The Computer Work Company, Inc.

The Computer Work Company Privacy Notice

Last Updated: August 5, 2026

This Privacy Notice explains how The Computer Work Company, Inc. (referred to as "TCWC", "Company", "we", "us", or "our") collects, uses, discloses, and otherwise processes personal data in connection with Energy, the Company's desktop, web, and online AI services, as well as any other product, service, or application that references or links to this Privacy Notice (collectively, our "Services"). We may also choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer to the Region-Specific Disclosures section below for additional disclosures that may be applicable to you.

This Privacy Notice does not address our privacy practices relating to TCWC job applicants, employees and other employment-related individuals, nor data that is not subject to applicable data protection laws (such as deidentified or publicly available information). This Privacy Notice is also not a contract and does not create any legal rights or obligations not otherwise provided by law.

Our Role in Processing Personal Data

The Company operates as a technology service provider. Through Energy, we provide an AI-powered agent service that can perform workflows and actions on your behalf, including by connecting your Google Workspace accounts and by using a full browser to navigate and interact with webpages that you direct it to access. When you direct the Service to perform actions, relevant Google Workspace content and webpage content encountered while performing your requested action may be processed by our AI model providers solely to complete that user-directed request.

This Privacy Notice describes our privacy practices where we are acting as the controller of personal data. To the extent we directly collect personal data from you (such as your name, email address, and IP address) in connection with account creation and the operation of our Services, we act as the "controller" of that data, meaning we determine the purposes and means of its processing. This Privacy Notice does not apply to the extent we process personal data as a processor or service provider on behalf of an organization whose Google Workspace account a user connects to the Service. Where an organization's administrator directs how the Service accesses, processes, or manages that organization's Google Workspace content, the organization's own privacy notice governs, and we recommend contacting the relevant organization for information about how it processes personal data through its use of our Services.

If you access our Services or otherwise interact with us from the European Economic Area, United Kingdom, or Switzerland, please see the Controller Details and Privacy Contacts section of our Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures for more information about our legal entities operating as the controllers of your personal data.

Our Collection and Use of Personal Data

The categories of personal data we collect depend on how you interact with us and our Services. For example, you may provide us your personal data directly when you create an account, direct the Service to perform a workflow or agent action, or otherwise interact with us.

We also collect personal data automatically when you interact with our websites and other services and may also collect personal data from other sources and third parties.

Personal Data Provided by Individuals

We collect the following categories of personal data individuals provide us:

If you choose to contact us, we may need additional information to fulfill the request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the request we receive or personal data we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

• Google Workspace Information, including message content, file content, calendar events, document text, spreadsheet data, presentation content, and related metadata from connected Google Workspace services when needed to perform user-directed actions. We use this information primarily to run user-directed workflows and agent actions at your direction.
• Webpage and Browsing Content, including the text and compressed content of webpages that you direct the Service to access, the sequence of pages, links, and other webpages visited or surfaced during your session, and related thread information. We do not capture screenshots or otherwise record images of your screen through our Services. We use this information primarily to perform the actions you direct, and, in the future, we may also use this information (including in aggregated or deidentified form) to train and improve our AI models.
• Feedback and Support Information, including the contents of messages sent through our support channels, email addresses, or other contact information we make available to users. We use this information primarily to investigate and respond to your inquiries, to communicate with you, and to improve our Services.

Sensitive Personal Data

In connection with your use of our Services, we may collect personal data that could be considered sensitive under certain privacy laws, including the contents of your email or other communications that our AI processes in order to perform your requested actions, and any additional information you choose to provide in response to prompts from our AI in the course of performing your requested actions (such as government identification numbers, financial account information, or health information). We use this sensitive personal data for the purposes described above. We do not sell sensitive personal data, and we do not process or share sensitive personal data for purposes of targeted advertising.

Personal Data Automatically Collected

We, and our third-party partners, automatically collect certain information when you access and use our Services. We typically collect this information through logging technologies and similar automatic data collection methods, including those provided by our third-party analytics providers.

