Dyness Global Website Privacy Policy

Last updated: 8 September 2026

This Privacy Policy applies to all websites, applications, products and services, including paid and free services, provided to you by Dyness Digital Energy Technology Co., Ltd. (referred to as “we”, “us” or “our”). You may view, download and print the full Policy at any time through the public channels on our official website. This Privacy Policy forms a legally binding part of the Terms of Use.

I. Scope of Information Collection

1.1 Non-Personal Information

We may collect anonymized information that cannot be directly linked to a specific individual. We use this information only for aggregated analysis to improve our products and services. It may include:

• Browser type and version
• Anonymized IP address
• Page browsing history
• Device model and operating system

1.2 Personal Information

We collect the following personal information only when you provide it voluntarily or when it is necessary to perform our services:

II. Rules on Data Use

Core purposes: We use personal information only to deliver services, perform contracts and improve our products internally. Without your express written consent, we will not share sensitive data that can identify you personally with any third party.

Exceptions for legally required disclosure: We may disclose relevant data on a limited basis only in the following circumstances:

• Disclosure required by laws, regulations or judicial proceedings
• Compliant data exchanges necessary for payment processing
• Compliant data exchanges necessary for order fulfilment

Cookie management: We distinguish between cookies necessary for the basic operation of the website and cookies that require your authorization. You can choose whether to authorize the optional cookies listed below.

III. Legitimate Interests

We carry out certain data processing activities on the basis of legitimate interests under Article 6(1)(f) of the GDPR. Our assessment of the balance between our interests and your rights is set out below:

1. Our legitimate interests. We seek to protect the security of Dyness account logins; identify malicious login attempts and account theft; investigate system crashes and equipment disconnections; improve the functions of the energy storage cloud platform and our operations and maintenance services; and prevent cyberattacks, fraudulent registrations and other misuse.

2. Assessment of privacy rights. We collect only the minimum data necessary to achieve these purposes. We do not use legitimate interests as a basis for creating detailed user profiles or conducting indiscriminate targeted advertising tracking. The processing will not disproportionately interfere with users' fundamental privacy rights.

3. Exercising the right to object. You may submit a written objection to our official contact email address at any time, identifying the processing activity you wish to stop. We will verify your request and suspend the relevant processing within seven business days of receiving it. Exercising this right will not restrict your access to basic cloud services.

IV. Your Statutory Data Rights

4.1 Rights Applicable to You

Your rights depend on the laws of the jurisdiction that applies to you. If you are an EU user, you have the rights granted by the GDPR and the EU Data Act, where applicable:

• Right of access: You may request a complete copy of all personal data and historical power station operating data we hold about you.
• Right to rectification: You may request the correction of inaccurate personal information or equipment binding parameters retained on the platform.
• Right to erasure: You may submit a deletion request to the designated email address at any time. We will delete or anonymize all account information within 15 business days.
• Right to data portability: You may export all your personal data and power station operating data in a structured, machine-readable format and transfer them to another compatible energy service platform.
• Right to withdraw consent: You may withdraw your consent to a particular data processing activity at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

4.2 Regional Information

The following information may help you understand the laws and rights applicable in your jurisdiction.

4.2.1 EU Residents (GDPR)

• Applicable law: The GDPR and related regulations.
• Legal bases: Performance of a contract, consent, legal obligations and legitimate interests.
• Supervisory authority: You may lodge a complaint with the data protection authority in your EU Member State.
• Data storage: Data are stored on EU servers by default. Measures to protect against unlawful access by foreign governments are described in Chapter II of the Dyness Service Agreement.
• Cookie requirements: The cookie banner does not preselect non-essential cookies. Further details are provided in Section II of this Policy.

4.2.2 Residents of China

• Applicable law: The Personal Information Protection Law of the People's Republic of China.
• Additional right: You may request a written explanation of our personal information processing rules.
• Cross-border transfers: Transfers of personal information out of China are subject to applicable security assessments, standard contracts and other compliance requirements.

