Who we are and what this policy covers
This Privacy Policy explains how [Legal entity name], [Entity type and state of formation] ("Dawnpoint", "we" or "us"), collects, uses and shares personal information. Dawnpoint provides Automated Energy Care for home service businesses: software that keeps a current profile of each home a business serves, answers questions about those homes, and helps the business's team decide which visits are worth making.
This policy applies to:
- our website at dawnpoint.ai, including pages we prepare for prospective customers and the sample workspace;
- the Dawnpoint workspace that home service businesses and their teams use, and the team chat apps they link to it, such as Slack and Microsoft Teams;
- text conversations between homeowners and Dawnpoint acting as a service company's automated assistant;
- the pages homeowners use to share a utility bill, link a utility account or connect a home energy device; and
- connections a person makes between Dawnpoint and their own AI assistant, such as ChatGPT or Claude (Planned).
It does not cover how a home service company uses information in its own systems (its own privacy notice applies), the sign-in pages of device makers and utilities, or what an AI assistant, messaging app or other outside service does with information after you choose to send it there.
Dawnpoint has not launched. Homeowner text messaging, outreach delivery, utility account monitoring and assistant connections are not turned on yet, and features marked Planned are not available.
Our two roles
Dawnpoint plays one of two roles, depending on whose information it is and why we have it.
When we act for a home service company
Most information in Dawnpoint about homes and homeowners comes from the home service companies we work for. We call each operating company a Brand. A Brand imports its customer records, and its team adds notes, photos and service history. For this information Dawnpoint is a service provider (also called a processor): we use it only to provide, secure, support and improve Dawnpoint, as our agreement with that Brand and its instructions allow. We don't sell it or use it to build profiles for anyone else. To improve Dawnpoint for other customers we use only aggregated or de-identified information, or feedback shared with consent as described below. The Brand decides why the information is collected and is responsible for its own privacy notice to its customers.
If you are a homeowner with questions about how your service company uses your information, please contact that company. If you send us a request about information a Brand controls, we will pass it to that Brand and help it respond.
When we act for ourselves
Dawnpoint decides how to use, and is responsible for, information about:
- people who sign in to Dawnpoint, including business users and homeowners who create an account;
- visitors to our website, and people who contact us about pilots, sales or support;
- consents and choices a homeowner gives Dawnpoint directly, such as consent to process a utility bill or to link a utility account; and
- the security, abuse-prevention and audit records we keep to protect the service.
Imported records are never consent to text. A customer list, a service record or permission to read a device never counts as permission to text a homeowner. How texting consent works is in Text messages.
Information we collect
From home service companies and their teams
- Account and team details: names, work email addresses, phone numbers, profile photos, roles, which Brands and homes each person can access, and who may approve outreach.
- Customer site records: what a Brand imports from its own systems, such as customer names, service addresses, phone numbers and email addresses, equipment details (type, make, model, serial number and install date), property details, and service history including technician notes.
- Team content: notes, photos, documents, messages and corrections the team adds, and the outreach it drafts and approves.
From homeowners
- Account details: if you create an account, your name, your verified mobile number and email address, and which homes you can see.
- Messages: texts and attachments you send to Dawnpoint, and our replies.
- Utility bills: a bill you choose to upload or text to us, with your consent to process it, and the facts we read from it, such as your utility, rate plan, charges and usage.
- Utility account data: if you choose to link your utility account for Energy Care+, usage readings and billing details from your utility, received through a utility data provider. We don't store your utility username or password.
- Choices and consents: your consent and opt-out records, and the comfort, charging and backup limits you set for any schedule you approve.
From connected devices
If a homeowner connects a device, such as a home battery, solar system, EV charger or thermostat, they authorize it on a secure connection page from the device maker or a device-connection provider. We then receive device identifiers, settings, capabilities and readings, such as battery charge and solar production. Dawnpoint never asks for device passwords. We encrypt the access keys a connection provider issues and use them only to read that home's data.
