Last Updated September 2026

MY LEVITON PRIVACY POLICY

What's Changed

Since the previous version, we have:

• Clarified how this Privacy Policy works, including when separate consent may be required under applicable law (Section 1. Acknowledgement and acceptance of terms). 
• Expanded information about the data we collect and how we use it, including API activity, device telemetry, customer support information, cookies, and retention practices (Section 2. Information we collect and how we use it and Retention). 
• Added information about third-party integrations, Personal API Tokens, and account security (Section 5.1 Third-party integrations you authorize and Section 8. Keeping information safe). 
• Expanded disclosures regarding artificial intelligence and automated decision-making (Section 7. Artificial intelligence and automated decision-making). 
• Updated and expanded privacy rights information for users in Canada, the UK, the EEA, California, and other U.S. states (Sections 11, 12, 13, and 14). 
• Clarified how users will be notified of future Privacy Policy updates (Section 15. Changes to this statement). 

Note on translation: This Privacy Policy (“Privacy Policy”) may have been translated into various languages for the convenience of End Users. While the translation is correct to the best of Leviton Manufacturing Co., Inc. and our affiliates (“Leviton” or “We”) knowledge, Leviton is not responsible or liable in the event of an inaccuracy. English is the controlling language of this Privacy Policy, and any translation has been prepared for you as a courtesy only. In the event of a conflict between the English-language version of this Privacy Policy and a version that has been translated into another language, the English-language version shall control. This paragraph does not apply to French-language versions provided to residents of Quebec, which are provided in accordance with applicable Quebec law.

This Privacy Policy applies to the use of the My Leviton web and mobile applications and related services, and the related operation of Leviton products that function through My Leviton, including Decora Smart, Decora Voice, and the Leviton Load Center (“Leviton Products”). It also applies to any Personal API Token that Leviton makes available through the App and to your use of the related application programming interface (“API”). Your use of the App, the Services and any Personal API Token is also governed by the My Leviton Terms of Use, available at https://myapp.leviton.com/tou, which is incorporated into this Privacy Policy by reference.

1. Acknowledgement and acceptance of terms

We are committed to protecting your privacy. This Privacy Policy sets forth our current privacy practices with regard to collecting, using, maintaining, protecting and disclosing the information we collect when you download, install, register, access or use the My Leviton Application (through the web application or through a downloaded application on your mobile device) (the “App”) as well as information collected from the Leviton Products themselves and through any Personal API Token issued to your account. This policy applies only to information we collect through the App, the Leviton Products and the API. This Privacy Policy describes our information practices. We process personal information under the legal basis applicable to the relevant activity and jurisdiction, and we obtain consent where required by law. This Privacy Policy does not apply to information that Leviton collects offline, on other Leviton websites or applications, or to any information that you may provide on any third-party websites or through third party service providers or products that you may access through the App, or otherwise. In particular, this Privacy Policy does not apply to any third-party application, integration, automation platform, script or service that you choose to connect to your account using a Personal API Token. Those third parties are not endorsed, supported or controlled by Leviton, and their handling of your information is governed by their own terms and privacy notices. Leviton’s website and third parties may have their own privacy policies, which we encourage you to read before providing information on or through them.

If you do not agree with our policies and practices, do not download, register with or use this App. By downloading, registering a Leviton Product, or using the App, you acknowledge that you have received this Privacy Policy. An acknowledgment of this Privacy Policy is not consent to processing for which applicable law requires a separate consent. Where we make material changes, we will provide notice through the App and, where required by law, obtain your consent before the change takes effect.

2. Information we collect and how we use it

For information specific to Canada, see Section 11. For the United Kingdom and European Economic Area, see Section 12. For California residents, see Section 13. For residents of other U.S. states, see Section 14.

