Privacy Policy

Upgrade Rebates (“we,” “us” or “our”) provides nationwide, 50-state rebate-discovery and matching information through www.upgraderebates.com and related forms and communications. Where operationally available, we also help connect interested adults with home-service providers and other businesses. Our current home-service referral operations focus on Texas and Oklahoma; the availability of a state guide does not mean a referral or installation service is available in every state. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information, and the choices available to you.

Contact us about privacy, submit requests, or withdraw optional permission by emailing [email protected]. You may use “Privacy Request” or “Do Not Sell or Share” as the subject; no special wording is required.

1. Scope and important choices

This policy covers information we process through our website, advertisements, inquiry forms, communications and related services. An independent business receiving your information has its own responsibilities and privacy notice. Its involvement does not remove our responsibilities for our collection or disclosure.

Requesting information, agreeing to website terms, authorizing optional data sales, consenting to marketing calls or texts, and authorizing a credit inquiry are separate decisions. Reading this policy or continuing to use our website does not, by itself, give every one of those permissions.

If we offer an optional partner-offer program, it may include products or services unrelated to energy rebates. Before you choose a particular program, its separate notice identifies the recipients, the information involved and the permitted purposes. Describing a possible program here does not mean that it is active or that any earlier no-sale promise has been withdrawn. You may decline optional unrelated offers and still use the public rebate guides and request information available without that permission. We will explain when a particular requested service necessarily requires information to be sent to a provider.

2. Information we collect

We collect information you provide, information arising from your interactions, and information received from authorized providers or other lawful sources. The information involved depends on your request and choices. We seek information relevant to the disclosed purpose rather than requiring every field for every inquiry.

Digital identifiers and pseudonymous information may be personal information even if they do not display your name. We do not treat them as anonymous merely because a direct identifier has been removed.

If a call or other interaction will be recorded or transcribed, we provide the notice and obtain the permission required for that interaction. Please avoid including Social Security numbers, account credentials, medical details or other unnecessary sensitive information in ordinary messages or inquiry fields.

3. Information from other sources

Sources can include service partners, lead providers, advertising platforms, publicly available records and people authorized to act for you. Before using externally supplied information, we evaluate the permitted purpose, relevant notices and permissions, and applicable restrictions. Receipt from a vendor does not automatically authorize unrestricted marketing or resale.

We may combine information when reasonably necessary for a disclosed, compatible purpose, such as identifying duplicate inquiries or honoring an opt-out across systems. We do not use combining or enrichment to bypass your choices. Information you provide about another person must be appropriate for the request; your submission does not automatically authorize that person's credit inquiry, marketing consent or optional data sale.

4. How we use information

We use relevant information to show state and utility program information, respond to inquiries, assess and route service requests where available, arrange requested appointments, communicate about those requests, maintain accurate records, improve and secure our services, measure performance, administer permissions and privacy requests, resolve disputes, and meet legal obligations. A nationwide guide is not a promise of nationwide contractor or installation fulfillment.

We also use information for marketing, targeted advertising or optional partner offers when permitted by law and your choices. An incompatible new purpose requires any additional notice and permission required by law. A general statement that information might be useful later does not authorize every future use.

Our intended matching process concerns service interests and provider suitability. It does not authorize unrestricted profiling based on sensitive characteristics or use of lead data to make consequential decisions about credit, employment, insurance or housing. Before introducing an activity subject to additional automated-decisionmaking requirements, we will provide the required information and applicable choices. Separately engaged providers remain responsible for their own decisions and disclosures.

5. Requested referrals and operational disclosures

Where a requested referral is available, we disclose relevant information to providers needed to carry it out. The collection or referral notice explains the contemplated disclosure. We may receive compensation for a referral or lead only where that arrangement is consistent with applicable law, the notice and choices governing that information, and the prior no-sale commitments described in Section 7. Where an exchange is treated as a sale under applicable law, the corresponding disclosures and rights apply.

We use operational vendors for functions such as hosting, customer records, communications, appointment scheduling, security, analytics and professional services. Vendors processing information on our instructions are subject to appropriate contractual limits and safeguards. An independent buyer using information for its own marketing is identified and handled as such, rather than being described solely as our service provider.

We may also disclose information where reasonably necessary to comply with law or valid legal process, protect rights or safety, investigate fraud, or establish or defend legal claims. We evaluate requests and disclose information appropriate to the applicable purpose.

6. Optional sale and disclosure for other offers

Only if a new optional offer program is actually made available and you separately opt in under a specific new notice may we disclose or sell the specified newly collected information to the businesses identified in that choice, subject to applicable law and Section 7. We may receive money or other value. Depending on the disclosed program, multiple identified businesses may receive the information, and the offers may concern products or services unrelated to energy rebates or home improvements. This section does not state that such a program is currently operating or that an earlier no-sale promise has expired.

The separate notice identifies the businesses receiving your information, their industries, the fields to be disclosed, and the permitted uses. Eligible information may include contact details and relevant service or interest information, but only to the extent identified in your choice. These businesses may evaluate the inquiry, develop relevant offers and contact you through channels independently permitted by your choices and law.

