Privacy Policy

Daydream Energy Pty Ltd (ABN 11 700 900 483) operates the Sundown program. This policy explains what personal information we collect, why, who we share it with, and how you control it.

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). We do this as a matter of policy regardless of whether the Act currently binds a business of our size.

What we collect

Information you give us

• Your name, email address, phone number and the property address.
• Your electricity account details, including your NMI, your retailer and your plan.
• A copy or photo of an electricity bill, and what's on it: tariff, usage, charges, account number.
• Details of your solar and battery system, and your preferences and feedback.
• Your answer to the life support eligibility question — see below, because we handle this differently from everything else.

Information we collect from your systems, with your authorisation

• Meter and interval data — your home's imports and exports in 30-minute intervals, historical and ongoing.
• Battery and inverter telemetry — state of charge, charge and discharge power, solar generation, household load, temperature, health, faults, settings and schedules.
• The access tokens that let us connect to your manufacturer's platform. Where a manufacturer offers no way to authorise us as an application, the username and password for your own account with them instead, because replaying them is the only way that connection survives. See Security for how those are held.

Dispatch and settlement records

For every dispatch we keep, per interval: the instruction sent and its timestamp, your system's acknowledgement, the first observed state change, your state of charge, your metered energy, the baseline we calculated and the adjustment applied, your delivered capacity, and any opt-out with its timestamp and reason. We keep these so that you and we can both reconstruct exactly what happened, and so settlement can be checked.

Alongside these we record ambient temperature at the Laverton weather station and Victorian wholesale prices for each interval. Those aren't personal information, but they're part of the record your settlement is built from.

Information we collect automatically

Log data when you use our app or website: device and browser type, IP address, pages viewed, actions taken.

The life support question

We ask whether anyone at the address relies on life support equipment, because a premises with life support equipment can't take part in Sundown. The question comes early — after your address, before you upload a bill or connect a battery — so that nobody finds out they're ineligible at the end. Neither answer is pre-selected and you can't skip it.

We record two things: your answer, and the date you gave it. We do not record what equipment is involved, which occupant it's for, or any related health information. We don't ask, and if you tell us anyway we won't write it down.

If you answer yes, enrolment stops there and doesn't resume. We keep the answer and the date, which is how we can show the check was made rather than skipped, and nothing further. There's no appeal step, and nobody here can override the answer. If you tapped the wrong one, you can clear it yourself from the screen you land on and answer again; that erases the answer and the date together.

We treat the answer as sensitive, and use it for nothing except deciding eligibility.

How we collect it

Directly from you, during signup and afterwards. From your battery manufacturer's cloud platform, using the authorisation you grant in their app. And from your electricity retailer or distributor, either under a written authority naming us as your agent, or through the Consumer Data Right, where a separate and more specific consent applies.

Interval data about a household is capable of revealing a lot — when people are home, when they're away, when they're asleep. We treat it accordingly.

Why we use it

• To run the program: to decide what your battery should do, send instructions, and confirm they worked.
• To calculate your baseline, settle each dispatch and pay you.
• To show you your own data, your tariff analysis and your results.
• To find and fix problems, including problems with your meter or equipment.
• To learn from your system's behaviour even where we don't dispatch it. Some homes are enrolled on standby and monitored without being dispatched; their data is used for the same purposes as everyone else's.
• To produce the aggregate evidence pack that is the point of the pilot — per-site results, dispatch history and fleet performance, provided to Powercor and the flexibility marketplace. This is provided as aggregate and de-identified data. It does not name you and does not identify your household.
• To improve our forecasting and scheduling, using de-identified or aggregated data.
• To contact you about the program. Marketing only if you've opted in, with an unsubscribe on every message.
• To meet our legal obligations.

We do not sell your personal information and we do not disclose it to anyone for their own marketing.

Who we share it with

• Service providers who help us operate: cloud hosting, database and analytics tooling, email and messaging, and our payment provider. Bound to use it only for the services they provide us.
• Your battery manufacturer's platform, necessarily, since that's how instructions reach your battery.
• A third-party document-reading service, when you upload a bill. See below: this one may process it overseas.
• Your retailer or distributor, where you've authorised us to act as your agent to request data or resolve a metering issue.
• Powercor and the flexibility marketplace, as aggregate, de-identified results.
• Anyone you ask us to, in writing.
• Where the law requires it, or to prevent a serious threat to life, health or safety.

Where it's stored

We host in Australia, in Amazon Web Services' Sydney region. Two things can leave the country, and we'd rather name them than let "some providers operate overseas" cover them.

A bill you upload may be read overseas. We send the document to a third-party service that reads the details off it — your NMI above all, because a NMI typed wrong fails at the distributor days later. Depending on which provider reads it, that may happen outside Australia. We send the document and nothing else: no account record of ours travels with it. The copy we keep stays in Australia.

Your battery data is held by your manufacturer. Manufacturer clouds are typically hosted outside Australia. By authorising us to connect to your battery, you accept that your battery data is held on that manufacturer's platform under their terms, which we don't control.

Some of our other service providers also operate overseas.

How long we keep it

You can ask us to delete your data earlier and we will, except where we're required to keep it or where it's already part of a settled payment record. De-identified and aggregated data may be kept indefinitely; it can't be linked back to you.

Security

Credentials and access tokens are encrypted at rest and never displayed back to you or to our staff. Disconnecting a battery destroys the stored credential outright — deleted, not marked inactive — along with the access token beside it. Access to production data is limited to people who need it, logged, and protected by multi-factor authentication. Every battery instruction records who or what issued it.

No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner, as the notifiable data breaches scheme requires.

Your control

• See your data. Ask and we'll give you a copy, generally within 30 days, free.
• Correct it. Tell us and we'll fix it.
• Withdraw authorisations. Any of the three, at any time.
• Delete it. We'll delete what we're not required to keep.

Cookies

Our website and app use cookies to keep you signed in and to understand how the product is used. You can block them, though parts of the app won't work.

Complaints

Email hello@daydream.energy with "Privacy" in the subject. We'll acknowledge within 2 business days and respond within 30. If you're not satisfied, complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

Changes

Updated versions are posted here with a new effective date. If a change materially affects how we use your information, we'll email you before it takes effect.

Contact: Daydream Energy Pty Ltd, hello@daydream.energy