Privacy Policy

Our Privacy Policy applies to our websites and services, including www.hydrodigital.com and any other website, mobile application, or other online service that links to this Policy (collectively, our “Service”). You can read the full version of the Privacy Policy below.

This Privacy Policy supplements and is incorporated into our Terms of Access. In the event of any conflict between this Privacy Policy and our Terms of Access, the Terms of Access shall govern. Defined terms used in this Privacy Policy have the same meaning as in our Terms of Access unless otherwise specified.

Questions about our Privacy Policy? Contact us at legal@hydrodigital.com

Executive Summary: HydroDigital operates as a critical infrastructure technology company providing Real-Time Decision Support Systems (RT-DSS) for water and wastewater management. This privacy policy addresses the unique requirements of handling sensitive infrastructure data while maintaining compliance with applicable privacy regulations and industry best practices.

By accessing or using our Service, you signify that you have read, understood and agree to our collection, storage, use and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

Information We Collect

Operational Infrastructure Data

We collect real-time sensor readings from water and wastewater networks including flow rates, water levels, and pressure readings. Our systems also gather equipment operational status from pumps, valves, gates, and monitoring devices. Environmental monitoring data encompasses weather patterns, precipitation, and storm event information. We maintain network topology and hydraulic system performance metrics along with historical operational data for system calibration and predictive modeling.

Client System Data

Our services require utility infrastructure specifications and network configurations. We integrate SCADA system data and operational parameters while tracking asset performance metrics and maintenance records. Geographic and location data tied to utility service areas are collected along with system vulnerability assessments and operational capabilities.

Business and Contact Information

We maintain client utility contact information and authorized personnel details. Service agreement and implementation data are stored along with technical support communications and documentation. Training and consultation records are kept as well as partnership and collaboration communications.

Digital Platform Data

Our RT-DSS platform collects user authentication and access logs. System usage analytics and performance metrics are gathered along with digital twin model configurations and simulation parameters. API access patterns and integration data are monitored along with machine learning model inputs and algorithmic processing results.

If you choose not to provide personal information, we may not be able to provide you with requested products, services or information.

Cross-Context Information: We may link or combine your activities and information collected from you on our websites and mobile apps with your in-person interactions, data from our field services, and information we receive from third parties, as well as information we collect automatically through tracking technologies. This allows us to provide you with a personalized experience regardless of how you interact with us whether online, through mobile applications, or via direct consultation services.

Information Automatically Collected Through Cookies and Other Tracking Technology

When you use our Service, visit our facilities, read our emails, or otherwise engage with us through a computer or mobile device, we and our third party partners automatically collect information you provide to us and information about how you access and use the Service and information about the device you use to access the Service.

We use this information to enhance and personalize your user experience, to monitor and improve our websites and services, and for other internal purposes.

We typically collect this information through a variety of tracking technologies, including cookies, web beacons, embedded scripts, mobile SDKs, location-identifying technologies, and similar technology (collectively, “tracking technologies”) and we may use third-party partners or technologies to collect this information.

Information we collect automatically about you may be combined with other personal information we collect directly.

Types of Information Automatically Collected

We and our third party partners use tracking technologies to automatically collect usage and device information, such as:

Service Usage Information: Information about how you access the Service, for example, the site from which you came and the site to which you are going when you leave our website, how frequently you access the Service, when and whether you open emails or click the links contained in emails, whether you access the Service from multiple devices, and other actions you take on the Service.

Interaction Data: Information about how you use the Service, for example, the pages you visit, the links you click, the features you use, your location when you access or interact with our Service, and other similar actions. We may also use third-party tools to collect information about how you use the Service and may record your navigation patterns and interaction behavior on the Service.

Device Information: Information about the computer, tablet, smartphone or other device you use, such as your IP address, browser type, Internet service provider, platform type, device type/model/manufacturer, operating system, date and time stamp, a unique ID that allows us to uniquely identify your browser, mobile device or your account, and other such information.

Analytics Information: We may collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Service and to understand more about the demographics and behaviors of our users.

Use of Automatically Collected Information

All of the information collected automatically through these tools allows us to improve your customer experience. We may use this information to enhance and personalize your user experience, to monitor and improve our Services, and to improve the effectiveness of our Service, offers, communications features, and customer service functionality. We, or the third party partners we use, may use the data collected through tracking technologies to remember information so that you will not have to re-enter it during your visit or the next time you visit the site, provide custom, personalized content and information including targeted content, identify and contact you across multiple devices, provide and monitor the effectiveness of our Service, perform analytics and detect usage patterns on our Service, diagnose or fix technology problems, detect or prevent fraud or other harmful activities, and otherwise to plan for and enhance our service.

