Sunrun Privacy Policy
Last Updated: July 9, 2025
Sunrun Inc. and its subsidiaries and affiliates (“Sunrun,” “we,” “us,” “our”) respect your privacy. This Privacy Policy (“Privacy Policy” or “Policy”) describes how we collect, use, and disclose personal information and any rights you may have with respect to such information. It governs personal information we collect through our websites (including www.sunrun.com and www.mysunrun.com), mobile applications, and/or or mySunrun (collectively, the “Sites”) and personal information we collect from you or third parties through any other means to provide our services or perform other business activities (collectively, the "Services"). The Policy does not apply to personal information we collect in an employment context, such as information collected from or about job applicants or employees.
Please read this Privacy Policy, which is part of our Website Terms, before using our Sites or Services. By accessing or using our Sites or Services, you agree to the Terms of Use and this Policy. California residents should also read our California Privacy Notice, which supplements this Policy.
QUICK GUIDE TO CONTENTS
INFORMATION WE COLLECT
HOW WE COLLECT INFORMATION
HOW WE USE AND DISCLOSE YOUR INFORMATION
NOTICE OF ACCESSING, COLLECTING, STORING, USING AND DISCLOSING ENERGY USAGE INFORMATION
THIRD PARTY CONTENT, LINKS, AND PLUG-INS
CHILDREN'S PRIVACY
DATA SECURITY AND RETENTION
CHANGES TO OUR PRIVACY POLICY
ADDITIONAL PRIVACY RIGHTS AND DISCLOSURES
CONTACT INFORMATION
1. INFORMATION WE COLLECT
We may collect information that personally identifies, relates to, describes, or is capable of being associated with you (“personal information”), including:
Identifiers, including name, physical address, email address, phone number, social security number, driver’s license or other government identification information, account identifiers and login credentials, and credit and identity information relating to data used to identify an individual.
Characteristics of protected classifications under applicable laws, including age and date of birth.
Commercial information, including payment card or bank account information, account history relating to an individual’s purchases, service profile information relating to an individual’s purchases and interests, feedback information, communication preferences, customer service and communication history, information related to home ownership or energy usage, and utility provider.
Internet or other electronic network activity information, including IP address, log data, analytics data, application data, device ID, and other data collected through cookies and similar technologies.
Geolocation data, including general geographic location or more precise location when permitted by law.
Audio, electronic, visual, thermal, olfactory, or similar information, including, where permitted by law, recordings of phone calls between us and individuals and audio, image, and video recordings of visitors to our offices or events.
Professional or employment-related information, including the business or organization an individual represents, their title with that business or organization, and information relating to their role with the business or organization.
Sensitive Personal Information, including social security number, driver’s license or other government identification information, precise geolocation data, and account login credentials. Each type of Sensitive Personal Information may also fall under another category of personal information.
Demographic information, including age and date of birth.
Inferences drawn from other personal information or data, including our predictions about interests and preferences and related service profile information.
A. Personal Information
We may collect information that personally identifies, relates to, describes, or is capable of being associated with you (“personal information”). The types of personal information we collect about you will vary based on how you use the Sites and/or Services and your relationship with us, but may include:
Identifiers, including name, physical address, email address, phone number, social security number, driver’s license or other government identification information, account identifiers and login credentials, and credit and identity information relating to data used to identify an individual.
Characteristics of protected classifications under applicable laws, including age and date of birth.
Commercial information, including payment card or bank account information, account history relating to an individual’s purchases, service profile information relating to an individual’s purchases and interests, feedback information, communication preferences, customer service and communication history, information related to home ownership or energy usage, and utility provider.
Internet or other electronic network activity information, including IP address, browser type, device type, system type, and the domain name from which you accessed the Sites, log data, analytics data, application data, device ID, and other data collected through cookies and similar technologies.
Geolocation data, including general geographic location or more precise location when permitted by law.
Audio, electronic, visual, thermal, olfactory, or similar information, including, where permitted by law, recordings of phone calls between us and individuals, pictures captured on job sites, and audio, image, and video recordings of visitors to our offices or events.
Professional or employment-related information, including the business or organization an individual represents, their title with that business or organization, and information relating to their role with the business or organization.