Your permission is limited to the notice presented when you make the choice. It does not authorize an undisclosed recipient simply because that recipient is later added to a general partner list. Material expansion requires appropriate notice and renewed permission where required. You may withdraw optional permission by emailing [email protected]. You do not need to enroll in an account or purchase anything to make that request.

We do not authorize indiscriminate onward resale. Recipients must comply with the agreed purposes, applicable privacy and communication laws, required security measures, and applicable withdrawal or deletion instructions. Any permitted onward disclosure must remain within your informed permission and applicable law; recipients cannot use a contract label to erase those limits.

This optional program does not include the sale of consumer reports, credit scores, credit-derived screening results, Social Security numbers, authentication credentials, or SMS opt-in and consent records. It does not authorize sale of sensitive information or children's information under a generic lead permission. Transfers prohibited by law, including applicable restrictions involving foreign buyers or controlled entities, remain prohibited despite an opt-in.

7. Earlier information and earlier promises

We preserve restrictions associated with information collected under earlier notices. Our earlier Upgrade Rebates privacy notice stated that we had not sold personal data and would not sell personal data belonging to website visitors, users, and other consumers in the future. That commitment continues to govern information collected while that notice applied; publishing this policy, continued browsing, or silence does not retroactively turn that information into saleable data. We do not treat a new general notice as permission to disregard an earlier promise.

We will not include information collected under that earlier no-sale commitment in an optional partner-sale program. For other materially different uses of earlier information, we will provide appropriate notice and obtain renewed, specific affirmative permission where lawful and required before that processing. Information newly collected after this policy takes effect is eligible for any optional sale only if the separate conditions in Section 6 are met. A later visit to the website or silence after a policy update does not automatically supply that permission.

The earlier notice also stated that we did not process sensitive personal information, while separately describing a possible credit-screening process. We do not treat that inconsistent language or an ordinary website inquiry as authorization to collect sensitive screening information or obtain a consumer report. Any such process requires its own applicable notice, safeguards, and legally sufficient authorization as described in Section 9.

8. Calls, texts and email

We use contact information to respond to your requests and send other communications you separately authorize or that law otherwise permits. Marketing calls or texts requiring consent use a separate disclosure identifying the authorized sender and communication methods. Optional marketing consent is not a condition of purchasing goods or services.

A mobile number can be a contact detail; permission to disclose it for a specified referral is different from permission to send marketing texts. We do not sell SMS opt-in or consent records to other businesses for their marketing. Restricted messaging information may be used by operational vendors to deliver or administer the authorized messaging service, subject to applicable restrictions.

For our marketing texts, reply STOP or use another reasonable revocation method recognized by law. For marketing email, use the unsubscribe link or email us. You can ask a caller to stop marketing calls or contact us directly. Applicable revocation and suppression requirements govern our response; a privacy-request verification process will not be used to obstruct a valid communication opt-out.

Opting out of one channel does not necessarily express a choice about every other independent activity. You may email us to request broader restrictions, including withdrawal from optional partner offers. We honor requests according to their reasonable scope and applicable law. Necessary service or legally required messages may continue when permitted.

9. Credit inquiries and sensitive information

An ordinary website inquiry does not itself authorize a credit inquiry. If a separately requested process involves credit verification, the authorization presented for that process identifies the relevant purpose and providers and obtains the necessary permission. Each person whose credit will be checked must have an independently valid authorization or other legally sufficient basis; a co-owner's name on property records is not blanket authorization.

Screening information is restricted to the authorized process and lawful related obligations. It is segregated from ordinary lead-sale and advertising uses. The separate process explains whether an inquiry is soft or hard and any related conditions; this policy is not a credit application or a substitute for required credit disclosures.

Where law requires consent or additional safeguards for sensitive information, we apply those requirements before processing. We do not infer that one jurisdiction's definition or exemption eliminates a different applicable obligation.

10. Cookies, advertising and privacy signals

Cookies, pixels and similar technologies can support website functions, security, analytics, measurement and targeted advertising. Advertising-related disclosures may constitute a sale or sharing under state privacy laws even without a payment for a particular record. You can request an opt-out of applicable sales, sharing or targeted advertising by emailing [email protected].

The earlier Upgrade Rebates notice described session-replay analytics, including tools such as Lucky Orange, that can record pages viewed, clicks, mouse movement, scrolling, and information entered on the site. Any such use remains subject to applicable notice and choice requirements. Please do not submit unnecessary sensitive information through ordinary inquiry fields. Browser cookie controls may limit some, but not necessarily all, of this collection.

Some browsers offer opt-out preference signals, including Global Privacy Control. Applicable law may require recognition of a qualifying signal for sales, sharing or targeted advertising. A browser signal may identify only that browser or device unless it can lawfully be associated with a broader profile. This policy does not represent that enabling a browser setting automatically stops every disclosure by every website component or independent provider. You may also submit your request directly by emailing us. This direct-request method does not replace any duty to recognize a qualifying signal under applicable law.

