Privacy Policy

Effective Date: 08-11-2026        Last Updated: 08-10-2026 

1. Introduction & Who We Are

This Privacy Policy describes how Gig Fiber, LLC (D/B/A Streetleaf), a Delaware limited liability company, and Streetleaf Holdings, LLC, a Delaware limited liability company, and its affiliates and subsidiaries, including Streetleaf Services, LLC; Streetleaf Distribution, LLC; and Streetleaf Infrastructure, LLC, each a Delaware limited liability company (collectively, “Streetleaf,” “we,” “us,” or “our”), collect, use, disclose, and protect personal information in connection with our website, our direct-sales and reservation services, and our smart streetlights (as defined below) and remote-monitoring services (collectively, the “Services”). 

Business address: 2502 N. Rocky Point Dr., Suite 1070, Tampa, FL 33607.   

Privacy contact: privacy@streetleaf.com | 813-800-5323. 

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. This Policy is a notice of our privacy practices. It is not a contract, and it is not a substitute for consent where consent is required: where applicable law requires your consent for a particular activity — for example, non-essential cookies and tracking technologies (see Section 6), we obtain that consent separately. This Policy may change from time to time (see Changes to This Policy). We will notify you of material changes as described in Section 19, and where a change requires your consent we will obtain it before that change applies to you. Please check this Policy periodically for updates. 

2. Scope & Applicability

This Policy applies nationwide to individuals in all U.S. states who interact with the Services, including website visitors, prospective and actual customers (individuals and the individual representatives of business and government buyers), newsletter subscribers, and property owners or customers associated with installed streetlight systems. We extend the rights described in Section 13 to all U.S. residents nationwide and honor recognized universal opt-out mechanisms (including Global Privacy Control). 

This Policy covers streetleaf.com and its subdomains, our online forms (newsletter, quote/order, demo, and service/maintenance requests), the direct-sales and path-reservation checkout, and data generated by our smart streetlights. It does not cover third parties we do not control, or personal information of our personnel, which is handled separately. 

3. Key Definitions

• “Personal information”: information that identifies, relates to, describes, or could reasonably be linked with a particular individual or household; excludes publicly available and de-identified/aggregated information. 

• “Sensitive personal information”: a protected subset (e.g., precise geolocation, government identifiers, financial account information, racial/ethnic origin, religious beliefs, health data, sexual orientation, biometric or genetic data). 

• “Sell”/“Sale”: disclosing personal information to a third party for monetary or other valuable consideration. 

• “Share”/“Sharing”: disclosing personal information to a third party for cross-context behavioral (targeted) advertising. 

• “Service provider”/“processor”: a vendor that processes personal information on our behalf under a written contract. 

• “Smart streetlights” (or “smart lights”): our internet-connected solar streetlight and bollard products that include sensors and remote-monitoring features and that transmit device data (“Telemetry”) to us over wireless or cellular networks. 

4. Personal Information We Collect

4.1 Information you provide directly 

We collect the information you provide when you interact with our Services, including: 

Our forms use Google reCAPTCHA to prevent spam and abuse; your interaction with reCAPTCHA is subject to Google’s privacy policy and terms. 

4.2 Information collected automatically through our Services 

As you navigate through our Services, us and our analytics/advertising partners may automatically collect information that may include personal information, such as: IP address; browser type and version; operating system and device type; referring URL; pages visited and time spent; date and time of visit; and web server/access logs. This information is automatically collected through cookies, web beacons, and other similar technologies, subject to your consent choices (see Section 6). We do not control these third parties’ tracking technologies or how they may be used; see Section 6 for the specific analytics and advertising partners whose technologies we use. If we combine this automatically collected information with personal information so that it identifies or could reasonably be linked to you, we treat the combined information as personal information. 