Inferences drawn from other personal information or data, including our predictions about interests and preferences and related service profile information.
Some of the personal information listed above may be considered sensitive personal information under relevant privacy laws. Depending on your state of residence, this may include social security number, driver’s license or other government identification information, precise geolocation data, account login credentials, and financial information. Additionally, some of this information may be considered “personal information” as defined in Cal. Civ. Code § 1798.80(e).
B. Energy Usage Information
We may collect information about your energy usage and related information as explained in “NOTICE OF ACCESSING, COLLECTING, STORING, USING AND DISCLOSING ENERGY USAGE INFORMATION” below.
C. Usage Information
We may collect information about your use of the Sites, including the date and time you visit the Sites, the content, areas, or pages of the Sites that you visit, the website or app from which you navigated to the Sites, the page or app you visit after leaving the Sites, the amount of time you spend viewing or using the Sites, the number of times you return to the Sites, as well as other click-stream or usage data, and whether you open, forward or click-through an email to the Sites. For legal compliance purposes, we may also capture or record your interactions with www.sunrun.com to confirm that your information was submitted to us through www.sunrun.com.
D. Communication Recordings
We may record calls and retain the content of text messages, chat transcripts, emails, or other written/electronic communications between you and us. By communicating with us, you consent to our recording and retention of communications.
E. De-identified Information
We may at times receive, or process personal information to create, de-identified data that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain de-identified data, we will maintain and use the data in de-identified form and not attempt to reidentify the data except as required or permitted by law.
2. HOW WE COLLECT INFORMATION
There are several ways that we may collect personal information, including information you provide us, information we receive from third parties, and information that we automatically collect.
A. From You
We may collect personal information directly from you when you provide it to us through the Sites or Services. This may include when you use our Sites or Services, register or create an online account with us, purchase products or services, request information from us, sign up for newsletters or our email list, enter into sweepstakes or other promotion, fill out a survey, request customer support, or otherwise communicate with or contact us (e.g., information you to Sunrun representatives or at retail store kiosks). We may also capture personal information when you contact us by phone, email, or through other means.
B. Information Collected from Other Sources
We may collect personal information from other sources as follows:
From our service providers: We may use third-party service providers to support our Sites and Services and perform other business processes on our behalf, including, without limitation, to perform credit checks and process credit card payments, and we may obtain personal information from these third parties.
From other third parties: We may collect personal information from other third-party sources, including data aggregators, public databases, analytics firms, marketing partners, other consumers, and government agencies.
C. Information Automatically Collected Via Cookies and Other Automated Tools
Whenever you interact with the Sites or Services, we may use a variety of technologies such as cookies, clear GIFs, web beacons, pixel tags, log files, flash cookies, and other automated technologies or third-party services, such as LeadID (collectively “cookies”) to collect personal information and Usage Data.
We and third parties use cookies to track and analyze your interaction with our Sites and Services, improve the experience of our Sites and Services, and conduct cross-context behavioral or targeted advertising (collectively “targeted advertising”). Certain features of our Sites may not work if you delete or disable cookies.
We use the following types of cookies:
Necessary: These cookies are essential to operate the Sites and provide you with services you have requested.
Marketing: These cookies allow us and third parties to learn more about you, including your use of our Sites and other websites, and advertise products or services that might interest you as further indicated below.
Analytics: These cookies help us and third parties understand how our Sites are working and who is visiting our Sites.
You can opt-out of certain types of cookies and other tracking tools by clicking the “Manage Cookies” link in the footer on our Sites.
D. Information You Provide Through Third-Party Websites or Services
If you connect or link to us through a third-party website or service, such as a social media account, we may automatically receive certain information about you based on your registration and privacy settings on those third-party websites or services. This may include, but may not be limited to, your name, username, demographic information, updated address or contact information, location, interests, and publicly-observed data, such as online activity. You should review the Privacy Policy of any website from which you reached our Sites to determine what information the operator collects and how it uses such information. We may retain information about you provided to us by other websites and will use it in accordance with this Privacy Policy. Such information may be associated with other Usage Data or Personal Information.