From public and other sources
To understand a home, we may use property characteristics, public records, weather, utility rate information, regional energy data and incentive programs, including public data from the US Energy Information Administration and the US Census Bureau. We match these to a home by its address, city or ZIP code.
From AI features
When you use Dawnpoint's AI features, we process what you type or text, the answers and drafts Dawnpoint produces, and notes you approve saving for later. See How Dawnpoint uses AI.
From your browser and device
When you visit our website or use the workspace, we receive technical information such as your IP address, browser and device type, the pages you view and when. To limit abuse we keep only a one-way keyed hash of your IP address, not the address itself; our hosting provider also keeps standard request logs. See Cookies, analytics and browser storage.
From connections you or your company set up
- If a Brand links Slack or Microsoft Teams, we receive the messages its team members send to Dawnpoint there, and the identifiers that link each person's account.
- If a Brand connects its own systems through our partner interface, we receive the records it sends.
- If you connect your own AI assistant (Planned), we receive the requests it makes for you.
Please don't send us device or account passwords, payment card numbers, Social Security or other government ID numbers, or health information, by text or anywhere else in Dawnpoint.
How we use information
- To provide Dawnpoint: build and update each home's Site Profile, prepare Site Briefs for a Brand's team, provide Energy Care and Energy Care+ guidance, record visit outcomes, and prepare Visit Handoffs for the Brand's own booking team.
- To communicate: answer homeowners who text in, resolving what we can or handing it to a person on the team, and deliver outreach a Brand's team has approved.
- To propose, not control: suggest device schedules for a homeowner to approve. Dawnpoint does not control devices today. Only a specific schedule a homeowner approves could ever be carried out, by fixed rules rather than an AI model, and manual override always wins.
- To keep Dawnpoint safe: sign people in, enforce each person's access, prevent fraud and abuse, keep audit records, and find and fix problems.
- To run our business: billing, support, and meeting our legal obligations.
- To improve Dawnpoint: using aggregated or de-identified information and, only where a Brand turns it on and each person consents, feedback about Dawnpoint's answers.
What we don't do
- We don't sell personal information.
- We don't share personal information for cross-context behavioral advertising, and we don't use advertising trackers.
- We don't use your content to train third-party AI models, and we don't train AI models of our own on it.
- We don't use AI to make decisions about homeowners that have legal or similarly significant effects, such as decisions about credit, housing, insurance, employment or access to essential services.
How Dawnpoint uses AI
Dawnpoint uses AI models to help with the work of energy care. Dawnpoint proposes; people approve.
Where AI is used
- answering questions from a Brand's team in the workspace, Slack or Microsoft Teams, and from homeowners by text;
- reviewing the evidence about a home, with a separate AI check that reviews conclusions before they are published or used in outreach;
- drafting outreach messages for the team to review and approve;
- reading bills and documents that are shared with us; and
- proposing device schedules for a homeowner to approve.
Fixed rules, not AI models, handle imports, who may receive outreach, quiet hours, contact limits, opt-outs and emergency keywords.
What AI features see
Each request is limited to the organization, Brand or home it concerns, and to what the person asking is allowed to see. Depending on the task, a model may receive the conversation, the relevant parts of a Site Profile, notes saved for that conversation's context, and an image of a bill or document to read. We don't pool one company's conversations or private documents with another's.
Model providers and training
We reach AI models through an AI routing service. For model requests we configure it to use only model providers that keep no request data and don't use it to train their models; if no provider meets those settings, the request fails rather than going elsewhere. We require these providers, by contract, to limit how they use your information. Any batch processing needs a separate privacy review before we turn it on.
Conversations may search the web for public information. A search service handles those searches under its own retention terms, outside the settings above, so we aim to keep personal details out of search requests. Other provider-run tools, such as fetching web pages or combining answers from several models, stay off unless we turn them on after a privacy review.
