Helios Exchange Privacy Statement

Last Updated: November 29, 2016

Helios Exchange Inc., (collectively “Helios Exchange”, “we”, “us” or “our”) provide this Privacy
Statement that covers the web site https://helios-eex.com. By accessing,
using or registering with Helios Exchange’s web site, you accept and agree to Helios
Exchange’s Privacy Statement. Helios Exchange provides a variety of online building energy analytics
for commercial real estate professionals and energy professionals. Any user information we collect is
considered private and we do not use it or share it except as permitted herein, without the user’s
permission. We use this personal information at Helios Exchange to provide the best quality service possible.
The following privacy statement summarizes Helios Exchange’s protection and use of any personal information
provided by visitors to the Helios Exchange site.

Information Collected by Helios Exchange

Helios Exchange collects user information from several areas of the Helios Exchange site including
the registration area (where Helios Exchange collects each user’s name, telephone number, email
address, organization name, type and size, and job role), and the application for financing. Helios
Exchange collects individual user search activity for statistical, archival, and business purposes.
Helios Exchange collects financial information (such as billing address, credit card number,
expiration date) for billing payment and credit card authorization purposes. Helios Exchange may
track the IP address of a user’s computer or place a “cookie” in the browser files of a user’s
computer.This is required by Helios Exchange services to provide automated features.

If a user is a subscriber, the user may upload information on their own buildings and/or connect to an
Energy Star Portfolio Manager account and upload data from there. These users may also change
data provided by Helios Exchange that they have copied to their own portfolios in the platform. This
data is private to the user and not available to any other users on the platform.

Helios staff members reserve the right of full access to user accounts to allow them to work with users
to analyze their properties and to ready projects for financing. However, Helios staff members may not
disclose any proprietary user information to third parties without the consent of the user.

Use of Information Collected

Collected information helps Helios Exchange better understand its users’ needs in order to improve
its product and service offerings. Email addresses are used to communicate with users through
promotional emails, user emails and for site administration purposes. Users may be deleted from
promotional email and user email lists at their request. Personal information may be used to contact
users for the purpose of research, product development, marketing, or customer service, if the user
has opted to receive such communication. User search activity is collected and analyzed and may
be utilized by Helios Exchange in the aggregate or in the abstract for a variety of business purposes.
Financial information is used to bill users for products and services purchased. Within Helios
Exchange, only accounting managers have access to the credit card account information. This
information is not shared with anyone outside of Helios Exchange. IP address and cookie log data is
analyzed to better understand traffic flows and user preferences. Helios Exchange may retain the
data it collects indefinitely. You may have your personal information deleted or deactivated by
sending an email to privacy@helios-eex.com. You may be asked to confirm your identity.

Shared information

Though Helios Exchange makes every effort to preserve user privacy, we may need to disclose
personal information when required by law wherein we have good faith belief that such action is
necessary to comply with a current judicial proceeding, a court order or legal process, when we
believe in good faith that disclosure is necessary to protect our rights, protect your safety or the
safety of others, investigate fraud, or respond to a government request served on our web site and
to any other third party with your prior consent to do so. Key billing information
(such as credit card number, expiration date and dollar amount) gathered from users making online
purchases of products or services may be shared with a credit card processing partner in order to
authorize charges to the credit card. Helios Exchange may also use third party providers to perform
email and postal mailings on behalf of Helios Exchange, but this information (such as name, address and email)
is confidential and is not used by the provider for any other purpose.

Helios Exchange does not rent or lease user information to any third party, except as disclosed here.
From time to time, Helios Exchange may obtain information (such as electronic mail addresses) from
third party providers. It is our goal to only contact individuals who we believe may have a legitimate
business interest in Helios Exchange based on their membership or participation in other
organisations or web sites, and who have indicated a willingness to be contacted for this purpose.
While Helios Exchange endeavours to work with other sites and companies with a similar respect for
user privacy, Helios Exchange cannot be responsible for the privacy practices of other sites.

