Skip to main content

GoodLeap Homeowner App Privacy Notice

Effective Date: July 20, 2026

Introduction and Scope

This Privacy Notice explains how GoodLeap, LLC collects, uses, retains, and shares personal information in connection with three features available in the GoodLeap Homeowner App: Home Insights, Home Improvement Projects, and the Home Troubleshooter (together, the “Covered Products”).

This Notice does not cover GoodLeap’s financing, loan servicing, or payment processing activities. Those activities are governed by the GoodLeap Privacy Policy at goodleap.com/privacy and, where applicable, the privacy notice GoodLeap provided to you at the time of your financing transaction under the Gramm-Leach-Bliley Act (GLBA). The Covered Products described in this Notice involve data collection and use activities that are separate from and not covered by GoodLeap’s GLBA notice.

Data Governance Boundary

Some data elements described in this Notice — including property information obtained from First American and solar or battery system telemetry from original equipment manufacturers (OEMs) — are derived from GoodLeap’s existing customer relationships. When those data elements are used within the Covered Products, this Notice governs the use. When the same data is used for financing, servicing, or payment processing purposes, GoodLeap’s main Privacy Policy and GLBA notice govern. Each notice governs its respective use.

Data collected through the Covered Products will not be used for underwriting, credit eligibility determinations, servicing decisions, collections, adverse action, or prescreened credit offers, unless separately disclosed and legally supported at the time of such use.

By using any of the Covered Products, you acknowledge that you have read this Notice. GoodLeap collects general app usage data, device information, and analytics automatically from the time you access the app, as described in the Automatically Collected Information section; that collection is subject to GoodLeap’s notice-based data practices from app access onward and does not require feature-level consent. For features that involve collecting or sharing personal information beyond general app use — including Home insights, Home Improvement Projects, and Home Troubleshooter — GoodLeap will ask for your separate, affirmative consent before feature-level collection begins, as described in the Your Consent sections for each feature below.

Sensitive Personal Information

Please do not submit unrelated sensitive personal information — such as information about racial or ethnic origin, political opinions, religion, health or medical conditions, biometrics, criminal background, or trade union membership — through free-text fields or in any context where we have not requested it. If you do share such information voluntarily, we will handle it in accordance with applicable law. Note that some information we collect specifically to provide the Home Insights feature — including utility credentials, energy consumption data, billing statements, and CARE/FERA tariff information — may be considered sensitive personal information under certain state privacy laws. That data is collected only with your consent and is handled as described in the Home Insights sections of this Notice.

De-Identified Information

We may collect or create de-identified information from personal information in a manner that cannot reasonably be used to infer information about, or be linked to, a particular individual. To the extent we classify such information as “de-identified,” we commit to maintaining and using it in de-identified form and not attempting to re-identify it, except as permitted by law.

Children’s Privacy

The Covered Products are not directed to children under the age of 13 and are intended for use only by adults who are at least 18 years of age. GoodLeap does not knowingly collect personal information from children under 13 through the Covered Products. If GoodLeap becomes aware that it has collected personal information from a child under 13, GoodLeap will delete that information promptly. If you believe GoodLeap may have collected personal information from a child under 13, please contact us at privacy@goodleap.com. If GoodLeap learns it has collected personal information from a user between the ages of 13 and 17, GoodLeap will delete that information promptly and, where required by applicable law, notify the user.

Home Insights — Information We Collect

When you use the Home Insights feature, GoodLeap collects the following categories of personal information. We collect this information only after you provide consent as described in the Home Insights — Your Consent section.

Utility Account Data

When you authorize GoodLeap to access your utility account through the Arcadia utility authorization flow, GoodLeap receives: your account holder name(s), billing address, service address, and utility account number. This information is provided to GoodLeap by Arcadia Power, Inc. based on the access you authorize.

Energy Consumption Data

GoodLeap collects your 15-minute interval electricity usage data from your utility account. This data shows how much electricity your home uses throughout the day and is used to generate your daily energy performance summary.

Energy Billing Data

GoodLeap collects your monthly utility billing statements, including PDF copies of your utility bills. Bills may contain your service address, account number, billing history, and rate plan details.

Utility Rate Information

GoodLeap collects your current utility rate plan and tariff details, including your per-kilowatt-hour rate. This information is used to estimate your energy costs and calculate potential project savings.

Property Information

GoodLeap obtains certain property information for your home address, including year built, square footage, and heating and cooling system type. This information is obtained from First American, a property data provider. GoodLeap accesses this data through its existing relationship with you as a GoodLeap financing customer and uses it within the Home Insights feature to generate personalized energy insights and home improvement recommendations. This data is subject to GoodLeap’s information security program. You may opt out of GoodLeap’s use of this property information for Home Insights purposes by contacting us at privacy@goodleap.com; doing so will not affect your GoodLeap loan account or servicing relationship.

Local Weather Data

GoodLeap collects local weather information for your area, including temperature, heat index, and heating and cooling degree days. This data is sourced from either the National Oceanic and Atmospheric Administration (NOAA) or Visual Crossing Corporation, and is used to give context to your energy use.

Solar and Battery System Data

If you are a GoodLeap third-party ownership (TPO) solar or battery customer, GoodLeap collects performance data from your installed system, including kilowatt-hours produced, system status, charge and discharge activity, and battery state of charge. This data is sourced from your system’s monitoring vendor through GoodLeap’s existing TPO relationship. GoodLeap’s access to this telemetry is governed by your TPO agreement. The data is subject to GoodLeap’s information security program when used in the Homeowner App context. GoodLeap uses this telemetry data within Home Insights to display your system’s performance and contextualize your energy usage. You may opt out of this use for Home Insights purposes by contacting us at privacy@goodleap.com; doing so will not affect your TPO agreement or system monitoring.

Feedback

If you rate an insight using the thumbs up or thumbs down feature, GoodLeap records that rating and any optional written feedback you provide.

Home Improvement Projects — Information We Collect

When you submit a home improvement project request, GoodLeap collects the following information. We collect this information only after you provide consent as described in the Home Improvement Projects — Your Consent section. Phase 1 does not include photos or image uploads.

Project Request Information

The type of project you select (for example, HVAC replacement, roofing, or windows) and your answers to questions about the project, including your system’s approximate age, the urgency of the project, and any relevant details about your home and current systems.

Contact and Property Information

Your name, phone number, email address, and property address, which GoodLeap uses from your existing GoodLeap account. You authorize GoodLeap to use and share this information in connection with your project request as described in the Home Improvement Projects — Your Consent section.

Additional Notes

Any additional information you choose to provide in free-text fields when describing your project.

Home Troubleshooter — Information We Collect

When you use the Home Troubleshooter feature, GoodLeap collects the following information. The Troubleshooter is available only to authenticated GoodLeap Homeowner App users.

Chat Content

The text of your questions and the Troubleshooter’s responses within each conversation. Chat content may include descriptions of home issues, symptoms you observe, and repair or maintenance details.

Session Metadata

Technical information about your session, including a session identifier, the time of the conversation, and the platform you used (mobile app or web).

Feedback

If you rate a Troubleshooter response using the thumbs up or thumbs down feature, GoodLeap records that rating and any optional written feedback you provide.

Automatically Collected Information

GoodLeap and its service providers automatically collect certain technical information from the time you access the Covered Products or our related websites and applications. This collection occurs as part of general app access and is not conditioned on feature-level consent. It includes the categories below, which are collected in addition to any information described in the Home Insights, Home Improvement Projects, and Home Troubleshooter information collection sections.

Device and Network Information

We may collect information about the device and network you use to access the Covered Products, including your device type, operating system and version, mobile carrier, browser type, screen resolution, IP address, unique device identifiers, and general location information (such as city or metropolitan area derived from your IP address).

Online Activity and Usage Data

We may collect information about how you interact with the Covered Products, including the screens or pages you view, the features you use, how long you spend on a screen, navigation paths, access times, and duration of access.

Tracking Technologies

We and our service providers may use the following technologies to collect this information:

Cookies. Text files stored on your device that help us recognize your browser, remember your preferences, enable product functionality, and understand usage patterns.

Web beacons. Small electronic files (also known as pixel tags or clear GIFs) used to record information such as when a screen or feature was accessed and whether certain content was viewed or clicked.

Local storage. Technology that saves data on your device to support navigation, store preferences, and customize your experience.