Our own models. Dawnpoint doesn't train AI models of its own on customer or homeowner information. Learning from feedback is off by default: only where a Brand turns it on and each person consents do we keep feedback signals about Dawnpoint's answers, not the conversations themselves.
Accuracy and human review
AI output can be wrong, incomplete or out of date. Dawnpoint keeps a model's suggestions apart from facts a person reported or a device measured, and a suggestion never silently becomes a verified fact. Text read from a bill or photo stays unverified until it is confirmed. Site Briefs show their evidence and what is still uncertain. Dawnpoint Experts review exceptions and samples, not every home.
People approve outreach
Dawnpoint never starts a conversation with a homeowner on its own. Outreach goes out in one of two ways, and people on the Brand's team approve both:
- Through the Outbox. An approver on the team approves the exact message and who receives it. It then waits a short cooling period (10 minutes by default) while anyone on the team with access can pull it back.
- Through a review program. An administrator on the team approves a program's exact invitation and reminder wording, and a person on the team approves enrolling each home. The program then sends that invitation and at most one reminder, a few days later.
When a homeowner texts in, Dawnpoint answers right away or hands the conversation to the team; those replies don't wait for approval. When a service company, or a system it connects, asks us to invite a homeowner to set up an account, we email that invitation right away; a text invitation from Dawnpoint waits in the Outbox.
We say when it's automated
Outreach texts say they are automated and how to opt out, and they come from your service team. When Dawnpoint hands a conversation to the team or flags something urgent, it names itself as the service company's automated assistant, and it answers truthfully if you ask who runs the service. A person on the team takes over when a conversation needs one.
No significant automated decisions
We don't use AI to make decisions that have legal or similarly significant effects on homeowners. A Site Brief is a recommendation to a Brand's team about whether a visit is worth making. Guidance about rates and incentives is information, not a decision about eligibility.
Saved context notes
Dawnpoint remembers a note across conversations only when you approve saving it. Notes are encrypted, limited to the organization, Brand, home and audience they were saved for, and expire after 90 days. You can ask to remove a note at any time; removing it stops future use but can't recall replies already sent.
Text messages
Homeowners can text Dawnpoint about their own home by SMS, MMS, RCS or iMessage, from a Dawnpoint number or a number dedicated to their service company. The program terms are in our Text Messaging Terms.
- Consent comes first. We text a homeowner only with consent, for example after they reply START to an invitation their service company sent through Dawnpoint. An imported customer record never counts as consent.
- STOP always works. Reply STOP (or CANCEL, END, QUIT, UNSUBSCRIBE, REVOKE or OPT OUT) and we stop texting you from that number. We won't switch to another channel to get around it. Reply START to resume.
- Quiet hours. Outreach never goes out between 6 PM and 9 AM in the time zone your service company sets for it, and Outbox messages keep a minimum gap between contacts. A reply to a text you sent can come at any hour.
- No marketing use of your number. We don't sell or share mobile numbers or text opt-in data with third parties or affiliates for their marketing. We share them only with providers that deliver our messages, and with the service company you are a customer of and the systems it connects to Dawnpoint.
Dawnpoint Experts and staff access
Dawnpoint Experts are members of our staff who support our customers. Under our agreement with each business customer, Experts may access that customer's workspace data to operate, support, secure and improve Dawnpoint: for example, to work an escalation or an exception, review a sample of Site Profiles for quality, or help with a support request.
- An Expert can see a customer's data only after being added to that customer's workspace, limited to the Brands or homes granted, and keeps that access until removed.
- Dawnpoint's tools for working cases also require an expiring assignment from a Dawnpoint administrator. Assignments and changes to them are recorded in an audit log.
- The workspace's administrators see Experts as members in the team list. A label marking Experts, a view of their activity for Brand administrators, and a Brand setting to limit Expert access are Planned.
- Experts review exceptions and samples, not every home.
Platform administrators. Dawnpoint's platform administrators can see totals of homes and plans for every customer and, for a home they select, its address and utility, directly or by asking Dawnpoint's assistant, to operate and support the service. Changes they make are recorded in an audit log. Their role alone doesn't let them read homeowners' names, conversations or files.
