Privacy Policy at Waterplan
Last updated: July 7, 2026
At Climateplan Inc. (d/b/a Waterplan) (“Waterplan,” “we,” “us,” or “our”), we prioritize your privacy and the security of your personal information. This Privacy Policy describes how we collect, use, store, share, and protect personal information when you visit our websites, use our software-as-a-service products, or otherwise interact with us (collectively, the “Services”). It also describes the choices and rights you have with respect to your personal information.
We are committed to complying with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”), the UK GDPR, and U.S. state privacy laws such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”). Where required, we provide additional, jurisdiction-specific disclosures in the sections below.
We, and our third-party partners, use cookies, pixels, software development kits (“SDKs”), and similar technologies to collect, record, and share information about your interactions with our website. Except for cookies and similar technologies that are strictly necessary to operate all or part of the website, these cookies and similar technologies are turned off until you choose to turn them on. You provide your consent, and can change or withdraw it at any time, through our cookie preferences manager (accessible by clicking the toggle icon in the lower left of every page). See “Cookies, Pixels and Tracking Technologies” (Section 5) and “Consent to Recording and Monitoring” (Section 6) below for details.
1. Scope and Application of This Privacy Policy
This Privacy Policy applies to personal information we process about visitors to our websites, prospective customers, users of our Services, and other individuals who interact with us in connection with our business. This Privacy Policy is not a contract and does not create any legal rights or obligations not otherwise provided by law.
This Privacy Policy does not address our privacy practices relating to Waterplan job applicants, employees and other employment-related individuals, nor data that is not subject to applicable data protection laws (such as anonymized or deidentified information in certain jurisdictions).
Where Waterplan processes personal information on behalf of a business customer as a processor or service provider, that processing is governed by our agreement (and any Data Processing Agreement) with that customer rather than by this Privacy Policy. As a result, we recommend referring to the privacy policy of the business customer with which you have a relationship for information on how they engage processors, like us, to process personal information on their behalf. In addition, we are generally not permitted to respond to individual requests relating to personal information we process on behalf of our business customers, so we recommend directing any requests to the relevant business customer.
This Privacy Policy also does not apply to third-party websites, products, or services that we do not control, including third-party websites, products, or services we may link to or that may link to our Services. To learn about these third parties’ personal data practices, please visit their respective privacy policies.
2. Personal Information We Collect
The categories of personal information we collect depend on how you interact with us and our Services. For example, you may provide us your personal information directly when you submit a request for information, register for an account, use our Services, or otherwise contact us or interact with us.
We also collect personal information automatically when you interact with the Services, and from other sources and third parties.
2.1 Information you provide
This may include your name, business email address, telephone number, job title and business role, employer, account credentials, billing and payment details, and the contents of communications, support requests, or forms you submit to us.
2.2 Information collected automatically
When you use our websites or Services, we and our third-party partners may automatically collect device and usage information such as your IP address, device and browser type, operating system, referring/exit pages, pages and content viewed, links and buttons clicked, search terms, approximate location (derived from IP address), and the dates and times of your interactions. This information is collected through cookies, pixels, SDKs, server logs, and similar technologies, as further described in Section 5.
2.3 Information from third parties and other sources
We may receive similar information about you as described above from our business customers, service providers, advertising and analytics partners, and publicly available sources, consistent with applicable law.
2.4 Categories of personal information (CCPA)
In the preceding twelve (12) months, we may have collected the following statutory categories of personal information.
Category (CCPA)
Examples
Identifiers
Name, email, phone, IP address, online and device identifiers, account ID
Customer records
Contact details, billing/payment information
Commercial information
Products/services purchased or considered, subscription and transaction history
Internet/network activity
Browsing and interaction data, analytics, interactions with ads and emails
Geolocation data
Approximate location derived from IP address
Professional/employment information
Job title, employer, business role
Inferences
Preferences and characteristics drawn from the above
Sensitive personal information
Account credentials
We only use or disclose sensitive personal information where reasonably necessary and proportionate for the purposes of providing products and performing Services you have requested, verifying and improving the Services we provide, detecting security incidents, fraud, and other illegal actions, ensuring the physical safety of natural persons, performing services on behalf of our business customers, or short-term transient use. We only collect and process sensitive personal information without the purpose of inferring characteristics about the relevant individual, and we do not sell sensitive personal information or process or otherwise share sensitive personal information for the purpose of targeted advertising.
We do not collect personal information from individuals we know to be under 16 (see Section 14).
3. How We Use Personal Information
We use personal information to:
Deliver, operate, maintain, and personalize our Services.
Improve user experience through internal analytics and product development.
Respond to customer inquiries and provide support.
Ensure the security, integrity, and performance of our systems, and detect and prevent fraud or misuse.
Communicate with you, including for marketing where permitted (see Section 10).
