Privacy Policy

Last updated: March 2026

Introduction

Wattnest ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at wattnest.net, use our predictive maintenance platform, or interact with us in any other way.

Wattnest is headquartered in Santa Cruz, California. By using our services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide when you interact with us, including:

  • Contact information: Name, email address, phone number, company name, and job title when you fill out a contact form, request a demo, or subscribe to our communications.
  • Account information: Login credentials and profile information when you create an account on our platform.
  • Communication data: Content of emails, messages, and other communications you send to us.
  • Payment information: Billing address and payment method details processed through our third-party payment processor. We do not store full credit card numbers on our servers.

Information Collected Automatically

When you visit our website or use our platform, we automatically collect certain information, including:

  • Device and browser data: IP address, browser type and version, operating system, device type, and screen resolution.
  • Usage data: Pages visited, time spent on pages, click patterns, referral sources, and navigation paths.
  • Location data: General geographic location based on your IP address.

HVAC Equipment Data

When you use our predictive maintenance platform, we collect operational data from HVAC equipment connected to the system. This includes sensor readings (temperature, pressure, vibration, current draw), equipment status indicators, fault codes, and performance metrics. This data is collected from building automation systems via BACnet/IP or Modbus protocols and is associated with your organization's account. Equipment data does not contain personal information about building occupants.

How We Use Your Information

We use the information we collect for the following purposes:

  • Providing our services: To operate, maintain, and improve our predictive maintenance platform, including fault detection, equipment health scoring, and predictive analytics.
  • Communication: To respond to inquiries, send service updates, and deliver requested information about our products.
  • Analytics and improvement: To understand how our website and platform are used, identify trends, and improve user experience.
  • ML model training: To improve the accuracy and performance of our machine learning models for fault detection and predictive maintenance. Equipment operational data may be used in anonymized, aggregated form to train and validate our models.
  • Security: To detect, prevent, and respond to fraud, security threats, and technical issues.
  • Legal compliance: To comply with applicable laws, regulations, and legal processes.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activity on our website. Cookies are small text files stored on your device that help us provide and improve our services.

  • Essential cookies: Required for basic website functionality, such as session management and security features. These cannot be disabled.
  • Analytics cookies: Help us understand how visitors interact with our website by collecting anonymous usage data. We use Google Analytics for this purpose.
  • Functional cookies: Remember your preferences and settings to provide a more personalized experience.

You can control cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of our website. Most browsers allow you to refuse cookies or alert you when cookies are being sent.

Third-Party Services

We may share information with the following categories of third-party service providers:

  • Cloud infrastructure: We use cloud hosting providers to store and process data. All data is stored in data centers located within the United States.
  • Analytics providers: We use analytics services to understand website usage patterns.
  • Payment processors: Payment information is handled by PCI-compliant third-party payment processors.
  • Communication tools: We use third-party services for email delivery and customer support.

We require all third-party service providers to maintain appropriate security measures and to use your information only for the purposes we specify. We do not sell your personal information to third parties.

Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
  • Role-based access controls limiting data access to authorized personnel.
  • Regular security audits and vulnerability assessments.
  • Secure development practices including code review and dependency scanning.
  • Edge devices communicate with cloud infrastructure over encrypted channels with certificate-based authentication.

While we strive to use commercially acceptable means to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Account information is retained for the duration of your account and for a reasonable period thereafter. HVAC equipment operational data is retained for the duration of your service agreement plus 12 months to support model accuracy and historical analysis. You may request deletion of your data at any time by contacting us.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to certain legal exceptions.
  • Portability: Request a copy of your data in a structured, machine-readable format.
  • Opt-out: Opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.
  • Do Not Sell: We do not sell personal information. California residents may exercise their rights under the CCPA by contacting us.

To exercise any of these rights, please reach us via the contact page. We will respond to verified requests within 30 days.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

International Data Transfers

Our services are primarily operated from the United States. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our services, you consent to such transfer. We take appropriate measures to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of our services after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: