Privacy Policy

We collect the following categories of Personal Information as strictly necessary for our business operations:

1.1 Information You Provide Voluntarily
Account Information: Name, email address, password, contact phone number, avatar, and linked third-party accounts (e.g., Google, Amazon, Apple).
Order & Transaction Information: Shipping address, billing address, and payment identifiers (e.g., PayPal transaction ID, last four digits of a credit card).
After-Sales & Warranty Information: Product serial number (SN), purchase channel, order ID, photos of device installation, and communication records.
Interaction Information: Comments, photos, or videos you post on our website, and records of your conversations with our intelligent customer support assistant.

1.2 IoT Device & App Data (Automated Collection)
We automatically collect information you provide to us and information about how you access and use our products and services when you engage with us. We typically collect this information through the use of a variety of our own and our third-party partners’ automatic data collection technologies, including
(i) cookies or small data files that are stored on an individual’s computer and
(ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies. Information we collect automatically about you may be combined with other personal information we collect directly from you or receive from other sources.
Device Operational Data: Battery health status (SoC/SoH), real-time charging/discharging power, voltage, temperature, cycle count, and firmware version.
Energy Usage Statistics: Solar charging efficiency and records of electricity flow between the grid, the device, and connected loads.
Diagnostic & Connectivity Data: Device MAC address, CPU/memory usage, Wi-Fi network list and signal strength, Bluetooth connection logs, and operating system version.
Location Data: Non-precise location based on IP address, or precise latitude and longitude obtained via the App for time zone settings and solar gain forecasting.
Device and internet network: including the device type, manufacturer, and model, IP address, browser type, Internet service provider, and unique identifiers associated with you.
All of the information collected automatically through these tools allows us to improve your customer experience and improve safety. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our products and services, to offer communications features such as live and automated chat, and to improve the effectiveness of our products, services, offers, advertising, communications and customer service.
For information about the rights and choices users have with respect to cookies and online tracking, please see our Cookie Notice.

1.3 App Permissions
To provide full functionality, the GEYOTO App may request the following permissions:
Bluetooth & Wi-Fi: For device pairing and real-time local monitoring.
Camera: For scanning SN barcodes or uploading photos for after-sales support.
Notifications: For pushing alerts regarding low battery or charging completion.
We may also collect inferences drawn from the information identified above.

We process your information for the following legitimate business purposes:
Contract Performance: Processing orders, delivering products, and providing warranty and after-sales support.
Product Optimization: Analyzing battery usage patterns to optimize charging strategies and device performance via Over-the-Air (OTA) firmware updates.
Security & Protection: Identifying abnormal charging behavior to prevent fire risks or unauthorized system access.
Intelligent Services: Using de-identified data to train intelligent customer support models and providing solar charging suggestions based on your geographic location.
Marketing Communications: Sending news about new products (e.g., new solar panels) and promotional offers, where permitted by law or with your consent.

We do not sell your Personal Information for monetary consideration. We only share information with third parties in the following circumstances:
Service Providers: Cloud hosting (AWS/Google Cloud), payment processors (PayPal/Stripe), logistics partners, and email marketing platforms (Shopify/Mailchimp).
Affiliates: Sharing within the GEYOTO group to ensure consistent global service delivery.
Legal Requirements: Responding to court orders, government audits, or to protect the legal rights of GEYOTO.
Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred to the successor.

Retention Period: We generally retain your personal information for three (3) years, or as long as your account remains active.
Legal Statutory Period: After the business relationship ends, we may retain data for an additional two (2) months beyond the applicable statute of limitations to address potential legal claims.
International Transfers: As a global brand, your data may be transferred to and stored on servers in the United States, Europe, or other regions. The country to which personal data is transferred may not provide the same level of protection for personal data as the country from which it was transferred. We ensure such transfers comply with standard contractual clauses or other lawful data protection safeguards.