We, and our third-party partners, automatically collect the following data when you use our Services:

All of the information collected automatically allows us to improve your experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our Services, and to diagnose or fix technology problems.

For information about the choices you may have in relation to our use of automatic data collection technologies, please refer to the Your Privacy Choices section below. For additional details about the cookies we use on our websites and to adjust your preferences with regard to those cookies, please review our Cookie Notice.

• Information About Your Device and Network, including the device type, manufacturer, and model, operating system, IP address, browser type, Internet service provider, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier or advertising ID). We employ third-party technologies designed to allow us to recognize when two or more devices are likely being used by the same individual and may leverage these technologies (where permitted) to link information collected from different devices.
• Information About the Way Individuals Use Our Services and Interact With Us, including the site from which you came, the site to which you are going when you leave our services, how frequently you access our services, whether you open emails or click the links contained in emails, whether you access our services from multiple devices, and other browsing behavior and actions you take on our services (such as the pages you visit, the content you view, videos you watch, the communications you have through our services, and the content, links and ads you interact with). We employ third-party technologies designed to allow us to collect detailed information about browsing behavior and actions that you take on our services, which may record your mouse movements, scrolling, clicks, and keystroke activity on our services and other browsing, search or purchasing behavior. These third-party technologies may also record information you enter when you interact with our products or services, or engage in chat features or other communication platforms we provide.
• Information About Your Location, including general geographic location that we or our third-party providers may derive from your IP address

Personal Data from Other Sources and Third Parties

We may receive the same categories of personal data as described above from the following sources and other parties:

• Google Workspace APIs: When you connect your Google Workspace account, we receive data from Google APIs, including account metadata and workspace content that you authorize and direct the Service to access. Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
• Single Sign-On: We may provide you the ability to log in to our services through certain third-party accounts you maintain. When you use these single sign-on protocols to access our services, we do not receive your login credentials for the relevant third-party service. Instead, we receive tokens from the single sign-on protocol to help identify you in our system (such as by your username) and confirm you successfully authenticated through the single sign-on protocol. This information allows us to more easily provide you access to our products and services.
• Service Providers: Our service providers that perform services on our behalf, such as analytics and certain marketing providers, collect personal data and often share some or all of this information with us. For example, we receive personal data you may submit in response to requests for feedback to our survey providers.
• Other Sources: We may also collect personal data about you from other sources, including publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions.

Additional Uses of Personal Data

In addition to the primary purposes for using personal data described above, we may also use personal data we collect to:

• Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations or to deliver the services requested;
• Manage our organization and its day-to-day operations;
• Communicate with you, including via email;
• Facilitate the relationship we have with you and, where applicable, the company you represent;
• Address inquiries or complaints made by or about an individual in connection with our products or services;
• Create and maintain accounts for our users;
• Verify your identity and entitlement to our products and services;
• Market our products and services to you, including through email, phone, text message, push notification, and social media;
• Administer, improve, and personalize our products and services, including by recognizing you and remembering your information when you return to our products and services;
• Identify and analyze how you use our products and services;
• Create aggregated or de-identified information that cannot reasonably be used to identify you, which information we may use for purposes outside the scope of this Privacy Notice;
• Conduct research and analytics on our user base and our products and services, including to better understand the demographics of our users;
• Train, test, and improve our AI models and related technologies, including through the use of aggregated or deidentified information where possible;
• Improve and customize our products and services to address the needs and interests of our user base and other individuals we interact with;
• Test, enhance, update, and monitor the products and services, or diagnose or fix technology problems;
• Help maintain and enhance the safety, security, and integrity of our property, products, services, technology, assets, and business;
• Defend, protect, or enforce our rights or applicable contracts and agreements (including our Terms of Service), as well as to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
• Detect, prevent, investigate, or provide notice of security incidents or other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of TCWC and others;
• Facilitate business transactions and reorganizations impacting the structure of our business;
• Comply with contractual and legal obligations and requirements;
• Fulfill any other purpose for which you provide your personal data, or for which you have otherwise consented.