4.3 Smart Streetlight & Remote-Monitoring Data 

Our smart streetlights and remote-monitoring services transmit device data (Telemetry) to our systems. Because this Telemetry is associated with an identifiable customer, property owner, or installation address, we treat it as personal information. Depending on the product, Telemetry may include device ID/serial number; fixed geolocation of the installed unit and its installation address; energy output and charging data; on/off and dimming status; battery level and health; fault and alert events; ambient light sensor readings; motion sensor data (for motion-adaptive units); and connectivity status and signal strength. Motion sensor data records only the fact and timing of detected movement near a unit, in order to trigger adaptive dimming. It does not capture images, audio, or any characteristic that identifies a person, and we do not use it to identify, track, or profile passers-by. The fixed geolocation and installation address data identifies the location of the installed equipment, rather than tracking an individual’s real-time movement, and is therefore not treated as “precise geolocation” nor classified as sensitive personal information. Where a unit is installed at an individual consumer’s residence, we treat the installation address as an identifier associated with that customer and protect it accordingly under this Policy. We do not knowingly collect sensitive personal information from consumers (see Section 9). 

4.4 Categories under state privacy law 

The categories we collect include: identifiers; commercial information; internet/network activity; geolocation (fixed installation location; approximate location from IP); professional/employment information (for business/government contacts, including business-contact and firmographic information we receive from our visitor-identification provider, see Section 4.5); financial information (payment is processed by our processor, we do not store full card numbers); electronic activity information (session-replay interaction data captured by our analytics tools, subject to consent); and inferences for marketing. We do not knowingly collect sensitive personal information from consumers (see Section 9). 

4.5 Information we receive from other sources 

We receive information about visitors to our website from a visitor-identification provider (ZoomInfo WebSights), which matches website visit data against its own business database and returns business and professional information — such as organization name, industry, and size, and the names, titles, and work contact details of individuals at that organization. We use that information for business-to-business sales and marketing. This technology is loaded only if you consent to advertising cookies, and it is suppressed if you opt out as described in Section 8; see also our Cookie Policy. We also receive information from our service providers in the ordinary course of their work for us — for example, payment and chargeback information from our payment processor and delivery confirmations from shipping carriers. 

5. How We Use Personal Information

We use personal information that we collect or that you provide to us, limited to what is reasonably necessary for each purpose, to: process and fulfill product orders and path reservations; process and fulfill service requests (installation, maintenance, monitoring); provide remote monitoring and diagnose and resolve device issues; respond to quotes, inquiries, and support requests; send transactional messages; send marketing emails subject to your choices (see Section 12); process payments and prevent fraud; administer warranties; improve website performance (analytics); deliver targeted advertising subject to your opt-out (see Section 8); comply with law; protect security; conduct business operations (invoicing, accounting, recordkeeping); and effect business transfers. 

6. Cookies & Tracking Technologies

We use cookies, tags, pixels, session-replay tools, and similar technologies, categorized as strictly necessary, functional, analytics/performance, and advertising/targeting (including visitor identification). Non-essential technologies (including functional, analytics, advertising, session-replay, and visitor-identification technologies) are loaded only after you consent by category through our cookie-consent banner, and you can change or withdraw your choices at any time through the banner and your browser settings. If you decline a category, we do not set those technologies and we remember that choice on your later visits until you change it or clear your browser storage. We honor the Global Privacy Control signal as an opt-out of non-essential tracking. We do not respond to browser “Do Not Track” signals, for which there is no common industry standard. A complete, cookie-by-cookie list, including cookie names, durations, and providers, appears in our Cookie Policy (COOKIE POLICY URL), which forms part of this Policy.  

Video: videos on our site are hosted by us and do not set third-party advertising cookies. If we embed video from an outside service (e.g., YouTube or Vimeo), we configure it in privacy (no-cookie) mode. 

