This Privacy Policy applies to all websites, applications, products and services (including paid and free services) provided to you by Dyness Digital Energy Technology Co., Ltd. (referred to in this policy as “we”, “us” or “our”). You may view, download and print the full content of this policy at any time through the public channels of our official website. This Privacy Policy forms part of the Terms of Use.

I. Scope of Information Collection

1.1 Non-personal Information

We may collect anonymised information that cannot be directly associated with a specific natural person. We use this information for aggregated analysis to improve our products and services. It may include:

• Browser type and version;
• Anonymised IP address;
• Pages accessed; and
• Device model and operating system.

1.2 Personal Information

We collect the following personal information when you voluntarily provide it or when collection is necessary to provide our services:

II. Rules for Data Use

Core purposes: We use personal information to deliver services, perform contracts and improve our products internally. We will not share your sensitive personally identifiable information with a third party without your explicit written consent.

Disclosure required for specific purposes: Relevant data may be accessed or disclosed in the following circumstances:

• Where disclosure is required by law, regulation or judicial process;
• Where data sharing is necessary to process a payment; and
• Where data sharing is required to fulfil an order.

Cookie category management: We distinguish between the following two categories of cookies. You can choose whether to authorise non-essential cookies.

III. Special Compliance Statement on Legitimate Interests

Under Article 6(1)(f) of the GDPR, we conduct certain data processing on the basis of legitimate interests. Our assessment is set out below:

1. Our legitimate interests. Ensuring the login security of Dyness accounts; identifying malicious logins and account theft; troubleshooting system crashes and device offline faults; improving Cloud Computing Platform products and operation and maintenance services; and preventing cyberattacks, false registrations and other violations.

2. Assessment of privacy rights. We collect only the minimum data necessary for these purposes. We do not create detailed user profiles on the basis of legitimate interests or conduct indiscriminate targeted advertising tracking. We consider that these processing activities do not disproportionately affect users’ fundamental privacy rights and interests.

3. Exercising the right to object. You may submit a written objection to our official contact email address at any time, specifying the processing activity you wish to stop. We will verify your request and suspend the relevant processing within seven working days of receiving it. This will not restrict your use of basic cloud service functions associated with your account.

IV. Your Data Rights

4.1 Rights Under Applicable Law

Your rights depend on the jurisdiction that applies to you. If you are a user in the European Union, you may have rights under the GDPR and the EU Data Act, including:

• Access: You may request a complete copy of your personal data and the historical power station operation data that we store.
• Rectification: You may request correction of inaccurate personal information and device binding parameters stored on the platform.
• Erasure: You may submit a deletion request to the designated email address. We will delete or anonymise information associated with your account within 15 working days.
• Data portability: You may export your personal data and power station operation data in a structured, machine-readable format and transfer them to compatible energy service platforms.
• Withdrawal of consent: You may withdraw consent to a specific processing activity at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

4.2 Regional Supplementary Information

The following information describes additional rules and rights that may apply in your jurisdiction.

4.2.1 EU Residents (GDPR)

• Governing law: Laws and regulations relating to the GDPR.
• Legal bases: Performance of a contract, user consent, legal obligations and legitimate interests.
• Supervisory authority: You may lodge a complaint with the data protection authority of the member state where you are located.
• Data storage: By default, data is stored on servers located in the European Union. For measures addressing unlawful access by foreign governments, please refer to Chapter 2 of the Dyness Service Agreement.
• Cookies: Non-essential cookies are not pre-selected on the cookie banner. Please refer to Section II of this policy for the cookie categories.

4.2.2 Chinese Residents

• Governing law: Personal Information Protection Law of the People’s Republic of China.
• Additional rights: You may request a written explanation of our personal information processing rules.
• Cross-border transfers: Outbound transfers of personal information are subject to applicable compliance procedures, including security assessments and standard contracts.

4.2.3 Australian Residents (APPs)

For individuals in Australia, we handle personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs) and the Notifiable Data Breaches (NDB) scheme.