Our Disclosure of Personal Data

We disclose or otherwise make available personal data in the following ways:

• To Service Providers: We engage other third parties to perform certain services on our behalf in connection with the uses of personal data described in the sections above. Depending on the applicable services, these service providers may process personal data on our behalf or have access to personal data while performing services on our behalf.
• Employers: If you interact with our services in connection with your employment, we may obtain personal data about you from your employer or another company for which you work. For example, we may obtain your contact information from your employer to allow us to communicate with you about your employer's customer relationship with us.
• To Other Businesses as Needed to Provide Services: We may share personal data with third parties you engage with through our services or as needed to fulfill a request or transaction including, for example, payment processing services.
• In Connection with a Business Transaction or Reorganization: We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal data to a third party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal data may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.
• To Facilitate Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement:
  • in connection with the establishment, exercise, or defense of legal claims;
  • to comply with laws or to respond to lawful requests and legal process;
  • to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
  • to detect, suppress, or prevent fraud;
  • to reduce credit risk and collect debts owed to us;
  • to protect the health and safety of us, our customers, or any person; or
  • as otherwise required by applicable law.
• With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction. For example, with your permission, we may post your testimonial on our websites.

Your Privacy Choices

The following privacy choices are made available to all individuals with whom we interact. You may also have additional choices regarding your personal data depending on your location or residency. Please refer to our Region-Specific Disclosures below for information about additional privacy choices that may be available to you.

Communication Preferences

• Email Communication Preferences: You can stop receiving promotional email communications from us by clicking on the "unsubscribe" link provided in any of our email communications. Please note you cannot opt-out of service-related email communications (such as, account verification, transaction confirmation, or service update emails).

Withdrawing Your Consent

Where we have your consent for the processing of your personal data (e.g., when you opt in to receive certain types of marketing communications from us), you may withdraw your consent by following the instructions provided when your consent was requested or by contacting us as set forth in the Contact Us section below.

Automatic Data Collection Preferences

Use Cookie preferences in the site footer to accept or reject analytics cookies on getenergy.com. Where a TCWC-specific preference manager or privacy setting is not available, you may be able to utilize third-party tools and features to further restrict our use of automatic data collection technologies. For example, (i) most browsers allow you to change browser settings to limit automatic data collection technologies on websites, (ii) most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies, and (iii) many devices allow you to change your device settings to limit automatic data collection technologies for device applications. Please note that blocking automatic data collection technologies through third-party tools and features may negatively impact your experience using our Services, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies or you may need to update your preferences on multiple devices or browsers. We do not have any control over these third-party tools and features and are not responsible if they do not function as intended.

Targeted Advertising Preferences

We engage third parties, such as Google Ads, to help us facilitate targeted advertising designed to show you personalized ads based on characteristics such as your device type and general location. The data used for these purposes is primarily collected through cookies and similar automatic data collection technologies.

In addition to taking the steps set forth in the Automatic Data Collection Preferences section above, you may be able to further exercise control over the advertisements that you see by leveraging one or more targeted advertising opt-out programs. For example:

Please note that when you opt out of receiving interest-based advertisements through one of these programs, this does not mean you will no longer see advertisements from us or on our services.  Instead, it means that the online ads you do see from relevant program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third parties' opt-out options or programs or the accuracy of their statements regarding their programs. In addition, program participants may still use automatic data collection technologies to collect information about your use of our services, including for analytics and fraud prevention as well as any other purpose permitted under the applicable advertising industry program.