This section applies to residents in the European Economic Area (“EEA”) and the United Kingdom (“UK”) (collectively with the EEA, “Europe”), where data processing is subject to the European Union General Data Protection Regulation and/or the UK General Data Protection Regulation (collectively, the “GDPR”).
Under the GDPR, the lawful bases we rely on for processing this information are the following:
Contract: Where the processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract with you. This applies to any processing where you sign a contract with us, for example when you become our customer or deliver services to us as a vendor or contractor.
Legitimate Interest: Where the processing is necessary for the purposes of a legitimate interest that are not overridden by your interests or fundamental rights and freedoms (e.g., to provide, maintain, and improve our products and services, conduct data analytics, and communicate with you regarding our services).
Vital Interest: Where the processing is necessary to protect the vital interests of you or another person (e.g., to protect your physical safety).
Legal Obligation: Where the processing is necessary to comply with our legal obligations (e.g., to maintain a record of your personal data to comply with laws and regulations related to bookkeeping, accounting, taxation, and employment).
Consent: Where we have your consent for the processing (e.g., when you opt in to receive marketing communications from us). When consent is the legal basis for our processing of your personal data, you may withdraw your consent at any time.

Under European data protection law, you have rights including:

1. Your right of access: The right to obtain confirmation of whether we are processing personal data about you, access to and a copy of the personal data we are processing about you, and information relating to its processing

2. Your right to rectification: The right to correct or update any personal data about you that is inaccurate or incomplete.

3. Your right to erasure: The right to have us erase your personal data if the continued processing of that personal data is not otherwise justified.

4. Your right to restrict processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.

5. Your right to object to processing: The right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.

6. Your right to data portability: The right to obtain a copy of the personal data we have collected about you in a structured, commonly used, and machine-readable format, and the right to transmit that personal data to another controller without hindrance.

7. Your right to withdraw consent: The right to withdraw your previously provided consent to our processing of your personal data. Please note withdrawing your consent will not affect the lawfulness of our use of your personal data before your consent was withdrawn, nor our processing of personal data pursuant to a different lawful basis for processing.

a) Your right to complain: You have the right to lodge a complaint with a supervisory authority in the European country of your residence.

Please note that if exercising these rights limits our ability to process personal information, we may not be able to provide our products or services or to otherwise engage with you going forward. These rights may also be limited, such as if you ask to delete information which we are required by law or have compelling legitimate interests to keep.

We may verify your identity in connection with any requests to ensure that we provide the correct information and allow only those individuals or their authorized representatives to exercise rights with respect to that information.

For information about the rights and choices users have with respect to cookies and online tracking, please see our Cookie Notice.

You can also complain to the national Data Protection Authority if you are unhappy with how we have used your data. If you are an EEA resident, you can find its contact details here: edpb.europa.eu or if you are a UK resident here: ico.org.uk

If you are a resident of certain U.S. states, the law in your state may provide you with certain rights with respect to your personal information. These rights are subject to certain exceptions depending on local law.

1. The right to know what personal information we have collected, used, disclosed, and sold about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.

2. The right to obtain a copy of personal information we have obtained about you in a portable and, to the extent technically feasible, readily usable format.

3. The right to correct inaccurate personal information about you, taking into account the nature of the personal information and the purposes of the processing.

4. The right to request that we delete any personal information we have about you.

5. The right to object to our use of your personal information, including profiling. Under certain circumstances, you have the right to object to a significant decision based solely on automated processing, unless that decision is required or authorized by law.

6. The right to withdraw your consent for the processing of your personal information, including for purposes of direct marketing.

7. The right to opt-out of the selling your personal information, which you can exercise on our website here.

8. The right to opt-out of the sharing of your personal information for purposes of targeted advertising (also called cross-context behavioral advertising and/or the profiling in furtherance of decisions that produce legal or similarly significant effects), which you can exercise on our website here or by modifying your privacy preferences (e.g., Global Privacy Control), available through certain internet browsers and extensions, that signal your preference to opt out. Please note that clearing your cookies at any time will remove the signal of your selected privacy preferences.

