Privacy Policy.
Plainly stated.

Section 01

Scope & Who We Are

This Privacy Policy describes the practices of Abundance Energy, LLC("Abundance Energy," "we," "us," or "our"), a Retail Electric Provider licensed by the Public Utility Commission of Texas under PUCT License #10314. We provide retail electricity service to residential and commercial customers across all five ERCOT transmission territories in deregulated areas of Texas.

This policy applies to information we collect through our websites at abundanceenergy.com and my.abundanceenergy.com, our mobile-optimized customer portal, our enrollment platforms, calls and messages with our customer service team, and any other interactions you have with us in connection with retail electricity service.

It does notapply to the practices of your local Transmission and Distribution Service Provider (TDSP) - such as Oncor, AEP Texas, CenterPoint Energy, TNMP, or Lubbock Power & Light - or to ERCOT, Smart Meter Texas, or other third parties whose privacy practices are governed by their own policies.

Section 02

Information We Collect

We collect information that's necessary to enroll you in service, deliver electricity to your home or business, bill you accurately, support your account, and meet our regulatory obligations. The categories below describe what we collect and how.

Information You Provide Directly

• Identity and account information: Full legal name, service address, billing address, email, phone number, and date of birth.
• Identification for credit and fraud purposes: Social Security Number, Individual Taxpayer Identification Number, or government-issued ID number when needed to evaluate creditworthiness, verify identity, or comply with anti-fraud requirements.
• Payment information: Bank account and routing numbers, debit or credit card information, billing zip code, and payment history. Card data is processed by PCI-DSS compliant payment processors and is not stored in full on our systems.
• Service preferences: Plan selection, contract term, paperless billing preferences, AutoPay enrollment, and language preference.
• Communications you send us: The contents of emails, chat messages, support tickets, web form submissions, and any documents you provide.
• Optional information: Marketing preferences, demographic information, and customer survey responses you choose to share.

Information About Your Service and Premise

• Premise identifiers: ESI ID, premise type (residential or commercial), and TDSP service territory.
• Electricity usage data: Monthly kWh consumption, interval meter data (typically 15-minute readings) where available, demand readings (for commercial accounts), and historical usage patterns.
• Service status data: Enrollment, switch, move-in, move-out, and disconnection events; outage and restoration notifications relevant to your premise.

Information Collected Automatically

• Device and browser information: IP address, browser type and version, operating system, device identifiers, screen resolution, and approximate location derived from IP.
• Usage information: Pages viewed, links clicked, time spent on pages, referring URL, and search terms used to find our site.
• Cookies and similar technologies: See Cookies & Tracking for details.
• Call recordings: Calls to our customer service center may be recorded and monitored for quality assurance, training, and dispute resolution. You will be notified at the start of each recorded call.

Information We Receive from Third Parties

• Credit reporting agencies: Credit reports and scores used to determine deposit requirements, in accordance with the Fair Credit Reporting Act and PUCT rules.
• Identity and fraud verification providers: Verification results that help us confirm you are who you say you are.
• Your TDSP and ERCOT: ESI ID lookups, premise eligibility, switch confirmations, and settlement data.
• Smart Meter Texas: Interval meter data when you authorize us to access it.
• Prior retail electric provider: Account history information necessary to complete a switch.
• Marketing and analytics partners: Aggregated audience information that helps us measure the effectiveness of our advertising.

Section 03

How We Use Your Information

We use the information we collect for the following purposes:

• Establishing and providing electricity service. Enrolling you, coordinating with your TDSP, processing service moves and switches, and maintaining continuous service to your premise.
• Billing and payment processing. Calculating charges based on your plan and usage, processing payments, sending statements, managing AutoPay, applying credits, and handling collections on past-due accounts.
• Customer support. Responding to your questions, troubleshooting account issues, handling complaints, and supporting account changes through any channel you contact us on.
• Account management. Operating the customer portal at my.abundanceenergy.com, authenticating you, and giving you access to your usage, statements, and settings.
• Service notifications. Alerting you to outages affecting your area, contract expirations, scheduled maintenance, regulatory changes, and other matters that affect your service.
• Marketing and customer communications. Sending information about plans, renewal options, energy efficiency programs, and promotions - only where permitted by law and your communication preferences.
• Regulatory and legal compliance. Meeting reporting requirements under PUCT rules, ERCOT protocols, federal and state law, and responding to lawful requests from authorities.
• Fraud prevention and security. Detecting and preventing fraudulent enrollments, unauthorized account access, identity theft, and other security threats.
• Analytics and service improvement. Understanding how customers use our website and services, identifying friction points, and improving the experience.
• Business operations. Internal recordkeeping, financial accounting, audits, business planning, and corporate transactions.