Deliver, measure, and improve advertising, where you have consented.
Create aggregated or de-identified information that cannot reasonably be used to identify you, which information we may use for purposes outside the scope of this Privacy Policy.
Comply with legal obligations and enforce our agreements.
We do not collect sensitive personal information unless explicitly necessary and, where required, with your consent.
4. How We Share and Disclose Personal Information
We share personal information with the following categories of recipients:
Service providers and processors who perform functions on our behalf, such as cloud hosting, customer support, payment processing, and analytics.
Advertising and analytics partners, where you have consented, who may use cookies, pixels, and similar technologies to collect information about your interactions with our website.
Professional advisors and authorities, where necessary to comply with law, respond to legal process, or protect our rights, property, or safety, or those of others.
Corporate transactions, in connection with or as an asset in a merger, acquisition, financing, or sale of assets, as well as in connection with the proceedings or disposition of our assets in the unlikely event of our bankruptcy, receivership, or insolvency.
Examples of our service providers and partners include Amazon Web Services (AWS) for data hosting, GitLab for source code management, Cloudflare for content delivery and security, Google (reCAPTCHA for bot and spam protection, and Google Analytics for website analytics), HubSpot for contact-form submissions, customer relationship management, and, where enabled, website analytics and marketing (which may set cookies and track your interactions across our website), and Goldcast for hosting webinars and virtual events.
We do not sell your personal information for money. To the extent our use of advertising or analytics technologies constitutes a “sale” or “sharing” of personal information for cross-context behavioral advertising under the CCPA or similar laws, we do so only with your consent and you may opt out at any time as described in Section 7.
5. Cookies, Pixels and Tracking Technologies
We, and our third-party partners, use cookies, pixels, and other technologies (“cookies”) to collect, record, and share information you provide as well as information about your interactions with our site for ad targeting, analytics, personalization, and site functionality purposes.
You can choose which categories to allow on our website using our cookie preferences manager. Except for cookies and similar technologies that are strictly necessary to operate all or part of the website, all cookies are off by default and are only activated if and when you turn them on. You can change your settings and withdraw your consent at any time by clicking the toggle icon in the lower-left portion of any page on the website. We honor your selections and, where applicable, recognized opt-out preference signals (see Section 7).
We use the following categories of cookies and similar technologies:
Necessary
These cookies and other technologies are necessary to enable the basic functions of this website, such as page navigation and access to secure areas of the website. Without these cookies and technologies, the website cannot function properly and would not be able to provide the services you are seeking. As a result, you cannot turn this category off.
Functional
These cookies and other technologies allow the website to implement optional features and functionality that are not strictly necessary for the website to function, such as remembering your preferred language or the region that you are in.
Analytics
These cookies and other technologies collect information about how you use the website and how the website performs.
Advertising
These cookies and other technologies are used to track your presence and interactions on the website and to deliver ads that are more relevant to you and your interests based on this information. They are also used to limit the number of times you see an advertisement, and to measure the effectiveness of online advertising campaigns.
Some of these technologies are operated by third parties who may collect, receive, record, and use information about your interactions with our website directly, including across websites and over time, in accordance with their own privacy policies. By turning on a category and clicking to accept, you consent to the use of these technologies and to such collection, recording, and sharing by us and our partners.
You may also be able to control cookies through your browser settings and may choose to disable them, although this may affect the performance and availability of some features of our website. In addition, you may be able to further exercise control over the advertisements that you see by leveraging one or more targeted advertising programs. For example, the Digital Advertising Alliance provides a browser-based targeted advertising opt-out feature here and the Network Advertising Initiative provides additional instructions here as it relates to participating third-party advertising partners. We are not responsible for the effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs.
Parts of our website are protected by Google reCAPTCHA to detect and prevent bots, spam, and abuse. Your use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service. In addition, Google Analytics allows us to better understand how our customers interact with our Services. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google’s website here: www.google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Add-On here.
6. Consent to Recording and Monitoring of Interactions
When enabled and consented to, our website and our service providers may use technologies (including analytics, session-analysis, chat, and advertising tools) that automatically collect and record your interactions and communications with our website — including pages viewed, clicks, scrolling, form entries, and messages you send through chat or contact forms.
You acknowledge and agree that, where you have provided consent through our cookie preferences manager, these interactions and communications may be intercepted, recorded, stored, and processed by Waterplan and by our third-party partners acting on our behalf, and that such partners may receive this information directly. By consenting and continuing to use the website with these technologies enabled, you consent to such recording, monitoring, interception, and disclosure to the extent described in this Privacy Policy and permitted by applicable law. If you do not consent, do not enable the relevant categories of cookies and similar technologies, and you may continue to use the necessary functions of the website.
7. U.S. State Privacy Rights (Including California / CCPA)
Depending on your state of residence, you may have the following rights with respect to your personal information, subject to certain exceptions:
Right to know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we disclose it. You may have the right to obtain this personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
Right to delete personal information we have collected from you.