Session-replay tools. Third-party software that records a replay of your interactions within the app (such as taps, scrolls, and navigation paths) for research and development purposes, including to help us troubleshoot problems, understand how users interact with the Covered Products, and identify areas for improvement. These tools do not capture passwords or financial account information. GoodLeap disables session-replay tools within the Covered Product feature areas (Home Insights, Home Improvement Projects, and Home Troubleshooter) until after you have provided the applicable feature-level consent described in this Notice. Session replay may be active in general app areas prior to feature consent.

For more information about how to manage cookies and tracking preferences, see the Your Privacy Rights and Choices section (Your Privacy Rights and Choices).

Sources of Personal Information

We obtain the personal information described in this Notice from the following sources:

Directly from you, when you submit project requests, provide feedback, or otherwise interact with the Covered Products.

Automatically, through your use of the Covered Products and our related technology infrastructure, as described in this module.

From your utility provider and Arcadia Power, Inc., when you authorize GoodLeap to access your utility account (Home Insights only).

From third-party data providers, including First American for property data and NOAA for weather data (Home Insights only).

From your solar or battery system monitoring vendor, through GoodLeap’s existing TPO relationship, or from you sharing your OEM data through GoodLeap’s device linking flow in the homeowner app.

How We Use Your Information

GoodLeap uses the personal information collected through the Covered Products for the purposes described below. We do not use your information for any purpose that is inconsistent with the consent you provide.

Product-Specific Uses

Home Insights

To generate your daily energy performance summary, including total energy use, peak energy use, and solar offset.

To create personalized energy insights and home improvement recommendations based on your energy data, property details, and local weather.

To calculate estimated energy costs and potential savings from home improvement projects.

To show you relevant home improvement project options and affiliate marketplace product recommendations.

To analyze how you interact with the Insights feature so we can improve its accuracy and usefulness.

To send you notifications when new insights are available.

GoodLeap does not use CARE/FERA tariff information to infer income status, program eligibility, or any other sensitive characteristic.

Home Improvement Projects

To process your project request and identify a qualified contractor from GoodLeap’s network.

To share your project information with a matched contractor so the contractor can prepare a quote, at your direction.

To facilitate communication between you, GoodLeap’s concierge team, and the matched contractor.

To contact you by phone to confirm your project details and present the matched contractor to you.

To track the status of your project request within the GoodLeap Homeowner App.

To assess whether financing options, such as a GoodLeap home improvement loan or Home Card, may be relevant to your project.

Home Troubleshooter

To provide you with home repair and maintenance guidance through an AI-powered conversational interface.

To improve the accuracy, safety, and quality of the Troubleshooter’s responses over time, using retained conversation data as described in the Data Retention section.

General Uses Applicable to All Covered Products

Artificial Intelligence and Machine Learning

GoodLeap uses artificial intelligence (AI) and machine learning technologies to help provide and improve the Covered Products. The Home Troubleshooter is powered by a large-language-model AI system. GoodLeap may also use AI or machine learning technologies more broadly to improve product features, personalize your experience, or support operational functions. When you interact with an AI-powered feature, your personal information may be processed to generate relevant outputs and to improve the quality of future responses. GoodLeap's AI service providers are prohibited by contract from using your personal information for purposes other than providing services to GoodLeap.

Research, Development, and Product Improvement

We use personal information for research and development purposes, including to improve the Covered Products, diagnose technical issues, understand usage trends and user preferences, and develop new features. As part of these activities, we may create aggregated, de-identified, or anonymous data derived from personal information. We may use such de-identified or anonymous data and share it with third parties for our lawful business purposes.

Security, Fraud Prevention, and Safety

We use personal information as we believe necessary or appropriate to: (a) maintain the safety, security, and integrity of the Covered Products, our databases, and other technology assets; (b) protect our, your, or others’ rights, privacy, safety, or property, including by making and defending legal claims; (c) audit our internal processes for compliance with legal and contractual requirements and internal policies; (d) enforce the terms and conditions governing the Covered Products; and (e) prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft.

To Communicate with You

We may use your contact information to communicate with you about your account, the Covered Products, this Notice, or our relationship generally. We may also send you service-related notifications (such as updates to the Covered Products or this Notice) via push notification, in-app message, or email.

Marketing GoodLeap Products and Services

We may use personal information collected through the Covered Products to send you information about other GoodLeap products, services, and financing options that may be relevant to you, as permitted by applicable law. You may opt out of marketing communications as described in the Your Privacy Rights and Choices section below.

Interest-Based Recommendations and Affiliate Marketplace

In connection with the Home Insights feature, GoodLeap may display recommendations for third-party products or services through an affiliate marketplace based on your energy data and usage patterns. Clicking a recommendation redirects you to the third-party retailer’s own website. GoodLeap does not disclose your personal information to affiliate retailers at the time of the redirect. GoodLeap may receive a referral commission if you make a purchase.

As Required by Law

We use and disclose personal information as we believe necessary or appropriate to respond to legal process (such as subpoenas or court orders), requests from law enforcement or government authorities, and other applicable legal requirements.

With Your Consent

In some cases, we may specifically ask for your consent to collect, use, or share your personal information, such as where required by law. We will disclose your personal information in accordance with your prior direction or express consent.

Home Insights — How We Share Your Information

Arcadia Power, Inc. (Utility Data Aggregator)

GoodLeap uses Arcadia Power, Inc. to connect to your utility account, retrieve your energy data, and manage the ongoing data feed. Arcadia operates the authorization flow through which you grant GoodLeap access to your utility account.

Arcadia processes your utility data on GoodLeap’s behalf as a service provider, subject to use limitations established in their agreement with GoodLeap. Arcadia does not use your utility data for its own independent purposes.

You can revoke GoodLeap’s access to your utility data at any time by contacting us at privacy@goodleap.com or as described in the How to Contact Us and Exercise Your Rights section. Revoking access ends future data collection but does not automatically delete data already collected.

Affiliate Marketplace Partners

When the Insights feature shows you a recommendation that links to an affiliate marketplace (for example, a smart thermostat retailer), clicking the link redirects you to the third-party retailer’s own website. GoodLeap does not disclose your personal information to the affiliate retailer at the time of the redirect, and this referral arrangement does not constitute a disclosure of personal information for cross-context behavioral advertising purposes under the California Consumer Privacy Act. GoodLeap may receive a commission if you make a purchase through the link.

Analytics Vendors

GoodLeap uses product analytics tools to understand how homeowners interact with the Insights feature. These tools process behavioral data on GoodLeap’s behalf as service providers and may not use that data for their own independent purposes.

What We Do Not Do

GoodLeap does not sell your utility data. GoodLeap does not use your utility data to make credit decisions, assess creditworthiness, or determine eligibility for financing products. GoodLeap does not share your utility data with marketing partners for their own independent marketing purposes

Home Improvement Projects — How We Share Your Information

Matched Contractors

When you submit a project request and a contractor is matched to your project, GoodLeap shares your project information with that contractor at your direction. The information shared includes your project type, your answers to project intent questions, your contact information (name, phone number, and email address), and your property address. You will be asked to authorize this sharing at the time of submission as described in the Home Improvement Projects — Your Consent section.

The contractor who receives your information is a third party. By authorizing the share, you are directing GoodLeap to provide your information to that contractor. The contractor is required by their agreement with GoodLeap to handle your information consistent with applicable law and GoodLeap's contractor data requirements. If you submit a deletion request to GoodLeap, GoodLeap will forward the request to the matched contractor as required by applicable law. However, because the matched contractor is an independent third party, you may also need to contact the contractor directly to request deletion of any information it holds independently.

CRM Platform

GoodLeap uses a customer relationship management (CRM) platform to manage project requests, track matching activity, and facilitate communication between the concierge team, homeowners, and contractors. This platform processes data on GoodLeap's behalf as a service provider.

GoodLeap Concierge Team

GoodLeap’s customer care associates (CCA team) access your project request to identify a qualified contractor, contact you by phone, and facilitate the project. This is internal processing and does not constitute sharing with a third party.

Home Troubleshooter — How We Share Your Information

GoodLeap does not share your Home Troubleshooter chat content with third parties. Your chat content is used only to generate your troubleshooting response and to improve the Troubleshooter's performance, and is not used for any other purpose.

Service providers that support the Troubleshooter's infrastructure process your data only as directed by GoodLeap and are prohibited from using it for their own independent purposes.

General Sharing — All Covered Products

In addition to the product-specific sharing described in the Home Insights, Home Improvement Projects, and Home Troubleshooter sharing sections, GoodLeap may share personal information collected through the Covered Products with the following categories of recipients in the following circumstances.

