EQORE Privacy Policy

Effective date: September 29, 2026

1. Who we are

Company: EQORE Inc., a Delaware corporation
Website: www.eqore.com
Contact for privacy: info@eqore.com
Mailing address: 444 Somerville Avenue, Somerville, MA 02143, USA

2. What this policy covers

This Privacy Policy explains how EQORE collects, uses, shares, and safeguards personal information when you visit our informational website at www.eqore.com, submit our savings assessment or contact form, email or call us, book a meeting with us, or follow the link to our job application form. We do not offer user accounts. We operate primarily in the United States.

EQORE is not subject to the California Consumer Privacy Act (CCPA) or other equivalent state comprehensive privacy laws. We do not offer our services to businesses outside of the U.S., but visitors may access our site from around the world. Where a law applies to you (for example, the GDPR or UK GDPR), we will follow the obligations described in this policy for those visitors.

3. Information we collect

A) Savings assessment and contact form

Information you enter:

Work email address
Phone number (optional)
The state your facility is in
Your approximate monthly electricity bill

Information sent automatically with the form:

The page you submitted the form from
Your IP address
How you first and most recently arrived at our site (see Section 3.C)
The HubSpot tracking cookie identifier, if HubSpot tracking is active in your browser (see Section 3.D)

B) Emails, calls, and meetings

If you email or call us, we receive the information you choose to share, such as your name, email address, phone number, and message. If you book a meeting through our scheduling link, the scheduling page (provided by HubSpot) collects your name, email address, and any details you add.

C) Visit source (first-party attribution)

When you arrive at our site from a campaign link or another website, our site stores a small record in your browser’s local storage: campaign parameters in the link (such as utm_source or utm_campaign), advertising click identifiers (such as a Google, Microsoft, or LinkedIn click ID), the referring website, the landing page, and the time of the visit. We keep one record for your first visit and one for your most recent campaign visit. This record stays on your device and is only sent to us if you submit our form, so we can understand which of our channels lead to inquiries.

D) Analytics, logs, and cookies

Hosting and security logs (Cloudflare): when you request a page, our hosting provider processes technical data such as your IP address, browser and device information, the page requested, the referring URL, and timestamps, to deliver the site, protect it from abuse, and troubleshoot problems.
Bot protection (Cloudflare Turnstile): when you use our form, Turnstile checks browser and device signals to confirm the submission comes from a person rather than an automated script.
Cloudflare Web Analytics: privacy-focused, aggregate page-view statistics. It does not use cookies or collect identifiers to track you across sites.
Google Tag Manager: loads our Google Analytics and Google Ads tags. It does not collect information itself.
Google Analytics 4: pages visited, actions on pages (such as clicking a call-to-action, a phone or email link, or submitting the form), approximate location derived from IP address, device and browser information, and referral source. Google Analytics uses cookies (such as _ga).
Google Ads: measures whether visits from our Google ads lead to actions such as a form submission, and may be used to show our ads to people who have visited our site. Google Ads uses cookies (such as _gcl_au).
LinkedIn Insight Tag: pages visited, actions on pages, and device and browser information, used to measure our LinkedIn ad campaigns, report on the kinds of companies and roles that visit our site (in aggregate), and show our ads on LinkedIn to people who have visited our site. LinkedIn may connect the visit to your LinkedIn account. LinkedIn uses cookies (such as li_sugr and bcookie).
Microsoft Clarity: how visitors use our pages (such as clicks, scrolling, and mouse movement), which Clarity uses to produce heatmaps and session replays that help us improve the site. We mask our form so what you type in it is not recorded. Clarity uses cookies (such as _clck and _clsk).
HubSpot tracking code: pages visited and visit history, which HubSpot can connect to your contact record if you submit our form. HubSpot uses cookies (such as hubspotutk and __hstc).
Local storage: besides the visit-source record in Section 3.C, our site stores your analytics opt-out choice, if you make one.

These analytics and advertising tools (Google Tag Manager, Google Analytics, Google Ads, the LinkedIn Insight Tag, Microsoft Clarity and HubSpot tracking) only run on www.eqore.com, and they do not load if your browser sends a Global Privacy Control signal or you opt out (see Section 10.B).

We do not collect sensitive personal information on the website, and we do not use automated decision-making or profiling that produces legal or similarly significant effects.

4. How we use personal information (purposes)

Respond to inquiries, prepare savings assessments, and manage relationships with prospective customers, partners, investors, job candidates, and other contacts
Follow up with you about your facility and our products and services, including by email or phone; you can ask us to stop at any time
Understand which pages and marketing channels are useful, and improve site performance, security, and content
Measure our advertising and show our ads to people who have visited our site
Protect the site and our form from spam, fraud, and abuse
Comply with legal obligations, protect our rights, and enforce our terms and policies

We do not sell personal information for money. Our advertising partners (Google and LinkedIn) receive information about your visits through their tags on our site, which some state laws may treat as “sharing” for cross-context behavioral advertising. You can opt out as described in Section 10.B.