How long we keep information
We keep personal information only as long as we need it for the purpose we collected it for. We keep some records longer because a law requires it, or because we may need them to answer a legal claim: texting laws, for example, let people bring claims up to four years after a text, and tax law requires billing records to be kept for years. The table gives each period and the event that starts it.
| Information | How long we keep it |
|---|---|
| Your account: name, email, phone number and profile | While your account is open. Within 30 days after it closes, we delete or de-identify it, keeping only an internal ID inside the records below that we must keep longer. |
| A Brand's records about its customers and homes: contact details, addresses, equipment, service history, and Site Profiles with their history | While the Brand's agreement with us is in effect, unless the Brand deletes them sooner. When it ends, the Brand has 30 days to export them, and we delete them within 30 days after that. |
| Customer files a Brand uploads | The original file: 30 days by default, or 1 to 90 days as the person uploading chooses. The records created from it follow the row above. |
| Documents and photos added to a home's record | 90 days by default, or 1 to 365 days as the person uploading chooses. Text read from a file is kept no longer than the file. Facts confirmed from it stay with the home's record. |
| Photos and files you text us, including bills | Stored encrypted with the home's documents for 90 days. A texted bill is processed as a bill only after you consent. Our texting provider keeps its own copy under its terms. |
| Utility bill files you upload for processing | We destroy the key to the stored file once we finish reading it, and in every case within 7 days of upload. Facts read from it stay with the home's record. A bill-analysis provider that processes a bill keeps it under its contract with us. |
| Energy use and bill details from bills you share or a utility account you link | While your consent is in effect. We keep detailed readings for the most recent 24 months, and delete these details within 30 days after you withdraw consent or the home's record is deleted. |
| Connected devices | Access credentials: deleted within a day after a device is disconnected or your access ends. Readings: the most recent 24 months while connected, deleted within 30 days after it is disconnected. |
| Sign-in details a Brand stores for its own systems | Deleted within a day after the Brand removes them, and when its agreement ends. |
| Text conversations with Dawnpoint | Until the Brand that serves your home deletes them, and no longer than 3 years after the conversation's last message. Texting records are kept separately, as the next row says. |
| Texting records: your consent to receive texts, a log of each text, the words of texts we send, and your STOP, START and other opt-out or opt-in requests | Proof of consent and opt-outs: 5 years after the last text to or from your number. The log of each text: 5 years after that text. If you opt out, we keep your number on a do-not-text list until you opt back in, so we don't text you again by mistake. |
| Outreach a Brand approves: the message, who approved it and who received it | 5 years after the last message sent. Drafts that are never sent are deleted after 90 days. |
| Escalations, Cases and Visit Handoffs | 3 years after they close. |
| Workspace conversations and notes | Conversations: until the person who started them or a workspace administrator deletes them, or the Brand's agreement ends. Saved context notes: 90 days after they were last saved. Profile notes in Settings: until you delete them or close your account. |
| Your consents and approvals: bill processing, utility linking, device schedules and improving Dawnpoint | While the consent is in effect, and 4 years after it ends. |
| Feedback for improving Dawnpoint, only where it is turned on with consent | No more than 30 days, or until the consent ends. |
| Assistant connections (Planned) | Each permission lasts 90 days unless revoked sooner. We keep a record of it for 1 year after it ends. |
| Billing, payment and tax records | 7 years after the end of the tax year they relate to. Card details are held by our payment processor, not by us. |
| Agreements, and your acceptance of our terms | While the agreement is in effect, and 6 years after it ends. |
| Security and access logs, including records of Dawnpoint Expert access | 6 years after each entry. Records of a security incident: 5 years after it is resolved. |
| Records that show we follow privacy laws, such as risk assessments and audits | While the processing they cover continues, and 5 years after it ends. |
| Your requests to us about privacy, opt-outs and other legal matters, and our responses | 24 months after we close the request. Opt-out requests are also kept as texting records. |
| Technical records: request logs and diagnostic traces, including traces of AI requests | 30 days. The keyed hash of your IP address we use to limit abuse is deleted after its time window ends, never more than a day later. Website visit statistics are used only as totals. |
| Demo and sign-up details from businesses that don't become customers | Demo sessions: 30 days after last use. Sign-up details: 12 months after last activity. |
| Backups | Overwritten on a rolling basis within [Backup retention (days)] days. See How we delete information, below. |
When we keep information longer
We keep information past these periods only when we have to: to meet a legal obligation; while a legal hold, an investigation or a government request to preserve records is open; or to establish or defend legal claims. We then keep only what that purpose needs, protect it as before, and delete it once the obligation ends. If you ask us to delete information we must keep for one of these reasons, we tell you what we kept and why.
