This Privacy Notice (“Notice”) applies to personal data TerraWatt, LLC (“TerraWatt,” “we,” “us,” or “our”) collects through our websites and other online services that link to this Notice (collectively, the “Sites”), and in connection with our sales, marketing, and recruiting activities. This Notice also covers rights and choices related to your personal data.

This Notice does not apply to personal data we process on behalf of our customers as a service provider, processor, or data-center operator. Our processing of customer-provided data is governed by the applicable customer agreement (e.g., a master services agreement and data processing addendum), not by this Notice.

Data We Collect

We collect data about you in different ways. For example, we collect data:

• Directly from you. This includes when you contact us, request information or a quote, subscribe to communications, register for an event or webinar, or apply for a job.
• Automatically. This includes through cookies, server logs, and similar technologies on our Sites and in our emails.
• From other sources. These can include our vendors and service providers, marketing and lead-generation providers, business partners, publicly available sources, and other companies.

The following are examples of our collection and use of data:

Context	Examples of Personal Data	Primary Purpose
Site Visitors	Device and usage data collected automatically, such as IP address, browser and device information, referring website, and pages viewed.	To operate and secure our Sites, understand how visitors engage with them, gather analytics, and improve them.
Business / Sales & Marketing Contacts	Name, business contact information, company, job title, and the content of your inquiries. We collect the contact information of prospective and current customers, vendors, and business partners and their personnel with whom we interact.	To respond to inquiries, provide quotes and information, manage and develop business relationships, and communicate about projects, services, and billing.
Email Interactions	Whether you open our messages and click links or banners in them.	To understand how you engage with our communications.
Feedback / Support	Name, email, and other content you send when you provide feedback or contact us for support.	To receive and act upon feedback and provide support.
Event & Webinar Registration	Name, business contact information, and registration details.	To administer events and webinars and follow up with attendees.
Job Applicants	Information needed to process your application, which may include your Social Security number where required. Providing required information is a condition of employment.	To evaluate your application, consider you for positions, comply with law, and manage staffing and workforce operations.
Facility Visitors	For visitors to our data-center facilities, identity, credential, and access-log information, and video surveillance footage.	To protect the security of our facilities, personnel, and equipment and to maintain access records.

Sensitive Personal Data. We collect certain categories of sensitive personal data (as defined under applicable law): Social Security, driver’s license, state identification card, or passport number; account log-in or financial-account credentials; and, for facility access, biometric or precise-location information where applicable. We collect this data to process employment applications, verify identity, secure our facilities, comply with law, and manage our business. Where a state privacy law requires consent to process sensitive personal data, we process it only with your consent or as otherwise permitted by law. We do not sell your personal data, including sensitive personal data or biometric data, and we do not “share” personal data for cross-context behavioral advertising except as described under “Cookies and Targeted Advertising” below.

How We Use Data

We also use data to:

• Respond to your requests, inquiries, and feedback.
• Provide, improve, and develop our services.
• Conduct analytics and understand how our Sites are used.
• Market our products or services to prospective and current business customers.
• Administer events, webinars, and communications.
• Evaluate and process employment applications.
• Secure our Sites and facilities and detect, prevent, and respond to fraud, security incidents, and illegal activity.
• Debug and repair errors that impair our Sites and services.
• Enforce our policies and agreements, establish or exercise our rights, and defend against legal claims.
• Comply with legal and regulatory obligations.
• For other purposes with your consent.

We often have multiple purposes for collecting data. Our collection and processing of your data is based, in different contexts, on your consent, our legitimate business interests, our need to perform a contract, and/or our legal obligations. To the extent we store and use de-identified data, we will not attempt to re-identify it except to test our de-identification methods.