Leviton collects information you provide as users who access the App, register for accounts, use the App, or request information as well as data from Leviton Product(s) once it is registered with a valid account on the App. Information is collected on an ongoing basis and when you access information using the App, which then accesses one or more Leviton or third-party servers. Leviton works with third party analytics companies (such as Adobe Analytics) to aid and improve the App’s functionality, and who may use technology to automatically collect the types of data listed below. Such data may be collected, analyzed and used for the following purposes: i) to enable you to access and use the App and connected Leviton Products and services, (i.e. account registration and management) ii) to operate and optimize the App and the user experience, iii) to send administrative information to you (i.e. updates to this policy), iv) to identify usage trends and to evaluate and create improved and more advanced features for the App and connected Leviton Products and services, v) to tailor marketing efforts and the like (subject to your choices in Section 10), vi) to protect our App, Leviton Products, and Services, including to authenticate users, issue and manage Personal API Tokens, monitor for abnormal or abusive traffic, apply rate limits, investigate suspected misuse, and suspend or revoke access, and/or vii) to comply with legal or regulatory requirements. Your information may be shared with third parties, such as service providers, in limited circumstances, as described below.

•       User Data. Set-up information you provide, including email address, name, address or coordinates (the location of your Leviton Products). Usernames, phone numbers, contact preferences and authentication data, including passwords (stored in hashed form) and multi-factor authentication settings.

•       Customer Support Data. Information you provide when you contact us for support, including the contents of your communications, call recordings (where notice is given), chat and email transcripts, and any photographs, videos or files you choose to send us. Photographs and videos you submit may contain images of individuals; we use them only to respond to your request and do not use them to generate a faceprint, voiceprint or other biometric identifier.

•       Usage Details. When you access and use the App, certain details of your access to and use of the App, including the resources that you access and use on or through the App may be automatically collected, including: direct adjustments to the Leviton products using the App, technical information from the Leviton products (to improve your experience over time and help troubleshoot issues), electricity usage, capacity, and power information (every time a Leviton Product is turned on or off, the App records the time and duration to offer features in usage history), current status of the Leviton Product, and usage schedules, among other related data necessary for the functionality of the device.

•       Device Telemetry. To support smart home automation, energy monitoring and technical support, the App and Leviton Products automatically transmit operational telemetry, device status, device and network identifiers, IP addresses, energy usage logs, firmware versions, room and device names you assign, and network connection metrics to Leviton’s cloud servers.

•       Personal API Token and API Data. If you generate a Personal API Token, we collect and log information about the Token and its use, including token creation, rotation and revocation events, API calls and endpoints accessed, timestamps, originating IP addresses, failed authentication attempts, rate-limit events, and indicators of abnormal, excessive or abusive traffic. We use this information to operate and secure the API, enforce the Terms of Use, apply rate limits, investigate and remediate abuse, and suspend, revoke or terminate access. Leviton does not receive or control the data that a third-party application you connect obtains through your Token; you are responsible for safeguarding your Token and for the applications you authorize.

•       Mobile Device Information. We may collect information about the mobile device from which you access the App, including the device's unique device identifier, IP address, operating system, browser type, mobile network information, the device's telephone number, in addition to the internet connection. Additionally, as needed from time to time, we may request access to certain features from your mobile device, including the microphone, camera, etc. We request these permissions only where needed for a feature you use, and you may grant or withdraw them at any time in your device settings.

•       Location Information. This App does not collect continuous background location from your mobile device. We collect the address or coordinates you provide at registration and environmental and location data (including approximate device location, time zone and Bluetooth-enabled device location) where needed to support Leviton Product features such as the Astronomical Clock, geofencing and scheduling. Precise geolocation is treated as sensitive personal information and is collected only with the permission you grant in your device settings.

•       App Usage. We collect the frequency of the App usage, frequency of individual features of the Leviton Products usage, and how features of the App and the related Leviton Products are used.

•       Partner Data. Some of your information or data provided to third-party products and services that interface with the Leviton Products, such as voice assistants and smart-home platforms, may also be provided to Leviton. We may also obtain information about you from joint partners, public databases and other third-parties.