4.2.3 Australian Residents (APPs)

• Applicable law: The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
• Basis for collection: Information is collected for purposes directly related to our business functions, with notice provided at the time of collection.
• Regulator: You may complain to the Office of the Australian Information Commissioner (OAIC) or contact our group's privacy contact first.
• Data storage: Data may be stored on the group's shared cloud infrastructure, including servers outside Australia. Before disclosing personal information overseas, we take reasonable steps, including contractual safeguards and security assessments, to ensure that recipients do not breach the APPs. Data are encrypted throughout, and access is limited to the minimum necessary.
• Cookies: We use only necessary cookies and anonymous identifiers for functionality, security and statistics. We do not infer user profiles from sensitive information.
• Additional rights: You may access and correct personal information under APPs 12 and 13, request that direct marketing stop under APP 7, and interact anonymously or under a pseudonym where lawful and practicable under APP 2. If an eligible data breach occurs, we will assess it within the 30-day period under the Notifiable Data Breaches scheme and notify affected individuals and the OAIC as required.

V. Data Security and Retention

Security safeguards: We use technical, administrative and physical measures to protect user data against unauthorized disclosure or alteration. If a data security incident occurs that may harm your rights and interests, we will report it to the relevant regulatory authority within 72 hours of discovering it and promptly inform you of the incident and measures to reduce the associated risks.

Retention period: We retain your personal data only for as long as necessary to achieve the purposes of the services. After you close your account and terminate all service relationships, we will permanently delete or anonymize all relevant data within three years of account closure.

Your security responsibilities: Please safeguard your account password and two-factor authentication information to reduce risks arising from exposed credentials.

VI. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:

Dyness Digital Energy Data Protection Officer
Email: dpo@dyness-tech.com

We will verify and respond to your request within 30 calendar days in accordance with applicable regulatory requirements.

Dyness Terms of Use

Last updated: 8 September 2026

These Terms of Use apply to all websites, applications, products and services provided to you by Dyness Digital Energy Technology Co., Ltd. (referred to as “we”, “us” or “our”), including corporate websites, user monitoring platforms, developer platforms, community websites, supporting applications and API services.

I. User Account Rules

When registering, you must provide true, accurate and complete information about the relevant individual or business entity. This information serves as your identity credentials for services such as remote monitoring of energy storage systems, intelligent energy scheduling and energy consumption data analysis.

You must safeguard your login name, password and two-factor authentication information. All service operations, equipment commands and order submissions initiated through your account will be treated as actions taken by you, and you will bear the corresponding rights and responsibilities.

If you notice an unusual login or an action you did not perform, contact our customer service team immediately. We will help you suspend risky account operations and investigate the cause.

Your account is for your personal use or your business's use only. Without our written permission, you may not lend, rent or sell account access to a third party. Otherwise, we may suspend your access to all services.

II. Equipment Operation Rules

You are responsible for installing, operating and maintaining your equipment and for ensuring that it remains in a suitable operating environment.

We reserve the right to conduct remote diagnostics and system upgrades to maintain the stable operation of solar and energy storage equipment. An upgrade may cause a temporary service interruption. We will notify you in advance through a platform notice or the contact information you have provided.

If equipment remains offline and unresponsive for an extended period, the system will automatically activate a safety shutdown mechanism to protect the safe operation of the power grid.

III. Intellectual Property

All intellectual property rights in the system code, user interfaces, energy algorithm models, operating manuals and promotional content on our platform belong to us.

We grant you a limited right to use these materials for personal and internal business purposes. Without written authorization, you may not copy, distribute or develop them further for commercial purposes.

You retain the intellectual property rights in your own content uploaded to the platform, such as power station project drawings and customized energy consumption data. We may use that content to provide you with a customized energy optimization solution only with your express authorization.

IV. Rights and Responsibilities

We inform you of the risks associated with using the public internet. To the extent permitted by law, we are not liable to compensate you for temporary service interruptions caused by events beyond our control, including power grid scheduling interruptions, natural disasters and telecommunications network failures. We will promptly coordinate resources to help restore the normal operation of your equipment.

Intelligent energy scheduling recommendations are reference plans generated from real-time operating data. You may decide whether to follow them based on your electricity needs. We do not directly assume responsibility for changes in electricity costs or power generation caused by the operating strategy you choose.

V. Updates and Dispute Resolution

We may update these Terms as our services evolve or applicable laws change. We will publish an updated version on our official website at least 15 business days in advance.

For material changes, users must confirm a pop-up notice before continuing to use the services. Continued use after confirmation indicates acceptance of the updated Terms.

If you breach these Terms and do not remedy the breach promptly after receiving a notice, we may terminate all services provided to you.

Disputes will be resolved in accordance with the jurisdictional rules applicable in the relevant location and the requirements governing our cross-border business.