How We Share Data

In addition to the situations described elsewhere in this Notice, we may share personal data as follows:

• Service Providers. We share data with service providers that help us run our Sites, host and secure data, conduct analytics, provide technical support, and support our marketing and recruiting. Service providers are contractually restricted from using the data except to perform services for us.
• Professional Advisors. We may share data with our auditors, lawyers, insurers, and other professional advisors.
• Business Partners. We may share data with business partners in connection with joint offerings or marketing, subject to this Notice.
• Corporate Transactions. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets (or negotiations for the same), we may share data with the counterparties and their advisors.
• Legal and Safety. We may share data to comply with law, respond to legal process, cooperate with law enforcement, protect the rights, safety, and property of TerraWatt or others, enforce our agreements, and investigate or prevent illegal activity or security incidents.
• With Your Consent. We may share data with third parties when you consent or direct us to.

The table below indicates the categories of personal data we collect and the categories of recipients to which we disclose them for a business purpose. We do not sell your personal data, and we do not share personal data for cross-context behavioral advertising, except as described under “Cookies and Targeted Advertising” below.

Category of Personal Data	Disclosed for a Business Purpose To	Sold / Shared for Targeted Advertising
Identifiers (e.g., name, alias, postal/email address, IP address, account name)	Service providers; professional advisors; business partners; analytics providers; hosting/security providers	Not sold. Shared with advertising partners only as described under “Cookies and Targeted Advertising.”
Contact and financial records (e.g., signature, contact and payment information)	Service providers; professional advisors	Not shared.
Characteristics of protected classifications (e.g., age, sex, race — chiefly from job applicants)	Service providers; professional advisors	Not shared.
Commercial information (e.g., services considered or obtained)	Service providers; professional advisors; business partners	Not shared.
Internet or other network activity (e.g., browsing/usage on our Sites)	Analytics providers; hosting/security providers; service providers	Shared with advertising partners only as described under “Cookies and Targeted Advertising.”
Geolocation data (non-precise, from IP address)	Analytics providers; service providers	Not shared.
Audio/visual information (e.g., facility surveillance footage)	Security service providers; professional advisors	Not shared.
Professional or employment-related information (from job applicants)	Service providers; professional advisors; background-check providers	Not shared.
Government-issued identifiers (e.g., SSN, driver’s license — from job applicants)	Service providers; professional advisors	Not shared.
Sensitive personal data	As above; processed only as permitted by law and, where required, with consent	Not sold or shared.
Inferences drawn from the above	Analytics providers; service providers	Not shared.

Cookies and Targeted Advertising

Our Sites. We use technologies such as cookies, clear GIFs, and pixels to operate our Sites, understand how you engage with them (including links you click and information you enter in our forms), track your IP address and referring website, gather analytics, learn your preferences, and help detect and prevent fraud. Where required by law, we base the use of these technologies on your consent.

Third-Party Advertising Technology. We may permit third parties to place tracking technologies on our Sites. These third parties may collect data about your online activities over time and across other websites and use it to serve ads tailored to your interests, which may include ads about our products or services. See the “Your Choices” section below for more information.

Your Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal data:

• Access / Know. Confirm whether we process your personal data and obtain access to it, and in certain cases a copy in a portable, machine-readable form.
• Correction. Ask us to correct inaccurate or incomplete data. We may keep historical data in our backup files as permitted by law.
• Deletion. Ask us to delete your personal data. Where required by law we will do so, but in many cases we must retain data to comply with legal obligations, resolve disputes, enforce agreements, or for other permitted purposes.
• Opt Out of Sale, Targeted Advertising, and Profiling. Direct us not to sell your personal data or process it for targeted advertising or for profiling that produces legal or similarly significant effects. We do not sell personal data. You may opt out of online targeted advertising by using the cookie settings link in the footer of our homepage. We recognize Global Privacy Control (GPC) and other universal opt-out preference signals broadcast from browsers and devices as valid opt-out requests where required by applicable law. If a signal conflicts with a manual choice you have made on our Sites, we will honor your manual choice.
• Marketing Communications. Opt out of our marketing emails by following the unsubscribe instructions in those emails. We may still send you service-related communications.

Not all of these rights are absolute, and they do not apply in all circumstances. We may limit or deny a request where the law permits or requires. We will not discriminate or retaliate against you for exercising a privacy right.