• Device-Specific Opt-Out Programs: Certain devices provide individuals the option to turn off targeted advertising for the entire device (such as Apple devices through their App Tracking Transparency framework or Android devices through their opt out of ads personalization feature). Please refer to your device manufacturer's user guides for additional information about implementing any available device-specific targeted advertising opt-outs.
• Digital Advertising Alliance: The Digital Advertising Alliance allows individuals to opt out of receiving online interest-based targeted advertisements from companies that participate in their program. Please follow the instructions at https://optout.aboutads.info/?c=2&lang=EN for browser-based advertising and https://www.youradchoices.com/appchoices for app-based advertising to opt out of targeted advertising carried out by our third-party partners and other third parties that participate in the Digital Advertising Alliance's self-regulatory program.
• European Interactive Digital Advertising Alliance: The European Interactive Digital Advertising Alliance similarly allows individuals to opt out of receiving online interest-based targeted advertisements from companies that participate in their program. Please follow the instructions at https://www.youronlinechoices.eu to opt out of browser-based targeted advertising carried out by our third-party partners and other third parties that participate in the European Interactive Digital Advertising Alliance's program.
• Network Advertising Initiative: The Network Advertising Initiative similarly allows individuals to opt out of receiving online interest-based targeted advertisements from companies that participate in their program. Please follow the instructions at https://optout.networkadvertising.org/?c=1 to opt out of browser-based targeted advertising carried out by our third-party partners and other third parties that participate in the Network Advertising Initiative's self-regulatory program.
• Platform-Specific Opt-Out Programs: Certain third-party platforms provide individuals the option to turn off targeted advertising for the entire platform (such as certain social media platforms). Please refer to your platform provider's user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.

Modifying or Deleting Your Personal Data

If you have any questions about reviewing, modifying, or deleting your personal data, you can contact us directly at privacy@getenergy.com. We may not be able to modify or delete your personal data in all circumstances.

Partner-Specific Preferences

Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide:

• Device-Specific / Platform-Specific Preferences: The device and/or platform you use to interact with us (such as you mobile device or social media provider), may provide you additional choices with regard to the data you choose to share with us. For example, many mobile devices allow you to change your device permissions to prevent our products and services from accessing certain types of information from your device (such as your contact lists or precise geolocation data), and many social media platforms allow you to change your platform permissions to prevent integrated products and services from accessing certain types of information connected with your profile. Please refer to your device or platform provider's user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.

Children's Personal Data

Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 13. If an individual is under the age of 13, they should not use our services or otherwise provide us with any personal data either directly or by other means. If a child under the age of 13 has provided personal data to us, we encourage the child's parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child under the age of 13, we will promptly delete that personal data.

Security of Personal Data

We have implemented reasonable physical, technical, and organizational safeguards that are designed to protect your personal data. However, despite these controls, we cannot completely ensure or warrant the security of your personal data.

Retention of Personal Data

We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights.

To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.

Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.

Third-Party Websites and Services

Our services may include links to third-party websites, plug-ins, applications and other services. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to any personal data practices of third parties. To learn about the personal data practices of third parties, please visit their respective privacy notices.

Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:

• European Economic Area, United Kingdom or Switzerland: If you are located in the European Economic Area (Member States of the European Union together with Iceland, Norway, and Liechtenstein), the United Kingdom, or Switzerland, please click here for additional European-specific privacy disclosures, including a description of the personal data rights made available to individuals located in those jurisdictions under applicable law.

Updates to This Privacy Notice

We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals through an in-product banner and by email to registered users. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to privacy@getenergy.com.

Additional United States Privacy Disclosures

These disclosures supplement the information contained in our Privacy Notice by providing additional information about the privacy rights available to individual residents of certain states in the United States and our personal data processing practices relating to those individuals. For a detailed description of how we collect, use, disclose, and otherwise process personal data, please read our Privacy Notice.

Nevada Residents

If you are a resident of the state of Nevada in the United States, you have the right to opt out of the sale of your personal data. Although we do not currently sell personal data of Nevada residents (as defined under Nevada law), you may submit a request to opt-out of the sale of your personal data by emailing us at privacy@getenergy.com.

Additional United States Privacy Disclosures

These Additional United States Privacy Disclosures (for residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) apply solely to and provide additional information about how we collect, use, disclose and otherwise process personal data, either online or offline, of individual residents of certain states in the United States as required under applicable law.

Personal Data Disclosures, Sales and Targeted Advertising

We disclose all of the categories of personal data we collect to the categories of recipients set forth in the Our Disclosure of Personal Data section of our Privacy Notice. We do not sell personal data. However, we work with advertising partners, such as Google Ads, to deliver advertisements based on characteristics such as device type and general location, which may be considered "sharing" for cross-context behavioral advertising or "targeted advertising" under certain state privacy laws.