•       Web Server Logs. When you visit our App, we may track information through web server logs to better administer the App and analyze its usage. Examples of information we may track include but is not limited to your Internet Protocol address, the type of browser or mobile device you use, the number of links you click within the App, the geographical location from which you accessed the App, the date and time of your visit, and the name of your Internet service provider.

•       Cookies and Similar Technologies. Our web application uses cookies, pixels, SDKs and similar technologies for authentication, security, preferences and analytics. Where required by law, we obtain your consent before setting non-essential cookies, and we honor opt-out preference signals, including the Global Privacy Control, as described in Sections 12 and 13.

Any information that we may have collected we may disclose or use, including, without restriction, any aggregated and anonymized information about our users, and information that does not identify any individual or device. We maintain deidentified information in deidentified form and do not attempt to reidentify it, except as permitted by law to test our deidentification processes.

Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy or as required by law. In general: account and registration data are retained for the life of your account and for a limited period afterward to complete deletion across our systems and backups; device telemetry, usage history and energy data are retained in identifiable form for the period needed to provide usage-history and diagnostic features and are then aggregated, deidentified or deleted; security, API and access logs are retained for the period needed for security monitoring, abuse investigation and legal compliance; Personal API Tokens remain active until you or Leviton revoke them; and customer support records, warranty records and records we are required to keep for tax, product-safety, legal or regulatory purposes are retained for the applicable statutory period. Criteria we use to set retention periods include the nature and sensitivity of the information, the purpose for which it was collected, and applicable legal, accounting, warranty and dispute-resolution requirements.

3. Notice on disclosure of user personal information

Leviton only collects information which we believe is necessary and where we have a valid legal purpose. Information about the legal bases on which we rely, and about Canadian consent requirements, is set out in Sections 11 and 14.

Leviton may share data with third party vendors, service providers, contractors, or agents, in each case under a written contract that limits their use of the information to the services they perform for us and requires appropriate confidentiality and security safeguards. These may include affiliate marketing programs, cloud computing and hosting services, data analytics services, data storage service providers, performance monitoring and testing tools, web hosting service providers, customer support and communications platforms, security and fraud-prevention providers, payment processors, and product engineering and design tools.

Leviton reserves the right to share aggregated, deidentified or anonymized usage statistics with its affiliates and strategic partners to help enhance its service offerings, but does not sell or share your personal information for cross-context behavioral advertising or targeted advertising, and has not done so in the preceding twelve (12) months. Leviton does not sell or share the personal information of consumers it knows to be under sixteen (16) years of age. Personal User information collected by or submitted to Leviton shall not be disclosed to any third parties without your permission, unless such information: (i) is used to fulfill your service requests; (ii) is required to be disclosed by law, regulation, legal process, law enforcement or government regulatory authorities, in which case we shall give you as much advance notice as is reasonably practicable and legally permissible in order to allow you to limit or restrict such disclosure; (iii) is required to be disclosed in order for us to protect our legal rights, enforce our Terms of Use, investigate suspected fraud, security incidents or abuse of the App, the Services or the API, or defend against liability; or (iv) is transferred in connection with a merger, acquisition, or liquidation of Leviton.

We may also share personal information under the following circumstances.

4. Affiliates

We may share your information with our affiliates, in which case, those affiliates will be bound by the terms of this privacy notice. Affiliates may include our parent company and any subsidiaries, joint venture partners, or other companies that we control or are under common control with us.

5. Business transfers

We may share your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisitions of all or a portion of our business to another company.

5.1 Third-party integrations you authorize

If you connect a third-party application, automation platform or service to your account—whether through a Personal API Token, a voice assistant, or another integration—you are directing us to make your account and device data available to that third party. Leviton does not endorse, support, certify or control those third parties, does not review their code or security practices, and is not responsible for what they do with your information. You should review their privacy notices before connecting, and you may disconnect an integration or revoke a Personal API Token at any time through your account settings.