Right to correct inaccurate personal information.
Right to opt out of the “sale” of personal information or “sharing” of personal information for targeted/cross-context behavioral advertising.
Right to limit the use and disclosure of sensitive personal information.
Right to non-discrimination for exercising your privacy rights.
7.1 Do Not Sell or Share My Personal Information
You can exercise your right to opt out of any “sale” of your personal information or “sharing” of your personal information for cross-context behavioral advertising by setting your preferences in our cookie preferences manager (accessible by clicking the toggle icon in the lower-left of any page) and turning the Advertising category off. We do not otherwise engage in personal information “sales” or “sharing” of personal information for cross-context behavioral advertising purposes.
7.2 Opt-out preference signals (Global Privacy Control)
If you are visiting our website with the Global Privacy Control enabled, any cookies and similar technologies that constitute “sales” or are used for cross-context behavioral advertising should already be turned off automatically in our cookie preference manager.
7.3 How to exercise your rights and authorized agents
To exercise the rights above, contact us at security@waterplan.com or through our online contact form. Where required by law, we will verify your request and may require information to confirm your identity. You may use an authorized agent to submit a request on your behalf, in which case we may require proof of authorization. If we deny your request, you may appeal by contacting us at the same address.
8. EU, UK and Swiss Privacy Rights (GDPR / UK GDPR)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data (personal information):
Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You may request correction of inaccurate or incomplete data.
Right to Erasure: Under certain conditions, you can request deletion of your personal data.
Right to Restrict Processing: You may request restrictions on how your data is processed in specific situations.
Right to Data Portability: You can request the transfer of your data to another organization.
Right to Object: You can object to certain types of data processing, such as for direct marketing purposes.
Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Right to Lodge a Complaint: You may lodge a complaint with your local supervisory authority.
To exercise any of these rights, please contact us at security@waterplan.com. We may require proof of identity to process your request and will respond within the timeframe required by applicable data protection laws.
The data controller is Climateplan Inc. (d/b/a Waterplan), 2193 Fillmore St., San Francisco, CA 94115, USA. If you have questions about the legal basis for processing or our international transfer safeguards, contact us at the address above.
9. Legal Grounds for Processing
Where the GDPR or UK GDPR applies, we process your personal data based on the following legal grounds:
Consent: For specific processing activities, such as marketing communications and non-essential cookies, when you have given explicit consent.
Contractual Necessity: To provide services you have requested, including managing your account or processing payments.
Legitimate Interests: For purposes such as improving our services, security monitoring, and fraud prevention, provided these interests do not override your rights.
Legal Obligation: When processing is necessary to comply with applicable laws and regulations.
10. Marketing and Communications
With your consent, Waterplan may use your personal information to send you marketing communications, such as newsletters or updates about new features. You can choose to stop receiving marketing emails by following the unsubscribe instructions included in our emails or by contacting us directly at security@waterplan.com. By providing your contact information and consenting where required, you agree that we may contact you electronically; this consent, or its withdrawal, does not affect transactional or service messages necessary to provide the Services.
11. Data Retention
Waterplan retains personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The retention period may vary depending on the nature of the data and any regulatory or legal requirements. Once the data is no longer required, it will be securely deleted or anonymized to protect your privacy.
12. Data Security
We have implemented a variety of physical, technical and organizational measures that are designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures may include where appropriate:
Encryption of data both in transit and at rest using industry-standard protocols.
Regular security audits and vulnerability assessments.
Monitoring of systems for suspicious activity.
Multi-factor authentication (MFA) for access to critical systems.
We also conduct regular reviews of our security practices designed to ensure ongoing compliance with regulatory standards. However, despite these measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. International Data Transfers
We operate globally, and your personal information may be processed outside of your home country, including in the United States. We take steps designed to ensure that all international data transfers comply with applicable legal requirements and provide adequate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum) where applicable.
14. Children’s Personal Information
Waterplan’s Services are not directed to or intended for individuals under the age of 16. We do not intend to or knowingly collect or solicit personal information from children under the age of 16. If an individual is under the age of 16, they should not use our Services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 13 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove that personal information from our systems. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information promptly.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in response to legal requirements. Any updates will be posted on this page with a revised “Last updated” date, and we encourage you to review this Policy periodically. Significant changes will be communicated through prominent notices or other means. All changes will be effective from the date of publication unless otherwise provided.
16. Contact Information
For any questions, concerns, or to exercise your rights regarding your personal information, please contact us at: security@waterplan.com, through our online contact form, or by mail at Climateplan Inc. (d/b/a Waterplan), 2193 Fillmore St., San Francisco, CA 94115, USA.
Address: 2193 Fillmore St., San Francisco, CA 94115