7. How We Disclose Personal Information

We disclose personal information to: service providers/processors that act on our behalf under written contract (website hosting, e-commerce platform, payment processing by Stripe, accounting and invoicing/billing providers, customer-relationship and email tools, cloud storage, and analytics and advertising providers); advertising and analytics partners in connection with the activity described in Section 8; our visitor-identification provider (ZoomInfo), which receives website visitor information, including IP address and on-site activity, and uses it for its own business purposes (see Sections 4.5 and 8); our affiliates and subsidiaries (who honor this Policy); shipping/logistics carriers (who receive names and delivery addresses to deliver orders); legal and safety recipients (to comply with law or protect rights and safety); parties to a business transfer (merger, acquisition, financing, or asset sale, with notice as required by law); and others with your consent. The categories of personal information we disclose to these recipients are the categories described in Section 4.4. Of those categories, the ones we share for cross-context behavioral advertising, and that may be treated as sold, are identifiers, internet/network activity, approximate location derived from IP address, and inferences for marketing. We do not sell or share the other categories. 

8. Your Privacy Choices — “Do Not Sell or Share My Personal Information”

Our use of advertising cookies and pixels to deliver targeted advertising, and our use of a visitor-identification provider (ZoomInfo WebSights) that receives information about your visit and uses it for its own business purposes, are each considered “sharing” for cross-context behavioral advertising — and may be considered a “sale” — under California and most state privacy laws, even when no money changes hands. We do not sell or share the personal information of individuals we know, or willfully disregard, to be under sixteen (16) years old. 

You may opt out by (a) using the “Your Privacy Choices” / “Do Not Sell or Share My Personal Information” link and cookie-preferences banner on the website, and (b) enabling a recognized universal opt-out mechanism. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of sale/sharing and targeted advertising. An opt-out through either method suppresses both our advertising tags and the visitor-identification provider described above. Nevada residents may also submit a request to opt out of certain sales of personal information to privacy@streetleaf.com; however, we do not currently sell personal information in a manner that triggers Nevada’s opt-out right. 

9. Sensitive Personal Information

We do not collect sensitive personal information from consumers to infer characteristics, and we do not sell sensitive personal information. We do not knowingly collect precise geolocation of individuals through the website or direct-sales Services (see Section 4.3). Where our operations involve precise location of field personnel or contractors, that information is handled separately, not under this Policy. If we begin collecting or processing sensitive personal information from consumers, we will update this Policy and, where required by law, obtain your consent beforehand. 

10. How Long We Keep Personal Information

We keep each category of personal information described in this Policy only for as long as reasonably necessary to fulfill the purposes described in this Policy and to meet our legal, tax, accounting, and dispute-resolution obligations, after which we delete or de-identify it. Where a law or legal obligation requires or permits us to retain a category for a longer period; for example, tax and accounting records, warranty periods, or a litigation hold, we retain it for that longer period and delete or de-identify it when the longest applicable obligation ends. We do not retain personal information indefinitely. We retain the following categories on this basis: 

11. Data Security

We maintain commercially reasonable administrative, technical, and physical safeguards consistent with industry practice, including serving the website over HTTPS/TLS, encrypting personal data at rest, limiting employee access on a need-to-know basis, and hosting with an established provider. We require multi-factor authentication for access to systems containing customer data. We also take reasonable measures to securely dispose of records containing personal information that we no longer need to retain. However, no website, online service, method of transmission or storage is completely secure, and we cannot guarantee absolute security of your personal data transmitted to, through, using, or in connection with the Services. The security of your personal information also depends on you, and we encourage you to take reasonable steps to protect your account credentials and devices. If a security incident affects your personal information, we will notify affected individuals and regulators as required by applicable law, including, for Florida residents, within the timeframes required by the Florida Information Protection Act. 

12. Marketing Communications & Your Choices

We send marketing emails to individuals who opt in through our website sign-up or checkout. We also send business-to-business marketing to the work contact details of business and government contacts obtained through list import or added by our sales team, as permitted by the CAN-SPAM Act. We do not add consumers to marketing lists without their opt-in. We do not use pre-checked subscription boxes. You may unsubscribe at any time via the link in any marketing email; requests are processed promptly and in no event more than ten (10) business days after receipt, as required by the CAN-SPAM Act, and we maintain a suppression list. We use email personalization and retargeting based on website behavior. We do not send SMS/text-message marketing. 