We will not use your personal information for purposes that are materially different from those described in this policy without giving you appropriate notice and, where required, obtaining your consent.

Section 04

How We Share Your Information

Delivering retail electricity service in Texas requires coordination with several regulated entities and trusted vendors. We share your information only as described below.

With Your Local Utility (TDSP)

We share your name, service address, ESI ID, and account-related information with your TDSP - Oncor, AEP Texas, CenterPoint Energy, TNMP, or LP&L - so they can deliver electricity to your premise, process service requests (move-ins, move-outs, switches, disconnections), and report meter data back to us for billing.

With ERCOT

As required by ERCOT protocols, we share customer enrollment, usage, and settlement information with the Electric Reliability Council of Texas to support grid operations, market settlement, and switch processing.

With Smart Meter Texas

We exchange meter data with Smart Meter Texas (SMT) on your behalf so that we can read and bill your usage accurately. You can also access your own SMT data and authorize third parties to receive it directly through smartmetertexas.com.

With Our Service Providers

We share information with vendors who perform services for us under contractual confidentiality and data protection obligations. These include providers of:

• Billing and customer information system platforms
• Payment processing (PCI-DSS compliant)
• Print and mail services for paper statements and notices
• Email, SMS, and outbound call delivery
• Cloud hosting, IT infrastructure, and cybersecurity
• Customer support, including our bilingual call center
• Identity verification, credit reporting, and fraud prevention
• Collections agencies, when accounts become significantly past due
• Analytics, advertising measurement, and marketing operations
• Legal, accounting, audit, and other professional services

These vendors are permitted to use your information only to perform services for us and are required to protect it in accordance with applicable law.

With Credit Reporting Agencies

We may report account and payment information to consumer credit reporting agencies as permitted by law. Late or unpaid balances may be reported and may affect your credit score.

For Legal and Safety Reasons

We may disclose information when we believe in good faith that disclosure is necessary to comply with a subpoena, court order, regulatory request, or other legal process; to enforce our agreements; to protect the rights, property, or safety of Abundance Energy, our customers, or others; or to investigate fraud or unauthorized use of our services.

In Connection with Business Transactions

If Abundance Energy is involved in a merger, acquisition, financing, reorganization, or sale of all or part of our business, customer information may be transferred as part of that transaction. We will notify affected customers and the PUCT as required by applicable rules.

With Your Consent

For any sharing not described above, we will ask for your consent first. You can withdraw consent at any time, though doing so may affect your ability to receive certain services.

Section 05

Smart Meter & Usage Data

Most premises in Texas are served by smart meters that record electricity consumption in 15-minute intervals. This usage data - sometimes called interval data or meter data - is sensitive because it can reveal patterns about when you are home, when major appliances run, and other details about how you live or operate your business.

How We Use Your Meter Data

We use meter data only for the purposes of providing your electricity service: calculating your bill, helping you understand your usage, supporting product features (like usage alerts or budget tools), responding to support inquiries, and meeting regulatory obligations. We do not use detailed interval data for marketing without your specific consent.

Your Access Through Smart Meter Texas

You have the right to access your own meter data directly through smartmetertexas.com, the centralized portal operated for the benefit of all Texas electricity consumers. You can also use SMT to authorize third parties - such as energy management services, solar installers, or another retail provider - to receive your data on your behalf. Granting that authorization is your decision, not ours.

Aggregated and De-identified Data

We may use aggregated or de-identified usage data - information that cannot reasonably identify you - for purposes such as load forecasting, market research, energy efficiency programs, and reporting to regulators or business partners. Aggregated and de-identified data is not subject to this policy.

Section 06

Cookies & Tracking Technologies

We and our service providers use cookies, pixels, web beacons, local storage, and similar technologies on our websites. These technologies fall into the following categories:

• Strictly necessary.Required for the site to function - for example, to remember that you're signed into the customer portal or to keep your enrollment session active. These cannot be turned off through our preference center.
• Functional.Help us remember your preferences, such as language or region, so we don't have to ask each visit.
• Analytics. Help us understand how visitors find and use our site, which pages perform well, and where we can improve. These typically use providers such as Google Analytics.
• Advertising. Used by us and our advertising partners to measure the effectiveness of our marketing, deliver relevant ads on other sites, and limit the number of times you see the same ad.

Managing Your Choices

Most browsers let you control cookies through their settings. You can typically clear cookies, block third-party cookies, or refuse cookies from specific sites. Be aware that disabling cookies may affect the functionality of our site, including the customer portal.

We respect Global Privacy Control (GPC) signals as an opt-out of sales and targeted advertising under Texas law. If your browser or extension sends a GPC signal, we treat it as a valid opt-out request for that browser.