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit or opt-out of the sale of personal data or the processing of personal data for purposes of targeted advertising (as described in the Your Additional U.S. Privacy Choices section below).

Please note we do not sell the personal data of individuals we know to be less than 16 years of age or share such information for targeted advertising purposes.

Sensitive Personal Data

The following personal data elements we collect may be classified as "sensitive" under certain privacy laws:

We use sensitive personal data for the purposes set forth in the Our Collection and Use of Personal Data section of our Privacy Notice.

We do not sell sensitive personal data, and we do not process or otherwise share sensitive personal data for the purpose of targeted advertising. However, depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit, or withdraw your consent for, our processing of sensitive personal data (as described in the Your Additional U.S. Privacy Choices section below).

• The contents of a consumer's email where the business is not the intended recipient.
• Any additional sensitive personal data that you choose to provide in response to prompts from our AI in the course of using our Services (such as government identification numbers, financial account information, or health information).

Deidentified Information

We may at times receive, or process personal data to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.

Automated Decision-Making and Profiling

We do not conduct automated processing of personal data for the purposes of evaluating, analyzing, or predicting an individual's personal aspects in furtherance of decisions that produce legal or similarly significant effects. As a result, we do not provide a right to exercise control over such forms of automated decision-making and profiling.

Your Additional U.S. Privacy Choices

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:

Right to Opt-Out of Targeted Advertising: The right to direct us not to use or share personal data for certain targeted advertising purposes.

Depending on your state of residency, you may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.

• Right to Know: The right to confirm whether we are processing personal data about you and, for residents of California and Oregon only, to obtain certain personalized details about the personal data we have collected about you, including:
  • The categories of personal data collected;
  • The categories of sources of the personal data;
  • The purposes for which the personal data were collected;
  • The categories of personal data disclosed to third parties (if any), and the categories of recipients to whom this personal data were disclosed;
  • The categories of personal data shared for targeted advertising purposes (if any), and the categories of recipients to whom the personal data were disclosed for these purposes;
  • The categories of personal data sold (if any) and the categories of third parties to whom the personal data were sold; and
  • For Oregon residents only, a list of specific third parties to whom personal data have been disclosed.
• Right to Access & Portability: The right to obtain access to the personal data we have collected about you and, where required by law, the right to obtain a copy of the personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
• Right to Correction: The right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of the personal data.
• Right to Control Over Sensitive Personal Data: The right to exercise control over our collection and processing of certain sensitive personal data.
• Right to Deletion: The right to have us delete personal data we maintain about you. If you are a resident of the State of California under the age of 18, you may also request and obtain removal of user-generated content you have posted on our platform (though please note that such a request does not ensure complete or comprehensive removal of all user-generated content, particularly where user-generated content has been republished or reposted by another user or third party)

Submitting Privacy Rights Requests

Please submit a request specifying the right you wish to exercise by emailing us at privacy@getenergy.com.

To exercise your right to opt-out as it relates to the use of cookies and related technologies that involve the sale of personal data or the use of personal data for targeted advertising purposes, please email us at privacy@getenergy.com.

Before processing your request to exercise certain rights (including the Right to Know, Access & Portability, Correction, and Deletion), we will need to verify your identity and confirm you are a resident of a state that offers the requested right(s). In order to verify your identity, we will generally either require the successful authentication of your account, or the matching of sufficient information you provide us to the information we maintain about you in our systems.

In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or where you are not a resident of one of the eligible states.

Submitting Authorized Agent Requests

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent's authority to act on your behalf. In order to verify the authorized agent's authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.

Submitting Parental Requests

If you wish to submit a privacy request on behalf of your minor child in accordance with applicable law, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal data and you are authorized to submit the request on your child's behalf.

Appealing Privacy Rights Decisions

Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted by replying to the communication resolving your original request.

Additional California-Specific Disclosures

The following disclosures only apply to residents of the State of California.