Information we keep for Brands
For information we hold as a Brand's service provider (see Our two roles), the Brand decides how long it stays, within the periods above, and can tell us to delete or return it at any time. When a Brand deletes a home's record, we delete the information tied to that home within 30 days, except the texting records, consents, billing records and logs that the table says we keep longer. If you ask us to delete information a Brand controls, we send your request to that Brand and help it respond.
How we delete information
We delete information, or de-identify it so it can no longer be linked to a person or a home. For encrypted files we also destroy the key that unlocks them, so no one at Dawnpoint can open them again. We tell our service providers to delete what they hold for us, as their contracts require.
Deleted information can remain in our backups until they are overwritten, within [Backup retention (days)] days. We use backups only to recover from failures. If we ever restore one, we delete again anything that had been deleted before the restore.
We may keep information that has been aggregated or de-identified so it no longer identifies anyone. We won't try to re-identify it, and we require anyone we share it with to agree to the same.
Questions and requests. To ask about these periods, or to ask us to delete information, email legal@dawnpoint.ai. Your US state privacy rights explains how we handle requests.
Security
We use administrative, technical and physical safeguards designed to protect personal information, including:
- encryption in transit, and authenticated encryption at rest for stored documents, saved context notes and connection credentials;
- access limited by organization, Brand and home, and checked again on each request;
- hashed API keys, and hashed identifiers for abuse limits; and
- approvals and cooling periods for outreach, and audit records of outreach approvals and of staff assignments.
No way of sending or storing information is completely secure, and we can't guarantee absolute security. If a security incident affects your personal information, we will notify you and the business customers involved as the law and our agreements require.
Your choices and controls
- Stop texts: reply STOP. Reply START to resume.
- Disconnect a device or utility account: use the device maker's or utility's own settings, or ask us or your service company.
- Withdraw bill consent: ask us or your service company, and we will stop processing new bills.
- Remove a saved note: ask Dawnpoint in the conversation where it was saved.
- Delete conversations: signed-in users can delete their own workspace conversations.
- Manage profile notes: view and delete the notes you keep in Settings.
- Revoke an assistant connection (Planned): at any time, from your account.
- Close your account: contact us at legal@dawnpoint.ai.
Withdrawing consent stops future processing based on it but doesn't undo processing already done.
Your US state privacy rights
Depending on where you live, state law may give you the right to:
- know what personal information we have about you and how we use it, and get a copy;
- correct inaccurate information;
- delete information;
- receive your information in a portable format;
- opt out of the sale or sharing of personal information, targeted advertising, and profiling that produces legal or similarly significant effects (we do none of these);
- limit our use of sensitive personal information, or have it used only with your consent; and
- not be treated differently for using these rights.
How to make a request. Email legal@dawnpoint.ai. We will confirm we received it and respond within the time the law allows, usually 45 days. To protect you, we verify your identity, usually by confirming information we already have, such as the verified phone number or email on your account. You may use an authorized agent; we may ask for proof of the agent's authority and confirm your identity with you directly.