Notwithstanding the foregoing, the Services may link to third-party websites, online services, mobile applications, and/or contain advertisements from third parties that are not affiliated with us, and which may link to other websites, services, or applications. The inclusion of a link or third party content does not constitute an endorsement by Leviton, and we can’t guarantee the safety and privacy of data you provide to any third parties. Data collected by third parties is not covered by this privacy notice. You should review any privacy notices of third parties before sharing data.

6. Internet based data transfer and international transfers

Given that the Internet is a global environment, using the Internet to collect and process personal data necessarily involves the transmission of data on an international basis. Accordingly, use of the App may involve processing and transmitting personal information across national borders as described below. Leviton is headquartered in the United States, and your personal information may be processed and stored in the United States and in other countries where Leviton or its service providers operate. Where we transfer personal data from the United Kingdom, the European Economic Area, Quebec or other jurisdictions that restrict cross-border transfers, we do so using an approved transfer mechanism, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, an adequacy decision, together with a transfer risk assessment where applicable. You may request further information about these safeguards by contacting privacy@leviton.com.

7. Artificial intelligence and automated decision-making

Leviton may use machine learning, artificial intelligence (“AI”), or automated processing in providing the App or related Services and for analytics purposes. Examples include energy-saving recommendations, custom scheduling and load-shedding suggestions, product diagnostics, support triage, and security and abuse detection, including detection of abnormal or abusive API traffic.

These features are provided for informational and convenience purposes only, and you retain final control over the settings of your Leviton Products. Leviton does not use AI or automated processing to make decisions that produce legal or similarly significant effects concerning you. Where we use automated decision-making technology in a manner that requires notice under applicable law, we will provide pre-use notice describing the purpose and logic involved, offer an opt-out where required, and provide a means to request human review of, and to appeal, the outcome.

We do not sell your personal information to third parties to train their AI models, and our contracts with service providers prohibit them from using your personal information to train their own models except as necessary to provide services to Leviton. If Leviton uses personal information to train or improve a model for an optional feature, Leviton will provide any notice, choice, or consent required by applicable law. You may object to or opt out of optional analytics where applicable by contacting privacy@leviton.com. Choices do not apply to processing that is necessary to operate, secure, or provide the App, Services, or Leviton Products, or that is required by law.

8. Keeping information safe

We maintain technical and organizational safeguards designed to protect personal information and proportionate to the nature of the information and relevant risks. These safeguards may include, as appropriate, encryption in transit and at rest, access controls, logging and monitoring, vulnerability management, multi-factor authentication, personnel training, and contractual security requirements for service providers. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information is at your own risk, and you should only access the Services within a secure environment.

You are responsible for maintaining the confidentiality of your account credentials and of any Personal API Token issued to your account. Do not share your Token, publish it in code repositories, logs or public forums, or use it with applications you do not trust. Anyone with your Token can access your data and control your devices within the permissions granted. If you believe your credentials or Token have been lost, disclosed, compromised or misused, revoke the Token in the App and notify us immediately at privacy@leviton.com.

In the event of a breach of security safeguards affecting your personal information, we will notify affected individuals and the applicable regulators where and within the timeframes required by applicable law.

9. Children under the age of 13

The App is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13 in violation of the Children’s Online Privacy Protection Act or other applicable law. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at privacy@leviton.com. Leviton’s Terms of Use provide that the App and Services are not intended for persons under 18 years of age.

10. Opting in/out and your communication choices

You may choose not to receive emails, newsletters or other marketing communications from Leviton at any time by clicking the "Unsubscribe" link in the email communication sent to your registered email account with the website or by visiting www.leviton.com/optout, or by contacting privacy@leviton.com. We will process your request promptly and, in any event, within ten (10) business days. Where applicable law requires your prior consent before we send commercial electronic messages, we will obtain that consent and will not make it a condition of creating an account or purchasing a product. We may continue to send you non-marketing administrative and transactional messages relating to your account, your Leviton Products, security and this Privacy Policy.