E. Targeted advertising
We may work with third-party advertisers, search providers, and ad networks (“Advertisers”) to learn more about you and show you ads or other content that we believe would be relevant to you. Advertisers may collect and use information about your use of our Sites or Services as well as other websites and services. These companies may use cookies to collect and use your information. We and/or Advertisers may also append other data to the data collected by Advertisers to create an interest profile of individual users. Our Privacy Policy does not cover any use by an Advertiser of information that they may collect from you. Advertisements may be shown via our Sites or on third-party websites.
If you want to minimize the amount of targeted advertising you receive, you can also visit the Digital Advertising Alliance (DAA) Consumer Choice Page or the Network Advertising Initiative Consumer Opt-Out Page. These websites allow you to opt-out of participating advertising networks. Opt-outs may be device and browser specific. Please note that opt-outs only apply to targeted advertising. You may still receive other types of online advertising. To opt out of the use of your mobile device ID for targeted advertising, please see http://www.aboutads.info/appchoices.
F. Information from Advertisements
If you arrive at our Sites via an advertisement (e.g., banner ad), we may collect information regarding the advertisement with which you interacted and your interactions (e.g., item clicked, date and time).
G. Social media features
The Sites may include social media features, such as Facebook, YouTube, Pinterest, LinkedIn, Instagram, and X widgets. These features may collect information about your IP address and the pages you visit on our Sites as well as other personal information. A cookie may be set to ensure that a feature properly functions. Your interactions with features are governed by the privacy policies of the companies that provide them and you should review the relevant privacy policies before interacting with these features.
H. Combination of Information
We may combine the personal information that we receive from and about you, including information you provide to us and information we automatically collect through the Sites and/or Services, as well as information collected from other online or offline sources, including from third-party sources and from your installed solar system.
3. HOW WE USE AND DISCLOSE YOUR INFORMATION
A. Generally
We may use personal information and sensitive personal information for business purposes, such as:
Provide and improve goods and services. To provide our Sites and/or Services and their contents to you. To analyze, improve, operate, and maintain the Sites, Services, and other systems, and to develop new products and services.
Communications. To provide you with information about our products and services or your account and to otherwise contact and communicate with you when necessary, including updates about our Sites and Services.
Energy programs. To plan, implement and evaluate energy-use and efficiency programs, such as demand response programs.
Account management and servicing. To allow you to take certain actions related to your account, including, but not limited to, tracking the progress of your solar system installation, making and managing payments, viewing billing history, calculating your post-solar savings, reviewing and monitoring your solar production, managing your account and contact information, and viewing and downloading your solar system agreement.
Billing and collections. To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
Marketing and analytics. To provide you and other users with customized content, targeted offers, and advertising on the Sites, or across other websites, mobile applications, social media or online services, or via direct mail, email, and/or telemarketing regarding offers, contests, events, news, programs, and other retail opportunities from us and/or selected third parties that we believe may be of interest to you. To determine the effectiveness of our marketing programs and for other analytics purposes.
Eligibility and pricing. To determine if consumers are eligible for certain products, services or offers and the pricing related to such offers;
Product research and development. To conduct research and analysis for maintaining, protecting, and developing services, increase and maintain the safety of our products and services, and prevent misuse;
Business operations. To evaluate, develop, and improve business operations, products and services offered, conduct audits, evaluate contractors and technicians, and perform business administration and other normal business activities;
Compliance. To comply with applicable legal requirements, industry standards, contractual obligations, our policies, and take actions that we deem necessary to preserve and enforce our rights and the rights of others;
Information security and fraud prevention. To operate information security and anti-fraud programs; and
Other purposes. As described to you at the point of collection, with your consent, or as otherwise required by applicable laws.
We do not and will not (without your consent) use precise geolocation data to draw inferences about (i) your past, present, or future physical or mental health status or (ii) any attempts you make to acquire or receive health services or supplies.
B. Disclosures You Authorize or Direct
The Sites offer many ways to find, enjoy, and share content. Your activity in connection with the Sites may include filling out surveys, reviewing and rating products or services, inquiring about or purchasing products or services, participation in online communities, "liking" or "sharing" our content to your social media accounts or pages or otherwise interacting with the Sites. Any information you may disclose through the Sites, in blogs, on message boards, in chat rooms, or on other public areas through the Sites or other third-party websites, applications, or services that these Sites may link to, becomes public information and you give us permission to use it in any manner and for any purpose, including in marketing and advertising communications. Please exercise caution when disclosing personal information in these public areas.