9. The right to limit the use or disclosure of your restricted personal information, which you can exercise through the contact form available on our website.

10. If we deny your request, the right to appeal our decision.

a) The right to lodge a complaint with a local data protection authority.

In addition, and as set forth below, California law requires us to identify, for the 12-month period prior to the date of this Privacy Policy, what information we may have “sold” or “shared” about you. For the 12-month period prior to the date of this Privacy Policy, we have only sold personal information about its customers as described above. For the 12-month period prior to the date of this Privacy Policy, we have only shared personal information about its customers as described above. We do not use or disclose sensitive personal information, as defined in applicable laws, for any purposes other than those permitted by applicable law.

To submit any of the above requests, you may use the contact below. You may also designate an authorized agent to make a request on your behalf on our website. When you exercise these rights and submit a request to us, we will verify your identity by asking you to provide us with additional information such as your email address, order numbers of previous orders of our products and services, or the last four digits of a credit or debit card used to make a purchase. We also may use a third-party verification provider to verify your identity. We will endeavor to honor such requests unless such a request conflicts with certain lawful exemptions under California’s consumer privacy law. Please note that we are only required to honor requests to know twice in a 12-month period.

We do not discriminate against individuals who exercise any of their rights described in our Privacy Policy. Your exercise of these rights will have no adverse effect on the price and quality of our goods or services.

To appeal a decision we have made regarding your request, you may use the contact below.

Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 13 (or such higher age as required by applicable law). If an individual is under the age of 13 (or such higher age as required by applicable law), they should not use our services or otherwise provide us with any personal data either directly or by other means. If a child under the age of 13 (or such higher age as required by applicable law) has provided personal data to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child under the age of 13 (or such higher age as required by applicable law), we will promptly delete that personal data.

Security Measures: We provide reasonable technical, physical, and organizational safeguards to protect your personal data. For example, we implement industry-standard encryption (AES-256), access controls, and regular security audits. Although we strive to provide reasonable security for personal data we process and maintain, no security system can prevent all potential security breaches.

Notification Mechanism: In the event of a confirmed data breach affecting your rights, we will notify you via email or a prominent website notice within 45 days (or shorter as required by specific state laws).

9.1 Web Pixels
To see how successful our marketing campaigns or other features of the Services are performing, we sometimes use conversion pixels, which fire a short line of code to tell us when you have clicked on a particular button or reached a particular page (for example, a thank you page once you have completed the procedure for subscribing to one of our services or have completed one of our forms). We also use web pixels to analyze usage patterns on our Services. The use of a pixel allows us to record that a particular device, browser, or application has visited a particular webpage.

9.2 Analytics and Social Media Advertisements
We may use third-party service providers to analyze the use of our Services or serve interest-based advertisements on their platforms. Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics, available at: https://tools.google.com/dlpage/gaoptout. To modify your preferences or turn off personalization for ads served by Meta, you can visit Meta's Ad Preferences in addition to the Your Choices section below. We may also show ads to audiences that share similar characteristics as you. To do so, a list of email addresses is irreversibly encrypted through hashing and uploaded or transmitted from our site, and the hashed data is compared against the third party’s own users, generating a “lookalike audience” of matching addresses and deleting the uploaded list. We do not have access to the identity of any person in the “lookalike” audience unless they choose to click on one of our advertisements.

If you have any questions or concerns regarding this Policy or GEYOTO’s privacy practices, please contact our Privacy Team:

Email: support@geyoto.com

Phone: +1 213 292 9187 (English service only. International charges apply if calling from outside of the US)

Address: 1300 Delaware Avenue, Suite 210-2207, Wilmington, DE 19801.

We reserve the right to amend this Privacy Policy at our discretion and at any time. When changes are made to this privacy notice, the updated notice will be posted on our website or other applicable services and will be effective as of the date posted. Your continued use of our websites and other online services following the posting of changes will constitute your acceptance of such changes. Material revisions to this privacy notice will not be applied retroactively without your affirmative consent.