Collection and notification. We collect only personal information that is reasonably necessary for one or more of our functions or activities. We collect sensitive information only where permitted by law, including where you have consented and the information is reasonably necessary for our functions or activities, unless an exception applies. We collect personal information by lawful and fair means and, where reasonable and practicable, directly from you. At or before collection, or as soon as practicable afterwards, we take reasonable steps to notify you of the matters required by APP 5, including our identity and contact details, the purposes of collection, usual disclosures, any consequences of not providing the information, access and correction rights, complaint processes, and likely overseas disclosures and countries where practicable.

Unsolicited information. If we receive unsolicited personal information, we determine whether we could have collected it under APP 3. If not, and it is not contained in a Commonwealth record, we destroy or de-identify it as soon as practicable where lawful and reasonable to do so.

Anonymity and pseudonymity. Where lawful and practicable, you may deal with us anonymously or using a pseudonym.

Use and disclosure. We generally use or disclose personal information only for the primary purpose for which it was collected. We may use or disclose it for a secondary purpose where permitted by APP 6 or another applicable provision of the Privacy Act, including where you have consented or an exception applies.

Direct marketing. We use or disclose personal information for direct marketing only where permitted by APP 7 and other applicable laws. Where required, direct marketing communications include a simple way to opt out. You may ask us to stop sending direct marketing communications, and we will give effect to your request within a reasonable period and free of charge.

Government-related identifiers. We do not adopt a government-related identifier as our own identifier, or use or disclose one, except as permitted by APP 9.

Cross-border disclosure. We may disclose personal information to recipients outside Australia. Before doing so, where APP 8.1 applies, we take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information. We may remain accountable under the Privacy Act for certain acts or practices of an overseas recipient. Countries in which overseas recipients are likely to be located include the People’s Republic of China and [insert other country or countries, if applicable].

Data quality and security. We take reasonable steps to ensure that personal information we collect is accurate, up to date and complete, and that information we use or disclose is accurate, up to date, complete and relevant to the purpose. We also take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure.

Retention and destruction. If we no longer need personal information for any purpose for which it may be used or disclosed under the APPs, it is not contained in a Commonwealth record, and we are not required by law or a court or tribunal order to retain it, we take reasonable steps to destroy or de-identify it.

Access and correction. You may request access to personal information we hold about you and ask us to correct it. Subject to the Privacy Act, we respond within a reasonable period, generally within 30 days. If we refuse access or correction, we provide written reasons and information about available complaint mechanisms, except to the extent that doing so would be unreasonable. We do not charge for making an access or correction request. Any charge for giving access will not be excessive, and we do not charge for correction requests.

Privacy complaints. You may complain to us if you believe we have breached the APPs or the Privacy Act. We investigate and respond within a reasonable period. If you are dissatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC). You can contact the OAIC by telephone on 1300 363 992 or through the contact details on its website.

Notifiable Data Breaches. If we suspect an eligible data breach, we carry out a reasonable and expeditious assessment and take all reasonable steps to complete it within 30 days after becoming aware of the grounds for suspicion. If we have reasonable grounds to believe an eligible data breach has occurred, we prepare a statement for the OAIC and notify affected or at-risk individuals as soon as practicable, subject to the Privacy Act.

Automated decisions. From 10 December 2026, if we arrange for a computer program to use personal information to make, or do something substantially and directly related to making, a decision that could reasonably be expected to significantly affect an individual’s rights or interests, we will include the information required by APP 1 in this Privacy Policy, including the kinds of decisions and personal information involved.

V. Data Security and Retention

Security measures: We use technical, administrative and physical measures to protect user data against leakage and tampering. If a data security incident may harm your rights and interests, we will notify the relevant regulatory authority and affected individuals within the time and in the manner required by applicable law. For Australian individuals, the NDB requirements described in Section 4.2.3 apply.

Retention period: We retain personal data only for the period necessary to fulfil the purposes of our services. After you cancel your account and terminate all service relationships, we will delete or de-identify and anonymise relevant data within three years following account cancellation.

