Privacy Policy

Daydream Energy Pty Ltd (ABN 11 700 900 483) operates the Sundown program. This policy explains what personal information we collect, why, who we share it with, and how you control it.

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). We do this as a matter of policy regardless of whether the Act currently binds a business of our size.

What we collect

Information you give us

• Your name, email address, phone number and the property address.
• Your electricity account details, including your NMI, your retailer and your plan.
• A copy or photo of an electricity bill, and what's on it: tariff, usage, charges, account number.
• Details of your solar and battery system, and your preferences and feedback.
• Your answer to the life support eligibility question — see below, because we handle this differently from everything else.

Information we collect from your systems, with your authorisation

• Meter and interval data — your home's imports and exports in 30-minute intervals, historical and ongoing.
• Battery and inverter telemetry — state of charge, charge and discharge power, solar generation, household load, temperature, health, faults, settings and schedules.
• The access tokens that let us connect to your manufacturer's platform.

Dispatch and settlement records

For every dispatch we keep, per interval: the instruction sent and its timestamp, your system's acknowledgement, the first observed state change, your state of charge, your metered energy, the baseline we calculated and the adjustment applied, your delivered capacity, and any opt-out with its timestamp and reason. We keep these so that you and we can both reconstruct exactly what happened, and so settlement can be checked.

Alongside these we record ambient temperature at the Laverton weather station and Victorian wholesale prices for each interval. Those aren't personal information, but they're part of the record your settlement is built from.

Information we collect automatically

Log data when you use our app or website: device and browser type, IP address, pages viewed, actions taken.

The life support question

We ask whether anyone at the address relies on life support equipment, because a premises with life support equipment can't take part in Sundown. You can't skip the question.

We record only three things: that a declaration was made, the date, and how it reached us. We do not record what equipment is involved, which occupant it's for, or any related health information. We don't ask, and if you tell us anyway we won't write it down. If you answer yes, we keep the flag and the fact that enrolment stopped, and nothing further.

We treat this flag as sensitive. Access to it is restricted to the people who operate the dispatch block list, and every access is logged.

How we collect it

Directly from you, during signup and afterwards. From your battery manufacturer's cloud platform, using the authorisation you grant in their app. And from your electricity retailer or distributor, either under a written authority naming us as your agent, or through the Consumer Data Right, where a separate and more specific consent applies.

Interval data about a household is capable of revealing a lot — when people are home, when they're away, when they're asleep. We treat it accordingly.

Why we use it

• To run the program: to decide what your battery should do, send instructions, and confirm they worked.
• To calculate your baseline, settle each dispatch and pay you.
• To show you your own data, your tariff analysis and your results.
• To find and fix problems, including problems with your meter or equipment.
• To learn from your system's behaviour even where we don't dispatch it. Some homes are enrolled on standby and monitored without being dispatched; their data is used for the same purposes as everyone else's.
• To produce the aggregate evidence pack that is the point of the pilot — per-site results, dispatch history and fleet performance, provided to Powercor and the flexibility marketplace. This is provided as aggregate and de-identified data. It does not name you and does not identify your household.
• To improve our forecasting and scheduling, using de-identified or aggregated data.
• To contact you about the program. Marketing only if you've opted in, with an unsubscribe on every message.
• To meet our legal obligations.

We do not sell your personal information and we do not disclose it to anyone for their own marketing.

Who we share it with

• Service providers who help us operate: cloud hosting, database and analytics tooling, email and messaging, and our payment provider. Bound to use it only for the services they provide us.
• Your battery manufacturer's platform, necessarily, since that's how instructions reach your battery.
• Your retailer or distributor, where you've authorised us to act as your agent to request data or resolve a metering issue.
• Powercor and the flexibility marketplace, as aggregate, de-identified results.
• Anyone you ask us to, in writing.
• Where the law requires it, or to prevent a serious threat to life, health or safety.

Where it's stored

We host in Australia, in Amazon Web Services' Sydney region. Some service providers, and the battery manufacturer platforms we connect to, operate overseas — manufacturer clouds in particular are typically hosted outside Australia. By authorising us to connect to your battery, you accept that your battery data is held on that manufacturer's platform under their terms, which we don't control.

How long we keep it

You can ask us to delete your data earlier and we will, except where we're required to keep it or where it's already part of a settled payment record. De-identified and aggregated data may be kept indefinitely; it can't be linked back to you.

Security

Credentials and access tokens are encrypted at rest and never displayed back to you or to our staff. Access to production data is limited to people who need it, logged, and protected by multi-factor authentication. Every battery instruction records who or what issued it.

No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner, as the notifiable data breaches scheme requires.

Your control

• See your data. Ask and we'll give you a copy, generally within 30 days, free.
• Correct it. Tell us and we'll fix it.
• Withdraw authorisations. Any of the three, at any time.
• Delete it. We'll delete what we're not required to keep.

Cookies

Our website and app use cookies to keep you signed in and to understand how the product is used. You can block them, though parts of the app won't work.

Complaints

Email hello@daydream.energy with "Privacy" in the subject. We'll acknowledge within 2 business days and respond within 30. If you're not satisfied, complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

Changes

Updated versions are posted here with a new effective date. If a change materially affects how we use your information, we'll email you before it takes effect.

Contact: Daydream Energy Pty Ltd, hello@daydream.energy