Privacy Policy
Greylock Power Inc (“Greylock,” “we,” “us”) helps homeowners access financing for home energy improvements, including the Massachusetts Mass Save® HEAT Loan program. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to our website (https://www.greylockpower.com), our application portal, and our services.
1. Information We Collect
Information you provide. When you start an application (typically with your contractor), we collect: your name, phone number, email, and property address; details about your project and contractor's quote; Home Energy Assessment information; utility account information; income information you enter; your requested loan amount; and, where relevant to lender matching, credit union membership or eligibility information. We also collect your authorizations and consents, including your authorization for a soft credit inquiry.
Information from service providers, with your authorization.
- Credit information. With your individual authorization, we obtain a soft-pull credit report about you. A soft inquiry does not affect your credit score. We use it only to match you with a suitable lender. We do not share your credit report, score, or credit details with lenders. Any lender you are matched with will request your separate authorization to obtain its own credit report.
- Income and account verification. If you connect your accounts through Plaid, Plaid provides us verification information under its own terms and privacy policy.
Information we do not collect. We do not collect your Social Security number or your income documents (such as tax returns or pay stubs). If your lender needs these, it collects them from you directly, or they are verified through secure, tokenized connections that do not leave a copy with us.
Automatically collected information. When you use our site, we collect standard technical information (IP address, device and browser type, pages viewed) through cookies or similar technologies.
2. How We Use Your Information
We use your information to: process and package your financing application; obtain your soft credit inquiry and apply lender matching criteria; deliver your application to a lending partner; communicate with you, your contractor, and your prospective lender about your application; comply with legal obligations, including record retention; protect the security of our services; and improve how our service works.
We do not sell your personal information, and we do not share it with third parties for their own marketing. To be clear about how we make money: lenders & sometimes installers pay us for completed loan originations. We are paid for the service of preparing and delivering your application at your direction, not for your data. Once you are matched, your lender's own use of your information is governed by its privacy policy.
3. How We Share Your Information
We share information only as needed to provide the service:
- Your lending partner. We deliver your application information to the lender you are matched with, along with your authorization for that lender to pull its own credit report. If you raise a complaint concerning your lender or your loan, we share it with that lender so it can be addressed. We do not send lenders your soft-pull credit report or score.
- Your contractor. Your contractor can see the status of applications they initiated (such as whether an application is submitted, matched, or funded). Contractors do not receive your credit information or sensitive identifiers.
- Service providers. We use vetted providers to operate our service - database and hosting infrastructure, credit-inquiry services, verification services, and business email - under contracts that require them to protect your information. Our current providers include Supabase, Vercel, iSoftpull, Plaid, and Google Workspace.
- Legal requirements. We may disclose information when required by law, regulation, or legal process, or to protect rights, safety, or the integrity of our services.
- Business transfers. If Greylock is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy's protections.
4. How We Protect Your Information
We maintain a written information security program that includes encryption of your data in transit and at rest, strict access controls, multi-factor authentication for our systems, and vendor security oversight. Sensitive information (eg credit data) is never sent by email or text and moves only through secure channels.
5. How Long We Keep Information
We keep information only as long as needed. Credit-inquiry data is deleted from our production systems within 30 days after a final decision on your application (or after an application is abandoned). Application and decision records are retained for approximately 25 months, consistent with federal credit regulations, and then deleted.
6. Your Choices and Rights
- Access and correction. You may contact us to review or correct the information we hold about you.
- Communications. You may opt out of non-essential communications at any time. We will still send messages necessary to process your application.
- Massachusetts residents. You have rights under Massachusetts law regarding the security of your personal information; our program is maintained in accordance with 201 CMR 17.00.
- To exercise any choice or ask a question, contact us at privacy@greylockpower.com
7. Children
Our services are intended for adults. We do not knowingly collect information from anyone under 18.
8. Third-Party Sites
Our site may link to contractor, lender, program, or service-provider sites (including Plaid). Their privacy practices are governed by their own policies.
9. Changes to This Policy
We may update this policy from time to time. We will post the updated version with a new effective date, and, for material changes, provide additional notice through the service.
10. Contact Us
Greylock Power Inc
privacy@greylockpower.com · 413.281.6756