Service Providers

We share personal information with third-party service providers that perform services on our behalf, including technology hosting, data storage and processing, security monitoring, analytics, and customer support. These service providers process personal information only as directed by GoodLeap and are prohibited from using it for their own independent purposes.

Related Companies and Affiliates

We may share personal information with GoodLeap’s corporate affiliates, subsidiaries, parent company, and other companies under common control for legitimate internal business purposes, including business operations, administrative support, and compliance functions.

Professional Advisors

We may share personal information with attorneys, accountants, financial advisors, and other professional advisors who provide services to GoodLeap, subject to confidentiality obligations consistent with applicable law and professional standards.

Business Transaction Participants

We may share or transfer personal information in connection with or in anticipation of a merger, acquisition, consolidation, reorganization, divestiture, change in capital structure, sale or transfer of all or part of GoodLeap’s business or assets, or a bankruptcy or similar proceeding. In such cases, we will use reasonable efforts to require the recipient to honor the commitments in this Notice.

Legal Compliance, Law Enforcement, and Safety

We may disclose personal information to courts, law enforcement agencies, government authorities, or other third parties when: (a) required to do so by applicable law, court order, or legal process; (b) we have a good-faith belief that disclosure is necessary to prevent or respond to fraud, abuse, security incidents, or threats to the safety of any person; (c) necessary to protect or enforce GoodLeap’s rights, property, or legal interests; or (d) otherwise permitted by applicable law.

With Your Consent

We may share personal information with other parties when you have given your express consent to that sharing, as disclosed to you at the time of consent.

Data Retention

GoodLeap retains personal information collected through the Covered Products based on the criteria described in this section. Retention is based on the purpose for which data is collected, applicable legal requirements, and GoodLeap's data minimization practices. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process the personal information and whether we can achieve those purposes through other means; and the applicable legal requirements.

When data is no longer needed for its original purpose, it is deleted or de-identified. Certain data may be retained beyond the applicable retention period where required by law, to resolve disputes, enforce our agreements, or satisfy legal, accounting, or reporting requirements. If you wish to request deletion of your personal information before the end of an applicable retention period, contact us as described in the How to Contact Us and Exercise Your Rights section.

Data Category

Product

Retention

Purpose

15-minute energy consumption data

HEI

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

Daily KPI generation

Utility billing statements (PDF)

HEI

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

Bill comparison; cost trend analysis; savings calculation. Access is limited to disclosed HEI purposes. PDFs are not used for any secondary purpose.

Utility rate data

HEI

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

Cost estimation; savings calculation

Local weather data

HEI

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

Energy use context

Property information (First American)

HEI

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

Insight generation

Solar/battery telemetry (TPO)

HEI

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

KPI generation

In-app behavioral data

HEI

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

Product analytics; feature improvement

Project request data

Home Improvement Projects

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

Project lifecycle; customer service

Chat session content

Troubleshooter

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

Service improvement

Chat session feedback

Troubleshooter

Retained for the period necessary for the stated purpose; deleted or de-identified when no longer needed, subject to legal hold and compliance requirements.

Service improvement

Your Privacy Rights and Choices

California Residents (CCPA/CPRA)

The following rights apply to California residents under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). For purposes of this section, “personal information” has the meaning given in California privacy laws but does not include information exempted from the scope of those laws.

Right to Know

You have the right to know what categories of personal information GoodLeap has collected about you, the purposes for which it was collected, the categories of third parties with whom it was shared, and the specific pieces of personal information collected.

Right to Delete

You have the right to request that GoodLeap delete personal information we have collected from you, subject to certain exceptions. We may retain information where permitted or required by law, including to complete a transaction you requested, to maintain security, or to comply with a legal obligation.

Right to Correct

You have the right to request that GoodLeap correct inaccurate personal information we have collected about you.

Right to Opt Out of Sale or Sharing

GoodLeap does not sell personal information collected through the Covered Products. Affiliate marketplace recommendations in the Home Insights feature redirect you to third-party retailer websites; GoodLeap does not disclose your personal information to those retailers at the time of the redirect, and this referral arrangement does not constitute a sale or sharing for cross-context behavioral advertising under the CCPA. If you direct us not to sell or share your personal information for any other applicable purpose, we will also treat this as a request to stop sharing covered by California’s “Shine the Light” law with third parties for their direct marketing purposes. To exercise this right, use the “Do Not Sell or Share My Personal Information” link on GoodLeap’s website at goodleap.com, or contact us as described in the How to Contact Us and Exercise Your Rights section.