C. Service Providers
We may provide your personal information to other businesses, including affiliates, to provide services to us or on our behalf.
D. Third-Party Sales and Sharing
We may disclose personal information to third parties in situations that qualify as a “sale” or “sharing” (for targeted advertising purposes) under applicable privacy laws. In the previous 12 months, we sold or shared personal information as follows:
Affiliates: we disclosed identifiers, characteristics of protected classifications, commercial information, geolocation data, audio/visual/electrical and similar information, and inferences for marketing and general business purposes. These disclosures may qualify as a sale in certain states.
Nonprofits: we disclosed identifiers, characteristics of protected classifications, commercial information, non-precise geolocation data, and inferences for solar advocacy purposes. These disclosures may qualify as a sale in certain states.
Energy providers: we disclosed identifiers, characteristics of protected classifications, commercial information, internet or other electronic network activity information, geolocation data, audio/visual/electrical and similar information, and inferences in connection with demand response and similar programs. These disclosures may qualify as a sale in certain states.
Marketing partners: we disclosed identifiers, characteristics of protected classifications, commercial information, non-precise geolocation data, and inferences for marketing purposes. These disclosures may qualify as a sale in certain states.
Advertising, social media, and analytics companies: we disclosed identifiers, commercial information, internet or other electronic network activity information, non-precise geolocation data, and inferences for analytics and targeted advertising purposes.
Although we may sell or share Identifiers generally, we do not sell/share text message “opt-in” data. Your choice to opt into text message and similar marketing programs is not transferable to unaffiliated third parties.
E. Other third-party disclosures
We may occasionally disclose data, including each category of personal information, to third parties for other purposes such as:
Sale or Transfer of Business or Assets: We may sell or purchase assets during the normal course of our business. If another entity acquires us or any of our assets, information we have collected about you may be transferred to such entity. In addition, if any bankruptcy or reorganization proceeding is brought by or against us, such information may be considered an asset of ours and may be among the assets transferred.
Compliance with Laws: We may access and disclose your information to comply with any court order, law, or legal process, including responding to any subpoenas, judicial processes, or government or regulatory requests and investigations.
Enforcing Our Rights: We may disclose your information to enforce or apply our terms of service (see www.sunrun.com/terms-of-service) and other agreements, including for billing and collection purposes, or to protect the security of our Sites, servers, network systems, and databases.
Safety: We may access and disclose your information if we believe disclosure is necessary or appropriate to protect our rights, property, or safety, or the rights, property, or safety of our customers or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
Aggregate or Anonymous Non-Personal Information: We may disclose aggregate, anonymous, or de-identified non-personal information to third parties for their marketing or analytics uses.
Other: We may disclose your information as described to you at the point of collection.
F. Unsubscribing from our Marketing Communications
We provide our customers, as well as individuals referred by our customers, with the opportunity to opt out of having their information used for purposes not directly related to placement, processing, fulfillment, or delivery of a product or service. To opt out of marketing communications or to request to be added to our Do Not Call List or Do Not Mail List, you may use one of these convenient methods:
Email Offers: If you receive commercial email from us, you may unsubscribe at any time by following the instructions contained within the email, or by sending us an email at info@sunrun.com or writing to us at the addresses listed below. You should note that unsubscribing from our emails will not automatically unsubscribe you from emails sent by any third party, and you will need to separately unsubscribe from such third party's communication, if desired.
Direct Mail Offers: If you do not wish to be notified by postal mail regarding products, services, events, programs, and offers that we believe you may find of interest, send us an email or write to us at the addresses listed below.
Telemarketing: If you do not want to receive marketing phone calls from us, you may: (i) email us at info@sunrun.com with "Do Not Call" in the subject line; (ii) call customer care at 800-680-8554; (iii) ask to be placed on our Do Not Call list when you receive a call from us; or (iv) mail us at the address listed below. Once we place your name on our internal "Do Not Call" list, we will no longer call you for marketing purposes (unless you submit another inquiry or request another consultation/quote from us after your initial do-not-call request). We will honor your request as soon as reasonably practicable. You may still receive calls from third parties who are not calling on our behalf regarding their products and services, and you will need to separately request that those parties not call you.
