal data: 12 months (anonymized after) - Account information: Duration of your subscription + 30 days after cancellation

9. Children's Privacy

GridBrain is a B2B service intended for business operators. We do not knowingly collect personal information from anyone under 18 years of age. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a prominent notice on our website. Your continued use of GridBrain after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

**Tyche LLC — GridBrain** Email: privacy@getgridbrain.com Website: getgridbrain.com