Right to Limit Use of Sensitive Personal Information

Certain data collected in connection with the Covered Products — including utility account credentials, energy consumption data, billing statements, 15-minute interval electricity data, and CARE/FERA rate tariff information — may constitute sensitive personal information under California and other applicable state privacy laws. GoodLeap uses this information solely to provide the Home Insights feature and related product functions as described in this Notice. Specifically, GoodLeap does not use energy data or related utility information to infer your income, financial status, health or medical conditions, household composition, occupancy patterns, or any other protected or sensitive characteristic. This data is used solely to generate your Home Insights report, power the bill comparison and solar savings analysis features, and support related product functions you have specifically requested — and for no other purpose. It is not used for advertising, marketing, or profiling of any kind. If GoodLeap’s use of sensitive personal information changes, we will update this Notice and provide the right to limit use where required by law.

Right to Non-Discrimination

GoodLeap will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide you with a lower quality of service because you exercised a right described in this Notice.

Residents of Other U.S. States

In some cases, personal information collected by GoodLeap in connection with the Covered Products may be subject to privacy laws in U.S. states outside of California, including but not limited to Colorado, Virginia, Texas, and Delaware. For purposes of this section, “personal information” means “personal data” or “personal information” as defined under the applicable state privacy law but does not include information exempted from the scope of such laws.

We describe: the categories of personal information we process in the Home Insights, Home Improvement Projects, Home Troubleshooter, and Automatically Collected Information sections; the purposes for which we process personal information in the How We Use Your Information section; and the categories of personal information that we share with third parties and the third parties with whom we share in the Home Insights, Home Improvement Projects, Home Troubleshooter, and General Sharing sections.

Depending on your state of residence, you may have the following rights:

Access. You can request that we confirm whether we process your personal information and request access to that personal information.

Correct. You can ask us to correct inaccurate personal information that we maintain about you.

Delete. You can ask us to delete personal information provided by or obtained about you.

Data Portability. You can request a copy of the personal information you have provided to us in a portable, readily usable format.

Opt Out of Sales and Targeted Advertising. If we “sell” your personal information or process it for “targeted advertising” as defined under applicable state law, you can opt out.

Right to Appeal. If we decline to take action on your request, you may appeal our decision by contacting us at the contact information in the How to Contact Us and Exercise Your Rights section within a reasonable time after we send you our decision. We will process your appeal in compliance with the applicable state privacy law.

Additional State-Specific Information

Texas (TDPSA): Your opt-out rights apply to the sale of personal information, targeted advertising, and profiling used for consequential decisions. You may appeal GoodLeap’s decision by contacting us within a reasonable time after receiving our response.

Colorado (CPA): Your opt-out rights apply to the sale of personal information, targeted advertising, and profiling used for decisions that produce legal or similarly significant effects. You may appeal GoodLeap’s decision within 45 days of receiving our response; GoodLeap will respond to your appeal within 45 days.

Virginia (CDPA): You may appeal GoodLeap’s decision within a reasonable time after receiving our response. GoodLeap will respond to your appeal within 60 days.

Delaware (DPDPA): You may appeal GoodLeap’s decision within a reasonable time after receiving our response. GoodLeap will respond to your appeal within 60 days.

Nevada Residents

Nevada Revised Statutes Chapter 603A allows Nevada residents to opt out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to a third party. If you are a Nevada resident who wishes to exercise your opt-out rights under Nevada law, please submit a request using the contact information in the How to Contact Us and Exercise Your Rights section.

Your Choices

In addition to the state-specific rights described above, you have the following choices regarding your personal information and communications:

Promotional Emails

If you wish to unsubscribe from marketing or promotional emails from GoodLeap, follow the unsubscribe instructions included in those emails. If you decide not to receive promotional emails, we may still send you transactional or service-related communications, such as those about your account or the Covered Products.