Your Control Over Tracking Technologies

If you would prefer not to accept cookies, most browsers will allow you to change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it, disable existing cookies, or set your browser to automatically reject cookies.

Blocking or deleting cookies may negatively impact your experience using the Service, as some features and services on our Service may not work properly. Depending on your mobile device and operating system, you may not be able to delete or block all tracking technologies.

You may set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you viewed or engaged with our emails.

How We Use Your Information

Primary Service Delivery

We provide real-time decision support and network optimization services through our advanced technology platform. Our systems operate digital twin models for predictive water system management and deliver AI analytics with transparent, explainable results. These services enable preventive control of Combined Sewer Overflows (CSOs) and Sanitary Sewer Overflows (SSOs) while supporting utility change management and risk reduction initiatives.

System Improvement and Development

We continuously enhance our machine learning algorithms and predictive modeling capabilities to better serve our clients. This includes calibrating and optimizing digital twin representations of water networks, developing new RT-DSS features and functionality, and improving system integration with existing utility infrastructure. We conduct ongoing performance analysis and operational optimization to ensure maximum effectiveness.

Compliance and Safety

Our data processing supports regulatory reporting requirements for water utility operations and emergency response capabilities. We maintain critical infrastructure protection standards and ensure cybersecurity compliance for water system operations. Our systems facilitate regulatory inspections and audits while supporting incident management procedures.

All Personal Information: We will use the personal information we collect to operate, maintain and provide to you the features and functionality of the Service (which at times may include the use of automated tools leveraging artificial intelligence such as machine learning and predictive analytics), to communicate with you via online platforms, phone, email, or other methods, to monitor and improve our Service and business, and to help us develop new products and services including through training and refining automated tools leveraging AI.

Legal Basis for Processing

Contractual Necessity

We process data as necessary for service delivery under utility consulting agreements and implementation of RT-DSS and digital twin technologies. This includes our technical support and system maintenance obligations as well as training and change management services provided to our clients.

Legitimate Interests

Our legitimate business interests include critical infrastructure protection and cybersecurity enhancement for water systems. We process data for system performance optimization and operational efficiency improvements, research and development of water management technologies, and business relationship management with utility partners.

Data Sharing and Third Parties

Essential Service Providers

We work with cloud infrastructure partners for secure data processing and storage. Sensor technology vendors and other field service partners assist with sensor installation and maintenance, and integration partners help with SCADA system integration and compatibility.

Regulatory and Legal Requirements

We may share data as required with water utility regulatory bodies and oversight agencies, federal and state environmental protection agencies, and critical infrastructure protection authorities. Law enforcement agencies may also require and receive data pursuant to lawful requests and emergency situations.

Third-Party Safeguards

All third parties processing HydroDigital data must execute comprehensive data processing agreements and maintain equivalent security and privacy protections. They must comply with applicable critical infrastructure protection requirements, implement appropriate technical and organizational safeguards, and provide regular security and compliance attestations.

We may also share information with others in an aggregated or otherwise anonymized form that does not reasonably identify you directly.

Data Security and Protection

Data Storage and Transfer

Your information collected through our Service may be stored and processed in the United States or any other country in which HydroDigital or its affiliates or service providers maintain facilities. If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction.

Keeping Your Information Safe

Security of your information is very important to us, and we have put in place safeguards to preserve the integrity and security of information we collect and that we share with our service providers. However, no security system is impenetrable and we cannot guarantee the security of our systems 100%. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.

Technical Safeguards

We implement end-to-end encryption for all data transmission and storage along with multi-factor authentication and role-based access restrictions. Our network security includes segregated networks between IT and operational technology (OT) systems. Continuous security monitoring and threat detection systems operate alongside secure data backup and disaster recovery procedures.

Data Retention and Deletion

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. While we strive to maintain data for the periods specified below, we make no guarantee regarding the preservation of any content or data, and retention periods may vary based on operational needs, legal requirements, and technical limitations:

A) Real-time monitoring data: Typically 3 years, subject to operational requirements

B) Historical performance data: Typically 7 years, subject to regulatory compliance needs

C) Incident and emergency data: Typically 10 years, subject to legal requirements

D) Business and contract data: Duration of service agreement plus up to 7 years

Note: Actual retention may be shorter or longer based on legal obligations, regulatory requirements, or operational necessities.

International Data Transfers

Transfer Safeguards

Technical measures including encryption and access controls protect international transfers. Organizational measures include staff training and incident response procedures. Regular assessments of recipient country data protection laws occur alongside suspension mechanisms for transfers in case of inadequate protection.

Minors and Children’s Data Privacy

Our Service is not intended for individuals under 18 years of age, consistent with our Terms of Access. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use our Service or provide any information to us. If we learn that we have collected personal information from someone under 18, we will delete that information as quickly as possible. If you believe we may have collected information from someone under 18, please contact us at legal@hydrodigital.com.