Browser cookie settings and an industry advertising opt-out do not necessarily stop every server-side disclosure or lead sale. You can contact us for broader account or contact-level choices. Legacy Do Not Track and legally recognized opt-out preference signals are different; treatment of the former does not excuse compliance with the latter.

11. Retention and deletion

We retain personal information only for the disclosed purpose and a reasonably necessary period, subject to applicable obligations. We use these criteria:

• Inquiries and service records: the time needed to respond, arrange the requested service, provide reasonable follow-up and resolve related issues.
• Optional marketing and offer information: whether permission remains valid, the relevance and age of the inquiry, your interactions, applicable restrictions and a justified campaign period.
• Digital activity: the period reasonably needed for the particular security, measurement or analytics purpose, considering whether shorter-lived or aggregated information is sufficient.
• Screening information: the authorized verification purpose, provider requirements and applicable legal retention obligations, with restricted access.
• Permission, complaint and compliance evidence: applicable legal obligations, relevant limitation periods, disputes and the minimum evidence needed to demonstrate compliance.
• Suppression records: the minimum information needed to honor withdrawals, prevent reimport or recontact, and meet legal requirements.

We review continued retention and delete or appropriately deidentify information when it is no longer needed. Restricted legal or suppression records are not retained as an unrestricted marketing database. Backup deletion follows applicable legal requirements and retention cycles; information awaiting deletion is protected from unrelated active use. A specific lawful exception may limit deletion, and we explain applicable reasons when responding to a request.

12. Security, transfers and business changes

We maintain reasonable administrative, technical and physical measures appropriate to the information, including access restrictions and relevant vendor requirements. No transmission or storage system can be guaranteed completely secure. This statement does not limit duties imposed on us by law. We address incidents and provide legally required notifications.

Information may be processed where approved providers operate, subject to applicable transfer restrictions and safeguards. A general international-processing disclosure does not authorize prohibited buyers or transfers.

In a proposed or completed merger, financing, acquisition or similar business transaction, relevant information may be disclosed under appropriate confidentiality and legal safeguards. Existing privacy commitments and applicable rights continue to matter; a business transaction does not automatically authorize materially different uses.

13. Your privacy rights and requests

Depending on applicable law and our relationship with you, you may request confirmation of processing; access or a portable copy; correction; deletion; withdrawal of consent; restrictions on sensitive-information use; and opt-out of sale, sharing, targeted advertising or covered profiling. Some jurisdictions provide additional information about specific recipients or automated decisions. We do not require you to waive these rights to use the website.

Submit requests by emailing [email protected]. Describe the request and provide enough information to locate the relevant records. Do not send unnecessary identity documents or sensitive information in an ordinary email. We request proportionate verification only where appropriate and permitted. You do not need a new account. Authorized agents may act where law permits, subject to appropriate authority checks; opt-out requests are not subject to unnecessary authentication barriers.

Our operational response target is 30 calendar days for verifiable privacy requests. The earlier Upgrade Rebates notice promised a response within 45 days and described a possible lawful 45-day extension; this policy's shorter target does not reduce that or any stronger legal right. Shorter legal deadlines, including applicable sale/sharing and communications opt-out deadlines, control. Any extension must be permitted by law and consistent with the commitments governing your information; we explain the reason and timing as required. Requests are free as required by law. Any permitted fee or refusal must have a lawful basis, which we explain.

Texas residents covered by the Texas Data Privacy and Security Act may exercise its access, correction, deletion, portability and opt-out rights. You may appeal a denial by emailing us with “Privacy Appeal” and identifying the request. We provide a written appeal decision and reasons within 60 days. If we deny a Texas appeal, we explain how to submit a complaint to the Texas Attorney General. Other applicable appeal procedures remain available.

California residents, where CCPA applies, have rights concerning categories and specific pieces of information, correction, deletion, sale/sharing opt-out, qualifying sensitive-information limitations and nondiscrimination. To exercise Do Not Sell or Share My Personal Information rights, email [email protected] and tell us your choice; no special subject line is required. Applicable California opt-out or limitation requests are implemented as soon as feasible, no later than 15 business days. Residents of other covered states may have additional rights, including specific-recipient information and review of certain automated decisions. We apply the rights required for your jurisdiction without unlawful discrimination or retaliation.

14. Children, updates and contact

Our services and optional offer programs are intended for adults aged 18 or older. We do not knowingly enroll children in these programs. If we learn that we collected a child's information outside a legally permitted process, we take appropriate steps to stop prohibited processing and delete it as required. Contact us if you believe this has occurred.

We may update this policy to reflect actual changes or legal requirements. We update the effective date and provide additional notice for material changes as appropriate. Where renewed permission is required, we obtain it before the changed processing. No update waives rights that cannot lawfully be waived.

For privacy questions, requests, complaints or accessibility assistance, contact Upgrade Rebates at [email protected].