Information a Brand controls. If your request is about information a home service company gave us, we act on that company's instructions. We will send your request to that company and help it respond, and you can also contact it directly.
Appeals. If we decline your request, you can appeal by emailing legal@dawnpoint.ai with "Privacy appeal" in the subject. We will respond within the time the law allows. If you aren't satisfied, you may contact your state attorney general.
Additional notice for California residents
This section adds to the policy for California residents under the California Consumer Privacy Act. In the past 12 months we have collected the categories below. We keep each for the periods in How long we keep information.
| Category | Sources | Why we use it | Who receives it |
|---|---|---|---|
| Identifiers: name, phone number, email, service address, account IDs, IP address | You; your service company; our sign-in provider; your browser | Providing Dawnpoint, communicating, security | The Brand that serves the home; service providers |
| Customer records: contact details and, for business customers, billing details | You; your service company; our payment processor | Providing Dawnpoint, billing | The Brand that serves the home; service providers |
| Commercial information: service history, equipment, plan and membership status | Your service company; you | Providing Dawnpoint, Site Profiles and Site Briefs | The Brand that serves the home; service providers |
| Internet activity: pages viewed, requests and logs | Your browser | Security, reliability, analytics | Service providers |
| Location: service address, city and ZIP code (never your phone's location) | Your service company; you | Site identity, weather, rates and incentives | The Brand that serves the home; service providers |
| Audio, electronic and visual information: texts, photos and documents | You; your service company's team | Answering you, evidence for Site Profiles | The Brand that serves the home; service providers |
| Energy usage: bills, utility readings and device data | You, with your consent; your utility and device connections, with your authorization | Bill reviews, monitoring, guidance | The Brand that serves the home and systems it connects; service providers |
| Professional information: a business user's employer and role | Business customers | Accounts and access | Service providers |
| Inferences: conclusions in a Site Profile or Site Brief about a home's energy use and equipment | Created by Dawnpoint from the categories above | Providing Dawnpoint | The Brand that serves the home and systems it connects |
| Sensitive personal information: encrypted access keys for device connections, and sign-in details a business stores for its own systems | You; business customers | Only to retrieve data you or the business asked us to | Not disclosed except to service providers that store it encrypted |
We have not sold or shared personal information in the past 12 months, and we don't knowingly sell or share information about anyone under 16. We use sensitive personal information only for purposes the law permits, such as providing the service you asked for and keeping it secure, and never to infer characteristics about you.
Energy usage data
California gives electricity and gas usage data extra protection. We use it only to provide the services you or your service company asked for, and protect it with reasonable security. We share it only with the service company that serves your home, with systems that company connects to Dawnpoint to work for it, and with providers that help us run Dawnpoint under contracts requiring them to protect it. Before your utility or bill data reaches anyone else, we ask for your express consent and tell you who will receive it and why. We never offer anything in exchange for access to it without first getting your consent.
Direct marketing
We don't share personal information with third parties for their own direct marketing.
Children
Dawnpoint is for businesses and adult homeowners. It isn't directed to children, and we don't knowingly collect personal information from anyone under 13, or under the higher age a state's law sets. Homeowner accounts and texting are for people 18 and older. If you believe a child has given us personal information, contact legal@dawnpoint.ai and we will delete it.
Where information is processed
Dawnpoint is designed for home service businesses and homes in the United States. We and our service providers may process information in the United States and in other countries where those providers operate, under contracts that protect it.
Changes to this policy
We may update this policy as Dawnpoint changes. If a change is material, we will tell account holders by email or in Dawnpoint before it takes effect, and update the date at the top. We won't start using personal information we already hold in a materially different way, such as to train AI models, without notice and any consent the law requires.
How to contact us
- Privacy questions and requests: legal@dawnpoint.ai
- Mail: [Legal entity name], [Postal address]
- Data processing agreement and subprocessor list (business customers): [DPA link or request address]
- Homeowners: for questions about your service company's own use of your information, contact that company.