Privacy
Policy

Effective Date: May 11, 2026  ·  Last Updated: May 11, 2026

HOP Sensors LLC · Portland, Oregon, USA · info@hopsensorsllc.com

This Privacy Policy applies to all users of the HOP Sensors platform, website (hopsensorsllc.com), and related services (collectively, the "Services"). By accessing or using our Services, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Services.

1. Who We Are

HOP Sensors LLC ("HOP Sensors," "we," "our," or "us") is an Oregon limited liability company providing cloud-native SCADA data observability software and services to electric utility operators and other industrial customers. Our principal place of business is in Portland, Oregon, USA.

For questions about this Policy, contact us at: info@hopsensorsllc.com or +1-503-862-3083.

2. Information We Collect

2.1 Operational Telemetry Data

Our core service involves ingesting, processing, and displaying SCADA telemetry data transmitted from our customers' industrial control systems and substations. This data may include:

• Electrical measurements: voltage (kV), current (A), power (MW), frequency (Hz), load values
• Equipment state data: breaker positions, feeder states (OPEN/CLOSED), alarm flags
• Event and outage records: timestamps, event types, severity classifications, outage identifiers
• Derived analytics: anomaly scores, baseline statistics, Z-scores, threshold breach events
• Geographic substation location data (latitude/longitude) provided by the customer

Ownership: All operational telemetry data transmitted by a customer to the HOP Sensors platform remains the exclusive property of that customer. HOP Sensors processes this data solely to provide the contracted Services and does not use operational data for any purpose other than service delivery, unless expressly authorized in writing by the customer.

2.2 Account and Contact Information

When you register for the Services, submit a demo request, or contact us, we may collect:

• Name, job title, and organization name
• Work email address and phone number
• Organization type and size (number of substations, service territory)
• Communications you send to us (emails, form submissions)

2.3 Usage and Technical Data

We automatically collect certain technical information when you use our Services:

• IP address, browser type, operating system
• Pages visited, features accessed, time spent on pages
• Referring URLs and exit pages
• Error logs and diagnostic data
• Session identifiers and authentication tokens (not passwords)

2.4 Cookies and Similar Technologies

We use essential cookies required for platform operation (authentication, session management) and, with your consent, analytics cookies to understand how the Services are used. We do not use advertising or cross-site tracking cookies. You may disable non-essential cookies in your browser settings without affecting core functionality.

3. How We Use Information

We use the information we collect for the following purposes:

• Service delivery: Processing and displaying telemetry data, running anomaly detection models, generating alerts and reports
• Account management: User authentication, access control, billing, and support
• Service improvement: Analyzing aggregate, de-identified usage patterns to improve platform performance and features
• Communications: Responding to inquiries, sending service notifications, and (with your consent) marketing communications
• Legal compliance: Meeting our obligations under applicable federal, state, and local laws and regulations
• Security: Detecting, preventing, and responding to fraud, abuse, and security incidents

We do not sell personal information to third parties. We do not use operational telemetry data for any purpose other than providing the contracted Services.

4. Legal Basis for Processing (GDPR / Applicable Law)

For customers or users subject to the EU General Data Protection Regulation (GDPR) or similar frameworks, our legal bases for processing personal data include:

• Contract performance: Processing necessary to deliver the Services under our agreement with you
• Legitimate interests: Service security, fraud prevention, and aggregate analytics
• Legal obligation: Compliance with applicable law
• Consent: Marketing communications and non-essential analytics, where required

5. Regulatory Compliance

HOP Sensors is committed to compliance with all applicable federal and state data protection regulations. Our platform and data practices are designed to support customers' compliance with:

• NERC CIP Standards (Critical Infrastructure Protection) — our platform is designed with CIP-compliant access control, audit logging, and data handling in mind
• Oregon Consumer Privacy Act (OCPA) — Oregon residents have rights described in Section 9 below
• California Consumer Privacy Act (CCPA) / CPRA — California residents have rights described in Section 9 below
• GDPR — EU/EEA data subjects have rights described in Section 9 below
• FERC and state PUC regulations — we cooperate with regulatory requirements applicable to electric utility customers
• FISMA / FedRAMP considerations — where applicable to federal agency customers

This list is not exhaustive. We monitor regulatory developments and update our practices accordingly. Customers operating under specific regulatory regimes should contact us to discuss applicable data processing agreements.

6. Data Sharing and Disclosure

We do not sell, rent, or trade personal information. We may share information only in the following circumstances:

• Service providers: Trusted vendors who process data on our behalf (cloud infrastructure, monitoring tools) under confidentiality agreements and data processing agreements that restrict their use of data to service delivery only
• Legal requirements: When required by law, court order, or governmental authority, or when necessary to protect our rights, property, or safety, or that of our users or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to the acquirer assuming the obligations of this Policy
• With your consent: For any other purpose with your explicit prior consent

7. Data Security

We implement industry-standard technical and organizational security measures to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access control (RBAC) with principle of least privilege
• Multi-factor authentication for platform access
• Regular security assessments and penetration testing
• Audit logging of all data access and administrative actions
• Incident response procedures with mandatory breach notification
• SOC 2 Type II certification (in progress)

No security system is impenetrable. In the event of a data breach that affects your information, we will notify you as required by applicable law.

8. Data Retention

We retain data for the following periods, unless a longer retention period is required by law or agreed in a customer contract:

• Operational telemetry data: Retained for the duration of the customer contract plus 90 days, then securely deleted unless the customer requests otherwise
• Account information: Retained for the duration of the account plus 3 years after closure
• Security and audit logs: Retained for 2 years
• Marketing communications: Until you opt out, then promptly removed

Customers may request earlier deletion of their operational data at any time, subject to legal hold obligations.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal exceptions
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request that we restrict processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests
• Opt-out of sale: We do not sell personal information, but you may contact us to confirm
• Non-discrimination: We will not discriminate against you for exercising these rights

To exercise any of these rights, contact us at info@hopsensorsllc.com. We will respond within 30 days (or as required by applicable law). We may request verification of your identity before processing certain requests.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will delete it promptly. If you believe we have inadvertently collected such information, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. International Data Transfers

Our primary infrastructure is located in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States. We take appropriate safeguards to ensure that such transfers comply with applicable data protection laws, including executing Standard Contractual Clauses where required.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. We will notify you of material changes by posting the updated Policy on our website with a revised effective date, and by email if you have provided a contact address. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

HOP Sensors LLC
Email: info@hopsensorsllc.com
Phone: +1-503-862-3083
Portland, Oregon, USA

This Privacy Policy was drafted to provide comprehensive protections consistent with applicable federal and state law as of its effective date. It is intended for informational purposes and does not constitute legal advice. Customers with specific regulatory compliance requirements should consult qualified legal counsel.