If you receive marketing communications from one or more of our affiliates or subsidiaries, you must opt out individually from each.
G. Accessing and Updating Your Information
If you become a Sunrun customer, you can create an account with us. You can contact your sales representative or Sunrun Customer Care representative to request a correction to or deletion of certain information you provided in connection with your account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
4. NOTICE OF ACCESSING, COLLECTING, STORING, USING AND DISCLOSING ENERGY USAGE INFORMATION
To standardize some of the rules regarding customer privacy, the California Public Utilities Commission has issued “Rules Regarding Privacy and Security Protections for Energy Usage Data.” These rules allow us to disclose information about a customer (or a customer’s family, household, or residence) to a third party without the customer’s consent as is necessary for us to:
Provide or bill for electrical power services;
Provide services required by state or federal law or as specifically authorized by an order of the California Public Utilities Commission;
Plan, implement or evaluate energy management, demand response or energy efficiency programs under contract with us or with the California Public Utilities Commission. To opt-out of sharing your information for this purpose, please email us at info@sunrun.com.
Provide personal information pursuant to a lawful warrant or court or law enforcement order, after prior notice to you unless such notice is prohibited by law; and
Provide personal information to emergency responders in situations involving an imminent threat to life or property.
5. THIRD-PARTY CONTENT, LINKS, AND PLUG-INS
The Sites may contain links to third parties who partner with us. If you use those links, these third parties may collect information about you. We do not control third-party links or how these third parties collect and use your personal information. If you have any questions about their privacy practices, you should view their privacy policies and/or contact those third parties directly.
The Sites also may offer you the ability to interact with social plugins from social media sites, which may allow us and/or the social media site to receive data from or about you. In some cases, we may know that you clicked on a social plugin, such as a Twitter Follow button, or received other information from the social media sites. Similarly, if you have previously provided personal information to a third party operating a plug-in on the Sites, then such third party may recognize you on the Sites. Your choice to use social network plugins and provide your information to them is subject to each social media site's privacy policy, which may be different from ours, so please read these policies carefully to understand their policies and your options. As with linked sites, we have no control over the information that is collected, stored, or used by social network plugins, and are not responsible for the practices of such sites.
6. CHILDREN'S AND MINORS’ PRIVACY
Protecting minors’ privacy is important to us. We do not direct the Sites to, nor do we knowingly collect or sell any personal information from, individuals under the age of 18. If we learn that a minor provided personal information through our Sites or Services, we will use reasonable efforts to remove such information from our files. If you (or your dependent) are a minor and believe we collected information from you (or your minor dependent), please contact us directly at info@sunrun.com. Please note we may not be able to modify or delete your information in all circumstances.
7. THIRD PARTY CONTENT, LINKS, AND PLUG-INS
We have implemented measures designed to secure your information from accidental loss and from unauthorized access, use, alteration, and disclosure. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to ensure the integrity and security of our network and systems, we cannot guarantee our security measures.
We retain personal information only for as long as is reasonably necessary to fulfill the purpose for which it was collected. However, if necessary, we may retain personal information for longer periods of time, until set retention periods and deadlines expire, for instance where we are required to do so in accordance with legal, tax and accounting requirements set by a legislature, regulator or other government authority.
To determine the appropriate duration of the retention of personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting and other applicable obligations.
Therefore, we retain personal information for as long as the individual continues to use our Sites and/or Services for the purposes explained in our Privacy Policy. When an individual discontinues the use of our Site and Services, we will retain their personal information for as long as necessary to comply with our legal obligations, to resolve disputes and defend claims, as well as, for any additional purpose based on the choices they have made, such as to receive marketing communications. In particular, we will retain personal information supplied when joining our services, including complaints, claims and any other personal information supplied during the duration of an individual’s contract with us for the services until the statutory limitation periods have expired, when this is necessary for the establishment, exercise or defense of legal claims.