California Categories of Personal Data

California law requires we provide disclosures to you about what personal data we collect by reference to the enumerated categories of personal data set forth within California law. To address this obligation, we have identified the relevant enumerated California personal data category for the personal data described in the Our Collection and Use of Personal Data section of our Privacy Notice below:

*\*

• Identifiers, such as name, email address, account identifier, and IP address.
• Customer records, such as name and email address.
• Internet / network information, such as device/browser metadata, IP address, request metadata, and usage data.
• Geolocation data, such as approximate location derived from IP address.
• Sensitive personal data, such as contents of communications.

Additional European Economic Area, United Kingdom, and Switzerland Privacy Disclosures

These disclosures supplement the information contained in our Privacy Notice by providing additional information about our personal data processing practices relating to individuals who access our services or otherwise interact with us from the European Economic Area ("EEA"), United Kingdom (\"UK\")*,* and Switzerland. For a detailed description of how we collect, use, disclose, and otherwise process personal data, please read our Privacy Notice.

Controller Details and Privacy Contacts

EEA, UK, and Swiss Controller

The Computer Work Company, Inc., a company duly incorporated and organized under the laws of the State of Delaware, having its registered address at 2632D Hyde Street, San Francisco, CA 94109, is the "controller" responsible for the processing of personal data in connection with our EEA, UK, and Swiss services and operations. This means The Computer Work Company, Inc. determines and is responsible for how your personal data is used. You may contact The Computer Work Company, Inc. by emailing privacy@getenergy.com.

Additional Questions or Complaints

If you have a concern about our processing of personal data, you have the right to lodge a complaint with the Data Protection Authority where you reside, where you work, or where an alleged violation of the law has occurred. Contact details for applicable Data Protection Authorities can be found using the links below:

We would, however, appreciate the chance to handle your concerns directly prior to a complaint being filed, so please contact us directly at privacy@getenergy.com if you have any concerns.

• European Economic Area: https://edpb.europa.eu/about-edpb/board/members_en
• United Kingdom: https://ico.org.uk/global/contact-us/
• Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

Purposes and Legal Bases of Processing

When we process your personal data, we will do so in reliance on the following lawful bases:

When we process special categories of personal data (including the contents of your email) we do so only where (i) the processing relates to personal data which are manifestly made public by you, (ii) the processing is necessary for the establishment, exercise, or defense of legal claims, (iii) the processing is necessary for reasons of substantial public interest, or (iv) you have given us explicit consent.

You are not required to provide personal data to us, but we do rely on your personal data to provide certain of our products and services. For example, we need your personal data to facilitate and deliver an order that you request. If you choose not to provide us with your personal data, we may not be able to provide you with a service or product you request. We will inform you at the point that we collect personal data from you if the provision of certain personal data is mandatory or optional for receipt of our products and services.

• Contract: Where the processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract with you. This applies to any processing where you agree to our Terms of Service, for example when you create an account and use our Services.
• Legitimate Interest: Where the processing is necessary for the purposes of a legitimate interest that are not overridden by your interests or fundamental rights and freedoms (e.g., to provide, maintain, and improve our Services, ensure the security of our platform, conduct product analytics, and communicate with you regarding our Services).
• Vital Interest: Where the processing is necessary to protect the vital interests of you or another person (e.g., to protect your physical safety).
• Public Interest: Where the processing is necessary to perform tasks carried out in the public interest or in the exercise of official authority vested in us (e.g., to cooperate in an ongoing law enforcement investigation).
• Legal Obligation: Where the processing is necessary to comply with our legal obligations (e.g., to maintain a record of your personal data to comply with laws and regulations related to bookkeeping, accounting, taxation, and employment).
• Consent: Where we have your consent for the processing (e.g., when you opt in to receive marketing communications from us). When consent is the legal basis for our processing of your personal data, you may withdraw your consent at any time.

Automated Decision-Making and Profiling

We do not conduct automated processing of personal data, including profiling, for the purposes of making decisions about you.

Retention of Personal Data

We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights.

