Sunrun California Privacy Notice

Last Updated: July 9, 2025

This California Privacy Notice (the “Privacy Notice” or “Notice”) provides limited information to California residents only about how Sunrun, Inc. and its subsidiaries and affiliates  (“Sunrun,” “we,” “us,” “our”) collect, use, and disclose personal information. For more details about our privacy practices and any privacy rights you may have, please see our Privacy Policy. Neither this Notice nor the Privacy Policy apply to personal information we collect we collect in an employment context, such as information collected from or about job applicants or employees.

Information We Collect

We may collect information that personally identifies, relates to, describes, or is capable of being associated with you (“personal information”). The types of personal information we collect about you will vary based on your relationship with us, but may include:

• Identifiers, including name, physical address, email address, phone number, social security number, driver’s license or other government identification information, account identifiers and login credentials, and credit and identity information relating to data used to identify an individual. 

• Characteristics of protected classifications under applicable laws, including age and date of birth. 

• Commercial information, including payment card or bank account information, account history relating to an individual’s purchases, service profile information relating to an individual’s purchases and interests, feedback information, communication preferences, customer service and communication history, information related to home ownership or energy usage, and utility provider. 

• Internet or other electronic network activity information, including IP address, browser type, device type, system type, and the domain name from which you accessed the Sites, log data, analytics data, application data, device ID, and other data collected through cookies and similar technologies. 

• Geolocation data, including general geographic location or more precise location when permitted by law.

• Audio, electronic, visual, thermal, olfactory, or similar information, including, where permitted by law, recordings of phone calls between us and individuals, pictures captured on job sites, and audio, image, and video recordings of visitors to our offices or events.

• Professional or employment-related information, including the business or organization an individual represents, their title with that business or organization, and information relating to their role with the business or organization.

• Inferences drawn from other personal information or data, including our predictions about interests and preferences and related service profile information.

Some of this information, including social security number, driver’s license or other government identification information, precise geolocation data, account login credentials, and financial information, is considered sensitive personal information under California law. Additionally, some of this information may be considered “personal information” as defined in Cal. Civ. Code § 1798.80(e)

How We Use Your Information

We may use personal information and sensitive personal information for business purposes, such as:

• Provide and improve goods and services. To provide our Sites and/or Services and their contents to you. To analyze, improve, operate, and maintain the Sites, Services, and other systems, and to develop new products and services. 

• Communications. To provide you with information about our products and services or your account and to otherwise contact and communicate with you when necessary, including updates about our Sites and Services. 

• Energy programs. To plan, implement and evaluate energy-use and efficiency programs, such as demand response programs.

• Account management and servicing. To allow you to take certain actions related to your account, including, but not limited to, tracking the progress of your solar system installation, making and managing payments, viewing billing history, calculating your post-solar savings, reviewing and monitoring your solar production, managing your account and contact information, and viewing and downloading your solar system agreement. 

• Billing and collections. To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection. 

• Marketing and analytics. To provide you and other users with customized content, targeted offers, and advertising on the Sites, or across other websites, mobile applications, social media or online services, or via direct mail, email, and/or telemarketing regarding offers, contests, events, news, programs, and other retail opportunities from us and/or selected third parties that we believe may be of interest to you. To determine the effectiveness of our marketing programs and for other analytics purposes. 

• Eligibility and pricing: to determine if consumers are eligible for certain products, services or offers and the pricing related to such offers;

• Product research and development: to conduct research and analysis for maintaining, protecting, and developing services, increase and maintain the safety of our products and services, and prevent misuse;

• Business operations: to evaluate, develop, and improve business operations, products and services offered, conduct audits, evaluate contractors and technicians, and perform business administration and other normal business activities;

• Compliance: to comply with applicable legal requirements, industry standards, contractual obligations, our policies, and take actions that we deem necessary to preserve and enforce our rights and the rights of others; 

• Information security and fraud prevention: to operate information security and anti-fraud programs; and

• Other purposes. As described to you at the point of collection, with your consent, or as otherwise required by applicable laws.

Third-Party Sales and Sharing

We may disclose personal information to third parties in situations that qualify as a “sale” or “sharing” (for cross-context behavioral advertising purposes) under California law. In the previous 12 months, we sold or shared personal information as follows:

• Affiliates: we disclosed identifiers, characteristics of protected classifications, commercial information, geolocation data, audio/visual/electrical and similar information, and inferences for marketing and general business purposes. These disclosures may qualify as a sale.  

• Nonprofits: we disclosed identifiers, characteristics of protected classifications, commercial information, non-precise geolocation data, and inferences for solar advocacy purposes. These disclosures may qualify as a sale.

• Energy providers: we disclosed identifiers, characteristics of protected classifications, commercial information, internet or other electronic network activity information, geolocation data, audio/visual/electrical and similar information, and inferences in connection with demand response and similar programs. These disclosures may qualify as a sale.

• Marketing partners: we disclosed identifiers, characteristics of protected classifications, commercial information, non-precise geolocation data, and inferences for marketing purposes. These disclosures may qualify as a sale.

• Advertising, social media, and analytics companies: we disclosed identifiers, commercial information, internet or other electronic network activity information, non-precise geolocation data, and inferences for analytics and cross-context behavioral advertising purposes.

We reserve the right to disclose other categories of personal information to other third parties, as outlined further in our Privacy Policy. To opt-out of sales or sharing scenarios, you can use our online form or call us at 1-855-478-6786. To opt-out of online disclosures that may qualify as a sales or sharing, you can use the Manage Cookies feature on our Sites.

How Long We Retain Your Personal Information

We may retain each category of personal information for as long as needed or permitted based on your relationship with us, our legal and regulatory obligations, and our need to retain information for normal business purposes, including marketing.