Once retention of the personal information is no longer necessary for the purposes outlined above, we will either delete or de-identify the personal information or, if this is not possible (for example, because personal information has been stored in backup archives), then we will securely store the personal information and isolate it from further processing until deletion or de-identification is possible.
8. CHANGES TO OUR PRIVACY POLICY
We will post any changes to our Privacy Policy here, as well as provide a notice of the update on applicable website and mobile app home pages. If we make material changes that allow us to use your personal information in a less restricted way, we will make reasonable efforts to notify you and take additional actions required by applicable law. Changes to our Privacy Policy are effective upon posting. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting the Sites to check for updates to the Privacy Policy. Your continued use of the Sites and/or Services after we change the Privacy Policy means you accept those changes.
9. ADDITIONAL STATE PRIVACY RIGHTS AND DISCLOSURES
A. Notice of Privacy Rights
If you are a resident of California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, or Puerto Rico, you may have additional rights to access and control your personal information. Exemptions may apply. Applicable privacy rights may include:
Right to Know | The right to request twice per 12-month period that we provide you (i) the categories or specific pieces of personal information we collected about you; (ii) the categories of sources from which your personal information was collected; (iii) the business or commercial purpose(s) for which we collected your personal information; and (iv) the categories of third parties with whom we sold, shared, or disclosed your personal information, including the categories of personal information sold, shared, or disclosed to each and the purposes for doing so. Residents of certain states may have the right to receive the names of third parties to whom we disclosed personal information. We will not provide specific pieces of personal information unless you expressly request them. To protect your personal information, you must provide the required information and/or documentation to verify your identity. We will process verified requests within 45 days, subject to any applicable exceptions and extensions permitted by law. We cannot provide access to specific pieces of personal information if the personal information is sensitive or creates a high risk of potential harm from disclosure to an unauthorized person. |
Right to Access and Portability | The right to obtain access to the personal information we collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. |
Right to Correct | The right to request that we correct inaccurate personal information we maintain about you. After you request to correct inaccurate personal information, we will provide instructions for you to provide us with optional documentation to support your request and we will consider it. We may decline to correct your personal information if a legal exemption applies such as if we determine that your request is fraudulent or abusive or if we determine, based on the totality of the circumstances, that your correction is more likely inaccurate than accurate. We may decide to delete your allegedly inaccurate personal information instead of correcting it. We will process verified requests within 45 days, subject to any applicable exceptions and extensions permitted by law. If you only wish to update your contact information or other personal information rather than disputing its accuracy, please call our toll-free number 855-478-6786 and one of our representatives will assist you. |
Right to Limit Our Use of Sensitive Personal Information | If you are a resident of California, you have the right to limit our use of your sensitive personal information to only the purposes listed in the CCPA regulations. If you are a resident of a state that requires consent to process sensitive personal information and you make a request to limit the use of your sensitive personal information, we will treat your request as a revocation of your consent and will delete your sensitive personal information subject to any exemptions available under applicable law. |
Right to Delete | The right to request that we delete any personal information we have collected about you. Exemptions may apply, for example if we need the information to complete a requested or reasonably anticipated transaction, prevent security incidents or fraud, enable internal uses that are reasonably aligned with your expectations, or comply with legal obligations. To prevent unauthorized individuals from making deletion requests, you must provide required information and/or documentation to verify your identity. We will process verified requests within 45 days, subject to any applicable exceptions and extensions permitted by law. We will retain a record of your deletion request as required by law. |
Right to Opt-Out of Sales or Sharing of Personal Information | The right to direct us not to sell or share (for targeted advertising) your personal information to third parties. We will process verified requests as soon as possible, subject to any applicable exceptions and extensions permitted by law. |
Right to Opt-Out of Automated Decision-Making / Profiling | The right to direct us not to use automated decision-making or profiling for certain purposes. |
Right to Appeal | You have the right to appeal our decision to deny, in full or in part, one or more of your privacy requests. We will process appeal requests within 45 days of receipt, subject to any applicable exemptions and extensions permitted by law. If we deny your appeal, we will provide you with a written explanation of the reasons for our decision. If you are not satisfied with our explanation for the denial of your appeal, you may have an additional right under certain laws to contact your state Attorney General to submit a complaint about the appeal results. In such case, we will provide you with instructions for doing so. |
B. Submitting Privacy Rights Requests
To submit a request to exercise one of the privacy rights identified above, please:
Navigate to our Privacy Preference Center and complete our online form; or
Call 1-855-478-6786.