The criteria used to determine the period of time for which personal data about you will be retained varies depending on the legal basis under which we process your personal data:

In certain circumstances, we may need to apply a "legal hold" that retains information beyond our typical retention period where we face threat of legal claim. In that case, we will retain the information until the hold is removed, which typically means the claim or threat of claim has been resolved. In all cases, in addition to the purposes and legal bases identified above, we consider the amount, nature and sensitivity of personal data, as well as the potential risk of harm from unauthorized use or disclosure of personal data, in determining the relevant retention period.

Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.

In addition to the retention periods described above, webpage and browsing content processed through our full-browser functionality is retained as needed to provide the requested action and, where we use this information to train or improve our AI models, we may retain it for a longer period as reasonably necessary for that purpose, subject to applicable law.

• Contract: Where we are processing personal data based on contract, we generally will retain the information for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations for legal claims that could arise from the contractual relationship.
• Legitimate Interest: Where we are processing personal data based on legitimate interests, we generally will retain the information for a reasonable period of time based on the particular interest, taking into account the fundamental interests and the rights and freedoms of data subjects.
• Vital Interest: Where we are processing personal data based on vital interests, we generally will retain the information for the period of time necessary to protect the vital interests of the relevant person plus some additional limited period of time that represents any applicable statute of limitations for legal claims that could arise out of the related events.
• Public Interest: Where we are processing personal data to perform tasks carried out in the public interest or in the exercise of official authority vested in us, we generally will retain the information for a reasonable period of time based on the public interest / official authority, taking into account any obligations we may have to retain the information for a longer period of time.
• Legal Obligation: Where we are processing personal data based on a legal obligation, we generally will retain the information for the period of time necessary to fulfill the legal obligation plus some additional limited period of time that represents the statute of limitations for legal claims that could arise from the legal obligation.
• Consent: Where we are processing personal data based on your consent, we generally will retain the information for the period of time necessary to fulfill the purposes for which you have provided your consent.

International Transfers of Personal Data

We operate and engage third-party partners and providers in various jurisdictions. Therefore, we and our third-party providers may transfer personal data to, or store, access, or process personal data in, a country other than the one in which it was collected, including, but not limited to, the United States. The country to which personal data is transferred may not provide the same level of protection for personal data as the country from which it was transferred.

We may transfer personal data about you outside of the EEA, UK, and Switzerland, and when we do so we rely on appropriate or suitable safeguards recognized under applicable law, including adequacy decisions, standard contractual clauses, and the EU-US Data Privacy Framework. If you would like more information on the specific safeguards we use (and obtain a copy of such safeguards, where applicable), please contact us at privacy@getenergy.com.

Adequacy Decisions

We may transfer personal data about you to countries that the relevant regulatory authority have deemed to adequately safeguard personal data, either automatically or in connection with a specific safe harbor framework.

Standard Contractual Clauses

Certain regulatory authorities have adopted standard contractual clauses, which provide safeguards for personal data transferred outside of the originating jurisdiction. We may use these standard contractual clauses when transferring personal data to a third country that has not been deemed to adequately safeguard personal data.

EU-U.S. Data Privacy Framework

The EU-U.S. Data Privacy Framework was designed by the U.S. Department of Commerce and the European Commission to ensure adequate protection for personal data transferred to a company participating in the EU-U.S. Data Privacy Framework. If we transfer any personal data about you from the EEA to a third party outside the EEA who is participating in the EU-U.S. Data Privacy Framework, we may rely on their participation in the Framework to ensure adequate protection for personal data so transferred.

Your Additional EEA, UK, and Swiss Privacy Choices

Subject to certain limitations at law, you may be able to exercise the following rights:

Right to Object to Processing: The right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.

Please note that if the exercise of these rights limits our ability to process personal data, we may not be able to provide our services to you, or otherwise engage with you in the same manner.

