EU Data Act Compliance Notice

Effective Date: September 12, 2025 Last Updated: May 12, 2026

Our Energy Storage Cloud Platform complies with the EU Data Act (EU Regulation 2023/2854) and the General Data Protection Regulation (GDPR). This notice explains how we collect, store, protect, and manage data, as well as the rights available to users in the European Union.

What Data We Collect

When you use our energy storage devices and cloud services, we may collect and process the following types of data:
  • Device operation data: operating status, charging/discharging power, battery temperature, state of charge (SOC), hardware status, and other device information.
  • Sensor and controller data: voltage, current, speed, operating conditions, and other real-time signals.
  • System and software data: device information, software version, OTA update records, and upgrade history.
  • Diagnostics and maintenance data: configuration, firmware details, energy statistics, fault logs, and maintenance information.
  • Account and application data: account information, network connection details, device identifiers, configuration settings, and application activity logs.

Data Formats

Users can access and export their data in standard, machine-readable formats such as JSON and CSV. Exported files include timestamps, device identifiers, metadata, and field descriptions to support use with third-party platforms.

Where Your Data Is Stored

For users located in the European Union:
  • Personal and device data is stored in EU-based data centers.
  • We use encrypted, redundant storage to help protect data from loss or unauthorized modification.
  • Data is retained only for as long as necessary to provide our services, comply with legal obligations, and maintain system security. Once no longer required, data will be deleted or anonymized.

Your Rights

Under the EU Data Act and GDPR, you have the right to:
  • Access your data
  • View your device information and records
  • Export your data
  • Transfer your data to another service provider
  • Correct inaccurate information
  • Request deletion of your data where applicable
  • Stop data sharing where legally permitted
  • Submit complaints regarding data handling
We will not restrict these rights through contractual, technical, or financial barriers.

Accessing Your Data

You can access your device information at any time through the platform, including:
  • Device operating data
  • System logs
  • Configuration settings
  • Firmware update history
  • Diagnostic information
The platform also provides dashboards and filtering tools to help you review your data.
If you need historical records, you may submit a request through our official support channels, and we will respond within the time required by applicable law.

Exporting Your Data

You can download your business and device data in a standard, machine-readable format for your own use.
The platform provides self-service export tools, allowing you to download your data without additional requirements or paid services.
From January 12, 2027, all eligible data export services will be provided free of charge.

Transferring Your Data

You have the right to move your data to another cloud service provider or to your own IT infrastructure.
  • Provider switching requests will not require a notice period longer than two months.
  • Standard data transfers will normally be completed within 30 days. If technical limitations make this impossible, the period may be extended in accordance with applicable law.
  • We will support data migration while maintaining the continuity of essential monitoring and management services whenever possible.
  • We will not use technical restrictions or proprietary formats to prevent lawful data transfers.

Data Security

We protect your data by using:
  • Encryption for stored and transmitted data
  • Role-based access control based on the principle of least privilege
  • Audit logs for data access, export, migration, and administrative activities
  • Account security measures, login protection, and abnormal login detection

Privacy Protection

We are committed to protecting your privacy by:
  • Collecting only the data necessary to provide our services
  • Masking sensitive personal information where appropriate
  • Not sharing or selling your personal or device data without your consent, unless required by law
  • Clearly explaining how your data is collected, used, stored, and shared through our Privacy Policy

Security Management

We maintain an internal data security management program that includes:
  • Defined responsibilities for data security personnel
  • Internal security policies and operational procedures
  • Regular security assessments, vulnerability scans, and penetration testing
  • Access controls for employees, contractors, and third-party service providers

Compliance Audits

We regularly review our data management processes to ensure compliance with applicable regulations.
Audit records are maintained to support regulatory inspections and customer requests where appropriate.

Data Security Incidents

If a data security incident occurs, we will:
  • Activate our incident response procedures immediately
  • Contain and investigate the issue
  • Notify the relevant authorities and affected users where required by law
  • Review the incident and improve our security measures to help prevent similar events

Protection Against Unlawful Government Access

We use technical, organizational, and legal safeguards to protect EU user data from unlawful access requests by non-EU authorities.
Where permitted by law, requests without a valid legal basis will be challenged or refused.

Our Responsibilities

As the data controller, we are responsible for protecting your data throughout its lifecycle.
This includes maintaining appropriate security measures, supporting lawful data transfers, responding to incidents, and ensuring that third-party partners handling data meet our compliance requirements.

Contact and Updates

You may submit requests related to data access, export, transfer, or complaints through the platform or our designated support email.
This notice may be updated from time to time to reflect changes in our services or applicable laws. The latest published version will always apply.