Your security responsibilities: Please keep your account password and two-factor authentication information secure to reduce the risk of unauthorised access.

VI. Contact Channels

If you have questions about this Privacy Policy or how your personal information has been handled, or you wish to exercise your data rights, please contact our Data Protection Officer (DPO):

Dyness Digital Energy DPO

Email: DPO@dyness-tech.com

Address: [insert address]

Telephone: [insert telephone number]

The DPO will first consider your complaint to determine whether simple or immediate steps can resolve it. We will generally respond to your complaint within [one week].

If your complaint requires more detailed consideration or investigation, we will acknowledge receipt within one week and endeavour to complete our investigation promptly. We may ask you for further information about your complaint and the outcome you seek. We will then typically gather relevant facts, review relevant documents and speak with the individuals involved.

In most cases, we will verify your application and provide feedback within 30 calendar days, as required by applicable law. If the matter is more complex or our investigation may take longer, we will let you know.

Dyness Australia Website Terms of Use

Last updated: 8 September 2026

These Terms of Use apply to all websites, applications, products and services provided to you by Dyness Digital Energy Technology Co., Ltd. (referred to as “we”, “us” or “our”), including the official corporate website, user monitoring platform, developer platform, community websites, supporting apps and API services.

I. User Account Rules

When registering, you must provide true, accurate and complete personal or business information as the identity credentials for services such as remote monitoring of energy storage systems, intelligent energy dispatch and energy consumption data analysis.

You must keep your account login details, password and two-factor authentication information secure. Service operations, device instructions and orders submitted through your account will be treated as actions initiated by you, and you will bear the corresponding rights and responsibilities.

If you notice an unusual login or an unauthorised operation on your account, please contact our customer service team immediately. We will assist you in restricting risky account activity and investigating the issue.

Your account is for your or your business’s exclusive use. Without our written permission, you may not lend, rent or sell account access to a third party. If you do, we reserve the right to suspend your access to our services.

II. Equipment Operation and Support Rules

You are responsible for equipment installation, operation and maintenance and must ensure that equipment is kept in a suitable operating environment.

We may perform remote diagnostics and system upgrades to maintain the operational stability of solar and energy storage equipment. Upgrades may temporarily interrupt services. We will notify you in advance through website announcements and the contact details you provided.

If a device remains offline and unresponsive for an extended period, the system may automatically activate a safety shutdown mechanism to support safe grid operation.

III. Intellectual Property

We own the intellectual property rights in the system code, functional interfaces, energy algorithm models, operation manuals and promotional content on our platform.

We grant you a limited right to use that content for personal and internal business purposes. Without our written authorisation, you may not copy, distribute or redevelop it for commercial use.

You retain intellectual property rights in proprietary content you upload to the platform, such as drawings of your power station projects and customised energy consumption data. We may use that content to provide you with tailored energy optimisation solutions only with your explicit authorisation.

IV. Rights and Responsibilities

Use of the internet involves certain risks. To the fullest extent permitted by law, we will not be liable to compensate you for temporary service interruptions caused by events beyond our control, including grid scheduling disruptions, natural disasters and telecommunications network failures. We will, however, coordinate resources promptly to help restore normal equipment operation.

Intelligent energy scheduling suggestions are recommendations generated from real-time operating data. You may decide whether to implement them based on your actual energy needs. We do not directly assume responsibility for changes in electricity costs or power generation resulting from your independent choice of operating strategy.

V. Updates and Dispute Resolution

We may amend these Terms of Use in response to changes in our services or regulatory requirements. We will publish the revised version on our official website 15 working days in advance.

For material changes, we will display a pop-up notice requesting your confirmation before you continue using the service. Continued use will be treated as acceptance of the updated terms.

If you breach these Terms of Use and do not remedy the breach after receiving a reminder, we reserve the right to terminate the provision of services to you.

Disputes will be addressed in accordance with applicable local jurisdiction rules and cross-border business requirements.