13. Your Privacy Rights

Subject to your state of residence, you may have the rights to: know/access the personal information we hold and how we use and disclose it; delete it; correct it; obtain a portable copy; opt out of sale/sharing and targeted advertising (see Section 8); opt out of profiling with legal or similarly significant effects; limit the use of sensitive personal information where applicable; be free from discrimination for exercising rights; and appeal a denied request where your state provides an appeal. We extend these rights to all U.S. residents nationwide. 

13.1 How to exercise your rights 

You may submit privacy requests by email to support@streetleaf.com or by phone at 813-800-5323. We verify your identity before responding and respond within 45 days (extendable by 45 days for complex requests, with notice). You may use an authorized agent, subject to verification. We will not discriminate against you for exercising your rights. If we deny your request, we will tell you why. You may appeal that decision within sixty (60) days by emailing support@streetleaf.com with “Privacy Appeal” in the subject line or by using the request form above. We will respond to your appeal in writing within forty-five (45) days and, if we deny the appeal, we will explain why and give you a method to contact your state’s Attorney General. 

13.2 California disclosures 

California residents have the rights above, including to know the categories of personal information collected, the sources, the business/commercial purposes, and the categories of third parties to whom information is disclosed. California’s private right of action for certain data breaches applies. Under “Shine the Light,” we do not disclose personal information to third parties for their own direct marketing. 

13.3 Florida disclosures 

As a company headquartered in Tampa, Florida, we maintain reasonable security measures and dispose of records containing personal information that we no longer need to retain, and, in the event of a data breach, we provide notice to affected individuals and, where required, to the Florida Department of Legal Affairs, in each case within the timeframes required by the Florida Information Protection Act, which applies to our business regardless of revenue (see Section 11). If our revenue or business activities change such that the Florida Digital Bill of Rights’ general consumer-rights provisions become applicable to us, we will update this Policy accordingly. 

14. Children’s Privacy

The Services are directed to businesses, government entities, and adult consumers, and are not directed to children. We do not knowingly collect personal information from children under thirteen (13) years old (or, where applicable, under sixteen (16) years old). If you believe a child provided us information, contact us and we will delete it. We do not sell or share, or use for targeted advertising, the personal information of any individual we know, or willfully disregard, to be under sixteen (16) years old, and we comply with applicable state teen protections. 

15. Business & Government Customers

The names, work emails, phone numbers, and titles of individual representatives of our business and government customers are personal information; this Policy covers those individuals, who have the rights in Section 13. Where a customer contract imposes specific data-handling or security obligations, we honor them. 

16. Direct Sales & Reservations

When you reserve or buy the Streetleaf PATH solar bollard through our reservation and checkout flow (PATH RESERVATION URL), we collect the information needed to process your reservation and order (name, billing and shipping details, and payment information). These transactions are also governed by our Website Terms of Use & Terms of Sale, Returns & Refund Policy, and, where applicable, a Sale of Goods Agreement, under which Streetleaf Distribution, LLC is the selling entity. The reservation deposit is processed by our payment processor (Stripe, including digital-wallet options such as Apple Pay, Google Pay, and Amazon Pay); the remaining balance is invoiced after delivery through our accounting and invoicing/billing providers. This Policy governs how we handle personal information collected in that process. 

17. Where Information Is Processed

We are based in the United States, and we store and process personal information here. Some of our service providers and advertising and analytics partners, including Google, Meta, LinkedIn, Cloudflare, Stripe, HubSpot, and ZoomInfo, operate global infrastructure and may process personal information outside the United States. Where they do, we require them by contract to protect it consistent with this Policy and applicable law. 

18. Third-Party Links

The Services may link to sites we do not operate (for example, our social media pages). We are not responsible for their content or practices; review their privacy policies. 

19. Changes to This Policy

We may update this Policy. We will post the updated Policy with a new “Last Updated” date and, where required, provide additional notice. Continued use after changes take effect constitutes acceptance. 

20. Contact Us

Streetleaf — 2502 N. Rocky Point Dr., Suite 1070, Tampa, FL 33607.   

privacy@streetleaf.com | 813-800-5323.