Text Messages

GoodLeap may communicate with you by text message (SMS) in connection with the Covered Products, including for account-related notifications, to facilitate contractor matching in connection with the Home Improvement Projects feature, and to notify you of new energy insights in connection with the Home Insights feature. Text messages about energy insights are service-related notifications; however, if any such message promotes home improvement projects, financing options, or affiliate marketplace offers, it will be treated as a marketing communication and sent only with appropriate consent. To stop receiving text messages from GoodLeap related to the Covered Products, reply STOP to any text message you receive from us, or send your request and mobile telephone number to the contact address in the How to Contact Us and Exercise Your Rights section. Note that we may send you a confirmation message in response to your STOP request. Stopping text messages related to the Covered Products will not affect your GLBA-related communications.

Push Notifications

You may manage push notifications from the GoodLeap Homeowner App through your device’s notification settings. Turning off push notifications will stop app-based alerts about new energy insights or project updates, but will not affect other GoodLeap communications.

Cookies and Tracking Technologies

Most browsers and mobile devices allow you to control how cookies and similar tracking technologies are used. You can set your browser to refuse cookies, alert you when cookies are being set, or delete cookies that have already been set. Please note that if you disable cookies, some features of the Covered Products may not function properly. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

Analytics

GoodLeap may use product analytics tools to analyze how users interact with the Covered Products. To request information about how GoodLeap's analytics service providers process your data, or to exercise your privacy rights in connection with that data, contact GoodLeap as described in the How to Contact Us and Exercise Your Rights section.

Do-Not-Track

Some web browsers and devices permit you to broadcast a “Do Not Track” signal to indicate that you do not wish to be tracked online. The Covered Products do not respond to “Do Not Track” signals.

Global Privacy Control

GoodLeap recognizes the Global Privacy Control (GPC) signal. If your browser or device sends a GPC signal when you visit GoodLeap’s properties, GoodLeap will treat it as a request to opt out of the sale and sharing of your personal information for cross-context behavioral advertising.

Data Security

GoodLeap maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These safeguards include encryption of personal information at rest and in transit, access controls limiting data access to personnel with a business need, and security monitoring.

Personal information is encrypted at rest in accordance with GoodLeap’s security standards.

No security system is impenetrable. No method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee the absolute security of your personal information. If you believe your personal information has been compromised, please contact us immediately using the contact information in the How to Contact Us and Exercise Your Rights section.

In the event that we are required by law to inform you of any unauthorized access to or acquisition of your personal information, we may notify you electronically, in writing, or by telephone, as permitted by applicable law.

International Data Transfers

GoodLeap is based in the United States. Personal information collected through the Covered Products is processed and stored primarily in the United States. GoodLeap engages service providers that may be located in the United States or in other countries.

If you access the Covered Products from outside the United States, your personal information may be transferred to and processed in the United States or other countries whose privacy laws may differ from and may not be as protective as the laws in your country of residence. By using the Covered Products and providing your personal information, you acknowledge this transfer and processing.

GoodLeap takes steps to protect personal information transferred across borders in accordance with applicable legal requirements. For information about the safeguards applied to cross-border transfers of your personal information, contact us using the information in the How to Contact Us and Exercise Your Rights section.

Relationship to GoodLeap’s Main Privacy Policy

This Notice applies specifically to the Covered Products: Home Insights, Home Improvement Projects, and the Home Troubleshooter. It supplements the GoodLeap Privacy Policy available at goodleap.com/privacy.

Data collected in connection with GoodLeap’s financing products, loan applications, and account servicing — including the data covered by GoodLeap’s Gramm-Leach-Bliley Act privacy notice — is governed by the main GoodLeap Privacy Policy and the GLBA notice, not by this Notice. If the same personal information is collected for both a Covered Product purpose and a financing purpose, the applicable notice for each use is the one that governs that specific use.

In the event of a conflict between this Notice and the main GoodLeap Privacy Policy with respect to a Covered Product, this Notice governs.

Changes to This Notice

GoodLeap may update this Notice from time to time. The effective date at the top of this Notice indicates when it was last revised. If we make material changes to how we collect, use, or share personal information through the Covered Products, we will notify you through a prominent in-app notice or by email before the changes take effect, or through other means as may be required by applicable law.

Your continued use of any Covered Product after the effective date of a revised Notice constitutes your acknowledgment of the changes, except that GoodLeap will seek your affirmative consent before implementing any change that requires consent under applicable law. If you do not agree to the revised Notice, you may discontinue use of the relevant Covered Product and contact us to request deletion of your information.