Before processing certain types of requests, we may need to verify your identity and confirm you are a resident of a state that offers the requested right(s). In order to verify your identity, we will generally either require the successful authentication of your email, or the matching of sufficient information you provide us to the information we maintain about you in our systems. As a result, we require certain requests to include first and last name, phone number, email, street address, city, state, and zip code. We may at times need to request additional personal information from you, taking into consideration our relationship with you and the sensitivity of your request.
In certain circumstances, we may decline a privacy rights request, particularly where you are not a resident of one of the eligible states or where we are unable to verify your identity.
To opt-out of third-party data collections from our Sites that qualify as sales or relate to targeted advertising, you must also (1) select your cookie preferences using the link in the footer on our Sites or (2) use your browser or a browser extension to send us a Global Privacy Control (GPC) signal.
C. Submitting Authorized Agent Requests
You are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided, the type of request, and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.
D. Non-Discrimination Notice
We will not discriminate against any consumer for exercising their privacy rights under law or this Privacy Policy. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.
E. California “Shine the Light” and Do Not Track Disclosures
The California “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we disclose certain categories of personal information (as defined in the Shine the Light law) to third parties for their direct marketing purposes. To opt out of this type of disclosure, please email us at info@sunrun.com.
Do Not Track is a web browser privacy preference that causes the web browser to broadcast a signal to websites requesting that a user’s activity not be tracked. Although our Sites may not respond to “do not track” signals, they recognize and honor GPC signals to the extent described above.
F. Additional Disclosures For Cayman Islands Customers
Data from certain Sunrun customers may be subject to the Cayman Islands Data Protection Law, 2017 (the "DPL"). Click here for additional details on our use of data subject to the DPL.
G. Additional Disclosures For Puerto Rico Customers
The following additional disclosures apply only to residents of Puerto Rico who interact with us.
Our Privacy Policy shall be construed to be consistent with the principles of the DataGuard Energy Data Privacy Program Voluntary Code of Conduct (available at https://www.smartgrid.gov/files/documents/DataGuard_VCC_Concepts_and_Principles_2015_01_08_FINAL.pdf). To the extent any provision of this policy is finally determined by the Puerto Rico Energy Bureau, or by a court of competent jurisdiction, to be not consistent with the DataGuard Energy Data Privacy Program Voluntary Code of Conduct as applied to a Puerto Rico consumer, the DataGuard Energy Data Privacy Program Voluntary Code of Conduct will be deemed to apply and the inconsistent terms of this Policy shall be treated as void as applied to Puerto Rico consumers.
We do not sell (as contemplated under Puerto Rico law) the private or personal customer information of Puerto Rico customers to any third parties. In addition, we will not disclose to or share with affiliates, subsidiaries, or any other third party, private or proprietary Puerto Rico customer information to market services or product offerings to a Puerto Rico retail electric customer who does not already subscribe to that service or product.
Notwithstanding the foregoing, we may share private or personal Puerto Rico customer information with our Demand Response (DR) vendors, verifiers, and evaluators, provided that such data sharing is limited to that which is necessary for effectively operating our DR program or programs or the verification or evaluation of such programs. We may disclose private or proprietary Puerto Rico customer information to a third party with which we have a contract where such contract is directly related to conduct of our business and the services being provided, provided that the contract prohibits the third party from further disclosing or selling any private or proprietary Puerto Rico customer information obtained from us to a party that is not us and not a party to the contract with us. We may also collect and release Puerto Rico retail electric customer information in aggregate form if the aggregated information allows no specific customer to be identified
10. CONTACT INFORMATION
To ask questions or comment about this privacy policy and our privacy practices, contact us:
Mail: Sunrun Inc., Attn - Marketing (Privacy), 600 California Street, Floor 18, San Francisco, CA 94108
Email to: info@sunrun.com
Toll-free number: 855-478-6786