Security of personal information

The security of your personal information is important to Helios Exchange. We follow generally
accepted industry standards to protect the personal information submitted to us, both during
transmission and once we receive it. No method of transmission over the Internet, or method of
electronic storage, is 100% secure, however. Therefore, while we strive to use commercially
acceptable means to protect your personal information, we cannot guarantee its absolute security.

If you have any questions about security on our web site, you can email us at 
privacy@helios-eex.com.

Cookies and Tracking Technologies

Technologies such as: cookies, beacons, tags and scripts are used by Helios Exchange and our
service providers. These technologies are used in analyzing trends, administering the site, tracking
users’ movements around the site and to gather demographic information about our user base as a
whole. We may receive reports based on the use of these technologies by these companies on an
individual as well as aggregated basis.

We use cookies to make it easier for you to use the site by storing your user preferences, such as
the last location you searched, or for remembering your log in information so that you do not have to
re-type it each time. Users can control the use of cookies at the individual browser level. If you reject
cookies, you may still use our site, but your ability to use some features or areas of our site may be
limited.

Log Files

As is true of most web sites, we gather certain information automatically and store it in log files. This
information may include internet protocol (IP) addresses, browser type, internet service provider
(ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data.

We do not link this automatically collected data to other information we collect about you.

Collection and Use of Third Party Personal Information

You may also provide personal information about other people, such as their name, physical
address, email address and etc. This information is only used for the sole purpose of completing
your request or for whatever reason it may have been provided.

Opting-out, editing, updating or deleting personal information

Helios Exchange utilizes email as a vital and primary communication channel with registered users.
As a registered user, you hereby acknowledge and grant Helios Exchange the permission to
communicate with you via email (as well as other communication channel such as phone and fax)
for any purposes Helios Exchange determines to be relevant including, but not limited to, system
messages, product updates, service announcements and other marketing messages. Helios
Exchange will use best efforts to honor user requests to opt out of marketing messages, but under
no circumstances will Helios Exchange have any liability for sending any email to its registered
users.

Users who do not wish to receive marketing emails are requested to contact
customer_service@helios-eex.com.
We also send our users site and service announcement updates. Users are not able to
un-subscribe from service announcements, which contain important information about service notices and
responsibilities. Helios Exchange occasionally communicates with its users via email and phone to provide
information about requested services and regarding issues related to their account. It is important to note
that this communication is not used for marketing or promotional purposes. Requesting the deletion of certain
types of user information may prevent users from accessing some web site features.

If your personal information changes, or if you no longer desire our service, you may correct, delete
or update your personal information by emailing our Customer Support at 
customer_service@helios-eex.com.

We will retain your information for as long as your account is active or as needed to provide you
services. If you wish to cancel your account or request that we no longer use your information to
provide you services contact us at customer_service@helios-eex.com.
We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our
agreements.

Notification Procedures

Helios Exchange may provide notifications, whether such notifications are required by law or are for
marketing or other business related purposes, to you via email notice, written or hard copy notice
(including via fax), or through posting of such notice on our web site, as determined by Helios
Exchange in our sole discretion. Helios Exchange reserves the right to determine the form and
means of providing notifications to our users, provided that you may opt out of certain means of
notification as described herein. Helios Exchange is not responsible for any automatic filtering you or
your network provider may apply to email notifications we send to the email address you provide us.
We recommend that you add info@helios-eex.com to your email address book
to help ensure you receive email notifications from us.

Changes to this Privacy Statement

If Helios Exchange decides to change its privacy statement, we will post those changes to this
privacy statement, the homepage, and other places we deem appropriate so that you are aware of
what information we collect, how we use it, and under what circumstances, if any, we disclose it.
Helios Exchange reserves the right to modify this privacy statement at any time, so please review it
frequently. If Helios Exchange makes material changes to this statement, we will notify you here, by
email, or by means of a notice on our home page prior to the change becoming effective.