5. Legal bases for EEA/UK visitors

Where the GDPR or UK GDPR applies, we rely on:

Legitimate interests for form, email, and meeting data, including:
- Furthering and managing customer, partner, and investor relationships
- Responding to inquiries and business opportunities
Legitimate interests for hosting logs, bot protection, and site security, to ensure the secure and smooth operation of our site
Legitimate interests for analytics, advertising measurement, and visit-source information, to understand how the site is used and which channels bring inquiries. You can object at any time using the options in Section 10.B.

We share personal information only as needed for the purposes above, with:

Service providers/processors:
- Cloudflare (website hosting, security, bot protection with Turnstile, and Web Analytics)
- HubSpot (customer relationship management, form processing, website tracking, and meeting scheduling)
- Google (Google Tag Manager, Google Analytics, and Google Workspace for email and document processing of inbound communications)
- Microsoft (Clarity site analytics and session replay)
- Superhuman Docs, formerly Coda (our job application form; see Section 12)
Advertising partners: Google (Google Ads) and LinkedIn (LinkedIn Ads), which receive information through their tags on our site and use it under their own terms and privacy policies
Professional advisors (e.g., legal, accounting) under confidentiality obligations
Authorities or other parties where required by law, regulation, subpoena, or to protect rights, safety, and security

7. Retention

We retain personal information for no longer than needed for the purposes described:

Inquiries (form, email, and meetings): 12 months after our last interaction with you, unless we need to keep information longer to resolve issues, establish or defend legal claims, or comply with law
Analytics/logs: 14 months or the shortest period supported by our tools
Visit-source record and opt-out choice in your browser: until you clear your browser’s site data

We may retain backups or archives for limited periods consistent with our retention practices.

8. Security

We use reasonable technical and organizational measures designed to protect personal information, including:

HTTPS encryption in transit
Bot protection on our form
Access controls and least-privilege access
Vendor due diligence for key service providers

No security method is perfect. We cannot guarantee absolute security.

9. International data transfers

We are based in the United States. Personal information may be processed in the U.S. and in other countries where our service providers operate.

For EEA/UK visitors, where we transfer personal data outside the EEA/UK to a country without an adequacy decision, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA) or Addendum, or other lawful transfer mechanisms. You may contact us for more information about these safeguards.

10. Your choices and rights

A) Emails from us

You can ask us to stop contacting you at any time by replying to our email or contacting us at info@eqore.com. Any marketing email we send includes an unsubscribe link.
We maintain a suppression list to ensure we do not send you marketing after you opt out.

B) Analytics and cookies

Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out and do not load our analytics and advertising tools (Google Tag Manager, Google Analytics, Google Ads, the LinkedIn Insight Tag, Microsoft Clarity or HubSpot tracking).
Opt out on our site: you can opt out of these analytics and advertising tools on our Your Privacy Choices page. The choice is stored in your browser, so it applies to that browser and device only.
Browser settings: you can block or delete cookies and site data in your browser. Clearing site data also removes the visit-source record described in Section 3.C.
Our form still works if you opt out or block cookies. Cloudflare’s hosting logs, bot protection, and cookieless Web Analytics are not affected by these choices, because they are needed to run and protect the site or do not track you.

C) Access, deletion, and correction

You may request access to your personal information, ask us to delete it, or request correction if it is inaccurate.
Where applicable (such as the EEA/UK or certain U.S. states where specific rights may apply to you), you may also have the right to:
- Object to or restrict certain processing
- Request portability of certain information

We will honor these rights as required by law. To exercise any of these rights, contact us at info@eqore.com. We may take steps to verify your identity before acting on your request.

11. Children’s privacy

Our website is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child under 18 has provided personal information to us, contact us at info@eqore.com so we can delete it.

12. Careers and recruiting

Our Careers pages link to a job application form hosted by Superhuman Docs (formerly Coda). Information you submit through that form is processed by that service and is subject to its own privacy policy. EQORE does not control that service’s processing. If EQORE receives your application data (for example, through that form or by email), we process it for recruiting purposes under our legitimate interests (e.g., to assess and properly vet potential hires) and as required by applicable employment laws. Additional recruiting notices or disclosures may apply and will be provided where required.

13. Third-party services and links

Our site links to third-party sites and services, including our job application form, our meeting scheduling page, and our LinkedIn page. We are not responsible for their privacy practices. Review their privacy policies before providing personal information.

14. Do Not Track

Your browser may offer a Do Not Track (DNT) setting. Our site does not currently respond to DNT signals. We do honor Global Privacy Control, as described in Section 10.B.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, or legal requirements. We will post the updated policy with a new effective date. If changes are material, we will take additional steps as required by law.

17. How to contact us

Email: info@eqore.com
Mail: EQORE Inc., 444 Somerville Avenue, Somerville, MA 02143, USA

Jurisdiction-specific notes

United States: EQORE is not currently subject to the CCPA or other equivalent state comprehensive privacy laws. We will honor applicable rights requests we receive as described above.
EEA/UK: Where the GDPR/UK GDPR applies to you, see Sections 5, 9, and 10 for information on legal bases, international transfers, and your rights. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to contact us first so we can try to resolve your concerns. Supervisory authority contact details can be found on the European Data Protection Board (EDPB) or UK Information Commissioner’s Office (ICO) websites.