For interest-based advertising, you can also visit the Digital Advertising Alliance's opt-out tool at optout.aboutads.info, the Network Advertising Initiative's opt-out tool at optout.networkadvertising.org, or your mobile device's advertising settings.

Section 07

Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or destruction. These include encryption of data in transit, encryption of sensitive data at rest, network and access controls, employee training, vendor diligence, and ongoing monitoring.

Despite these measures, no system is completely secure. We cannot guarantee that personal information will never be disclosed in a manner inconsistent with this policy. We encourage you to use a strong, unique password for your customer portal account, keep your login credentials confidential, and notify us promptly if you suspect any unauthorized access.

In the event of a data breach affecting your personal information, we will notify you and the appropriate authorities in accordance with the Texas Identity Theft Enforcement and Protection Act and other applicable law.

Section 08

Your Privacy Rights

The Texas Data Privacy and Security Act (TDPSA) gives Texas residents specific rights with respect to their personal information. Subject to verification and certain exceptions, you have the right to:

• Confirm processing. Ask whether we are processing your personal information.
• Access. Request a copy of the personal information we have about you.
• Correct. Ask us to correct inaccurate personal information.
• Delete. Ask us to delete personal information we hold about you.
• Data portability. Receive a portable copy of personal information you provided to us, in a readily usable format.
• Opt out of sale. Direct us not to sell your personal information. We do not currently sell personal information.
• Opt out of targeted advertising. Direct us not to process your personal information for targeted advertising purposes.
• Opt out of profiling. Direct us not to subject you to profiling that produces legal or similarly significant effects.

How to Exercise Your Rights

To exercise any of these rights, contact us using the information in the Contact Us section. We will need to verify your identity before responding to certain requests. For account-related requests, verification typically involves logging into your customer portal or providing information that matches what we already have on file.

We will respond to verifiable requests within 45 days. If we need more time, we will let you know within that period and may extend our response by an additional 45 days, as permitted by law.

Right to Appeal

If we decline your request, you may appeal that decision by replying to our response or contacting us at privacy@abundanceenergy.com. We will inform you of any action taken in response to your appeal within 60 days. If your appeal is denied, you may contact the Texas Attorney General to submit a complaint.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide written, signed authorization, and we may contact you to verify the request.

Non-Discrimination

We will not deny service, charge different rates, provide a different level of service, or otherwise discriminate against you for exercising your privacy rights.

Section 09

Marketing Communications

From time to time we may send you information about new plans, energy-saving programs, contract renewals, and promotional offers. You can control these communications:

• Email. Click the unsubscribe link in any marketing email, or update your preferences in the customer portal. Transactional and service emails - such as bills, outage notices, and contract expiration reminders - will continue, because they are part of providing service.
• Text messages (SMS). Reply STOP to any marketing text to opt out. Standard message and data rates may apply.
• Phone calls.Tell our representative you'd like to be removed from marketing calls, or contact us using the information in the Contact Us section.
• Direct mail. Contact us to opt out of postal marketing.

We comply with the federal Telephone Consumer Protection Act (TCPA) and obtain prior express written consent before sending autodialed or prerecorded marketing calls or texts. We honor the National Do Not Call Registry and the Texas No Call List for non-customer calls.

Section 10

Children's Privacy

Our services are intended for adults who can enter into an electricity service agreement. We do not knowingly collect personal information from children under 13, and our website is not directed at children. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it. If you believe we may have information from a child under 13, please contact us at privacy@abundanceenergy.com.

Section 11

Third-Party Links

Our websites and communications may include links to websites and services operated by third parties - for example, Smart Meter Texas, the PUCT website, the customer portal of a payment processor, social media platforms, or partners we work with on energy programs. This policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party before providing them with your information.

Section 12

Data Retention

We retain personal information for as long as needed to provide service, maintain accurate billing and account records, comply with our legal and regulatory obligations, resolve disputes, enforce our agreements, and support legitimate business purposes.

Specific retention periods vary by data type and applicable requirements. For example:

• Customer account and billing records are retained for the duration of your service plus the period required by PUCT rules and applicable tax and accounting law.
• Call recordings are typically retained for a limited period for quality assurance and dispute resolution, unless a longer hold is required.
• Website analytics data is generally retained in identifiable form for shorter periods, after which it is aggregated or deleted.

When personal information is no longer needed, we delete it or de-identify it in accordance with our retention schedule and applicable law.

Section 13

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy and post the revised policy on our website. If the changes are material, we will provide additional notice - for example, by email or a prominent notice on our site - before the changes take effect. Your continued use of our services after the effective date of any update constitutes acceptance of the updated policy.