Third Party Links

The Service may contain links to and from third party websites of our business partners, technology providers, and professional networks and our users may post links to third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. We strongly recommend that you read their privacy policies and terms and conditions of use to understand how they collect, use, and share information. We are not responsible for the privacy practices or the content on the websites of third party sites.

Your Rights and Choices

Profile and Data Sharing Settings

You may update your profile information, such as your contact details, organizational information, and system preferences, and may change some of your data sharing preferences through your account settings or by contacting us directly.

How to Control Your Communication Preferences

You can stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests. You may not opt out of service-related communications such as account verification, transactional communications, changes or updates to features of the Service, technical and security notices. If you receive SMS text messages, you may opt-out at any time by replying STOP or following the instructions in the text message communication.

Modifying or Deleting Your Information

If you wish to exercise your ARCO rights (Access, Rectification, Cancellation, or Objection) regarding your data or deleting your information, or if you want to remove your name or comments from our website or publicly displayed content, you can contact us at legal@hydrodigital.com. We may not be able to modify or delete your information in all circumstances, particularly where retention is required for regulatory compliance or critical infrastructure protection.

Geolocation Control

You may control location tracking by adjusting your location services settings on your mobile device. We may continue to approximate your location based on your IP address when you access the Service through a computer or device.

Access Rights

You have the right to access personal information we maintain about you and receive copies of your data in a structured, machine-readable format. You also have the right to information about data processing activities and purposes.

Correction and Deletion Rights

You may correct inaccurate or incomplete personal information and request deletion of personal information subject to regulatory retention requirements. You can also restrict processing of personal information in certain circumstances.

Choice and Consent

You have the right to withdraw consent for non-essential data processing activities and opt-out of marketing communications and secondary uses. You may object to automated decision-making and profiling where applicable.

Data Portability

You have the right to receive your data in a portable format and transfer data to another service provider where technically feasible. We provide assistance with data migration during service transitions.

Third Party Data Collection and Interest Based Advertising

We may engage in limited interest-based advertising and permit third party online advertising networks, social media companies, and other third party services to collect information about your use of our websites and applications over time so that they may display relevant content on our Service, on other websites, apps, or services you may use, and on other devices you may use. We may also use third party services to collect information about your browser or device, or your online activity on our Service so that we may enhance or personalize your experience, better understand how users interact with our Service, evaluate the success of our communications, and similar activities.

Interest Based Advertising

We may participate in limited interest-based advertising and use third party advertising companies to serve you relevant content based on your interaction with our Service. The information used for interest-based advertising is typically collected through cookies or similar tracking technologies, which recognize the device you are using and collect information including browser type, time and date you visited the site, and other information about how you engage with our Service. We may share a common account identifier such as an email address with our third party partners to help identify you across devices where you have given consent for such sharing.

Your Choices and Control Over Advertising

Cookies: Most browsers allow you to adjust your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it, disable existing cookies, or set your browser to automatically reject cookies. Blocking or deleting cookies may negatively impact your experience using the Service.

Social Media Features

Our Service may include social media features, such as LinkedIn, or other widgets. These social media companies may recognize you and collect information about your visit to our Service, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.

Contact Information

Information Security Manager

Email: legal@hydrodigital.com

Privacy Inquiries

For privacy-related questions, requests, or concerns, contact us at legal@hydrodigital.com with “Privacy Inquiry” in the subject line. Response time is 30 days for complex requests and 5 business days for simple inquiries.

Customer Service: If you have general questions about our services, you may also contact our customer service team through the contact information provided on our website.

For legal matters related to this Privacy Policy, contact legal@hydrodigital.com. Physical Address: HydroDigital, LLC, Attn: Legal Dept. PO Box 1243, South Bend, IN 46624

Governing Law

This Privacy Policy and our privacy practices are governed by and construed in accordance with the laws of Indiana, without regard to conflicts of laws principles, consistent with our Terms of Access. Where specific state privacy laws apply to residents of particular states, those provisions shall supplement but not override this governing law provision.

Policy Updates

This privacy policy may be updated periodically to reflect changes in our services, applicable laws, or industry best practices. We will update the ‘last modified’ date at the top of this page when we post changes to this Policy. If you object to any changes, you may close your account or discontinue use of our Service. Continuing to use our Service after we publish changes to this Privacy Policy means that you are consenting to the changes.

We will notify affected clients of material changes through email notifications to authorized contacts, prominent website notices, service agreement amendments where applicable, and direct communication for significant policy changes.

Effective Date: August 11, 2025

Last Updated: August 11, 2025

Version: 1.0