• Right to Access: The right to obtain confirmation of whether we are processing personal data about you, access to and a copy of the personal data we are processing about you, and information relating to its processing, including:
  • The categories of personal data being processed;
  • The purposes of the processing;
  • The categories of the sources of the personal data;
  • The categories of recipients to whom the personal data have been or will be disclosed;
  • The envisaged period for which the personal data will be stored, or the criteria used to determine that period;
  • Any automated decision-making or profiling performed in connection with your personal data; and
  • The safeguards relied upon for the transfer of personal data to any third country.
• Right of Portability: The right to obtain a copy of the personal data we have collected about you in a structured, commonly used, and machine-readable format, and the right to transmit that personal data to another controller without hindrance.
• Right to Rectification: The right to correct or update any personal data about you that is inaccurate or incomplete.
• Right to Restriction of Processing: The right to require us to limit the purposes for which we process your personal data if the continued processing of the personal data in this way is not justified, such as where the accuracy of the personal data is contested by you.
• Right to Withdraw Consent: The right to withdraw your previously provided consent to our processing of your personal data. Please note withdrawing your consent will not affect the lawfulness of our use of your personal data before your consent was withdrawn, nor our processing of personal data pursuant to a different lawful basis for processing.
• Right to Erasure: The right to have us erase your personal data if the continued processing of that personal data is not otherwise justified.

Submitting Privacy Rights Requests

Please submit a request specifying the right you wish to exercise by emailing us at privacy@getenergy.com.

To exercise your right to object as it relates to the use of automatic data collection technologies (including cookies) that facilitate our online targeted advertising activities, please email us at privacy@getenergy.com.

Before processing your request to exercise certain rights (taking into account the confidential nature of any personal data we maintain), we will need to verify your identity and confirm you are accessing our Services or otherwise interacting with us from the EEA, UK, or Switzerland. In order to verify your identity, we will generally require the successful authentication of your account, or the matching of sufficient information you provide us to the information we maintain about you in our systems.

In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity as needed to protect your personal data or locate your information in our systems, or where you are not accessing our services or otherwise interacting with us from the EEA, UK, or Switzerland.

**

The Computer Work Company, Inc. Cookie Notice

Last Updated: August 5, 2026

Scope of Notice

This Cookie Notice supplements the information contained in our Privacy Notice by providing information in the tables set forth below about the cookies which are most frequently used on our websites. The tables may be updated from time to time, so please check back on a regular basis for any changes. For details about the information collected through the use of cookies and the purposes for which such information is used, please read the Our Collection and Use of Personal Data section of our Privacy Notice.

Cookie Choices

You can accept, reject, or customize analytics cookies from the cookie banner on getenergy.com, or reopen Cookie preferences in the site footer. For additional information about the choices you may have in relation to our use of cookies and other automatic data collection technologies, please refer to the Your Privacy Choices section of our Privacy Notice.

Strictly Necessary Cookies

These cookies are essential to making our websites work. They enable core functionality such as security, network management and accessibility. Without these cookies, services that are necessary for you to use our websites, such as accessing secure areas or remembering the information inputted into a webform, are not available. These cookies do not track browsing history on third-party websites. The legal basis for our use of strictly necessary cookies are our legitimate interests, namely being able to provide and maintain our websites.

Functional Cookies

These cookies enable a website to remember information that changes the way the website behaves or looks, such as preferred language or the region that an individual is accessing our website from. If you are accessing our websites with an IP address from the European Economic Area, United Kingdom, or Switzerland, you have been asked to consent to the use of these cookies.

Analytical or Performance Cookies

These cookies collect information about the number of visitors to our websites, and information about how visitors move around our websites when they are using them. This helps us to improve the way our websites work, for example, by ensuring that visitors are finding what they are looking for easily. These cookies are set only after you accept analytics cookies.

Targeting Cookies

These cookies record your visit to our website, the pages you have visited and the links you have followed. They are used to track visitors across our websites. We use this information to make our website and the marketing messages we send to you more relevant to your interests. We may also share this information with third parties who provide a service to us for this purpose. If you are accessing our websites with an IP address from the European Economic Area, United Kingdom, or Switzerland, you have been asked to consent to the use of these cookies. Please see the Targeted Advertising Preferences section of our Privacy Notice for more information about these practices.