Submitting Requests and Appeals

You may exercise these rights through our data-subject request form https://forms.cloud.microsoft/r/3MbXSXscka, by emailing privacy@terrawatt.com, or by contacting us using the information below — at least two methods are available, and you are not required to create an account to submit a request. We will require you to verify your identity for most requests and may do so by phone or email. In some circumstances, you may use an authorized agent, who must provide proof of authorization.

Appeals. If we decline to act on your request, you may appeal by contacting us at privacy@terrawatt.com with the subject line “Appeal.” We will respond to your appeal in writing within the time required by applicable law and explain our decision. If your appeal is denied, you may contact the attorney general in your state of residence to submit a complaint.

Response Timing and Format

We endeavor to respond to a verifiable request within the time required by applicable law (generally 45 days, extendable where the law permits; for Nevada opt-out-of-sale requests, within 60 days, extendable by up to 30 additional days). If we need more time, we will inform you.

How We Protect and Retain Data

No method of internet transmission or electronic storage is fully secure. While we use reasonable administrative, technical, and physical safeguards to protect personal data, we cannot guarantee its security. If we are required to notify you of a security incident, we will do so as the law permits.

We keep personal data only as long as necessary to fulfill the purposes described in this Notice unless a longer retention period is required or permitted by law, including to satisfy legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm, the purposes for which we process it, and applicable legal requirements.

Third-Party Applications / Websites

We may provide links to websites and other third-party content or services that we do not own or operate. We have no control over the privacy practices of third parties. For details, see their privacy notices.

Children

Our Sites and online services are not directed to children, and we do not knowingly collect personal data from children under 13. Children should not provide us with their personal data.

Changes to This Privacy Notice

We may change this Notice and our privacy practices. New notices will be published on our Sites. If changes are material, we will notify you as required by applicable law. The “Effective” and “Last Updated” dates above indicate when the current version took effect and was last substantively changed.

Contact Information

If you have questions, comments, or complaints about our privacy practices, or if you need this Notice in an alternative format due to a disability, please contact us:

TerraWatt, LLC

Attn: Privacy Officer
11035 Lavender Hill Drive
160-425
Las Vegas, NV 89135

privacy@terrawatt.com

www.terrawatt.com/contact

State-Specific Privacy Rights

The rights and disclosures below supplement the rest of this Notice for residents of the identified states. TerraWatt operates primarily in Nevada, Texas, and Missouri; if you reside elsewhere, additional rights may apply under your state’s law.

Texas Residents

If the Texas Data Privacy and Security Act (TDPSA) applies to our processing of your personal data, you have the rights to confirm and access, correct, delete, obtain a portable copy of, and opt out of the sale of your personal data, targeted advertising, and certain profiling. To exercise these rights, use the methods in “Submitting Requests and Appeals” above; you may appeal a decision as described there. We honor universal opt-out preference signals. We do not sell personal data. Because we do not sell sensitive personal data or biometric data, we are not required to, and do not, post the TDPSA sensitive- or biometric-data sale notices. We process sensitive personal data only with your consent or as otherwise permitted by law.

Nevada Residents

Nevada law allows consumers to direct a website operator not to make any “sale” (i.e., the exchange of covered information for monetary consideration) of the covered information the operator collects about them. TerraWatt does not sell covered information for monetary consideration. Even so, you may submit a verified request directing us not to sell your covered information through our designated request address: privacy@terrawatt.com We will respond within 60 days (extendable by up to 30 additional days where reasonably necessary, with notice to you).

California Residents

These disclosures apply only if TerraWatt is “doing business” in California within the meaning of the California Consumer Privacy Act (CCPA/CPRA) and you are a California resident. If so, you have the rights to know/access, correct, delete, opt out of sale/sharing, and limit the use of sensitive personal data, and the right not to be discriminated against for exercising them, as described above. The categories of personal data we collect, our sources, purposes, and the categories of recipients are described in the “Data We Collect,” “How We Use Data,” and “How We Share Data” sections. We do not sell personal data or share it for cross-context behavioral advertising except as described under “Cookies and Targeted Advertising.” Because our relationships are primarily with businesses rather than individual consumers, the California “Shine the Light” law generally does not apply; if it does, you may request the categories of personal data we shared with third parties for their direct-marketing purposes using the contact information above.