You may also access, correct or delete your account information, manage device permissions, and generate or revoke a Personal API Token, in the App’s account settings.

Response to your request

Once we receive and confirm your verifiable consumer request, we will respond within forty-five (45) days of its receipt. If we require more time (up to an additional forty-five (45) days or as otherwise permitted by law), we will inform you of the reason and extension period. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

11. For users in Canada

Leviton processes personal information about Canadian users in accordance with the Personal Information Protection and Electronic Documents Act, Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25), and other applicable provincial legislation. We will process your information only with your consent, express or implied, except in the limited circumstances permitted by law—for example, to investigate a breach of an agreement or a contravention of law, to detect and prevent fraud, in certain business transactions, to comply with a subpoena, warrant or court order, or where the information is publicly available as defined in the regulations.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting privacy@leviton.com. Withdrawing consent may mean we can no longer provide certain features of the App or the Leviton Products. You may also request access to, and correction of, your personal information, and, in Quebec, request portability of the computerized personal information you provided to us. We will respond within thirty (30) days.

Where required, Leviton conducts privacy impact assessments before implementing new systems or communicating personal information outside Quebec, and will notify the Commission d’accès à l’information and affected individuals of any confidentiality incident presenting a risk of serious injury. Quebec residents may contact Leviton’s designated Privacy Officer at privacy@leviton.com. Quebec users will be provided with the Privacy Policy and material notices in French. A French version may also be requested by contacting privacy@leviton.com.

12. For users residing in or citizens of the UK/EU only

This Section applies if you are located in the United Kingdom or the European Economic Area (EEA). For these purposes, Leviton Manufacturing Co., Inc., 201 N. Service Rd., Melville, NY 11747, is the controller of your personal data.

We process your personal data on the following legal bases: (i) performance of a contract, to create and operate your account, deliver the App, the Services and Leviton Product functionality, and provide support; (ii) our legitimate interests, to secure and improve the App, the Services and the API, detect and prevent fraud and abuse, and carry out product analytics, where those interests are not overridden by your rights; (iii) your consent, for optional marketing, non-essential cookies, precise location and any other processing for which consent is required, which you may withdraw at any time; and (iv) compliance with legal obligations.

Subject to applicable law, you have the right to: request access to your personal data; request rectification of inaccurate data; request erasure; request restriction of processing; object to processing carried out on the basis of legitimate interests and, at any time, to direct marketing; request data portability; withdraw consent without affecting the lawfulness of prior processing; and not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. You also have the right to lodge a complaint with your supervisory authority, including the UK Information Commissioner’s Office. If you are in the United Kingdom, you may submit a data-protection complaint to us at privacy@leviton.com; we will acknowledge it within thirty (30) days and respond without undue delay.

To make such a request, send an email to privacy@leviton.com, and include “GDPR/UK GDPR Personal Data Request” in the subject line, along with the following: your first and last name, physical address, contact email, the information you are seeking (time frame, subject matter, and any other relevant details), and in what capacity you have interacted with Leviton online. We will respond within one (1) month, which may be extended by up to two (2) further months for complex requests, in which case we will tell you why. Information about international transfers and the safeguards we apply is set out in Section 6.

13. Your California privacy rights – for users who are California residents

Leviton does not sell or share personal information for cross-context behavioral advertising. We honor opt-out preference signals, including the Global Privacy Control, transmitted by your browser or device, and we will display confirmation that an opt-out has been honored where required. Because we do not track consumers over time and across third-party websites for targeted advertising, we do not otherwise respond to Do Not Track (DNT) signals. California Civil Code § 1798.83 permits users of our App that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an e-mail to privacy@leviton.com or write to us at: Leviton Manufacturing Co., Inc., Attention: Legal Department, 201 N. Service Rd., Melville, NY 11747.

This section of Leviton’s Privacy Policy applies to California residents only, to comply with the requirements of the California Consumer Privacy Act of 2018, as amended (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”) (hereinafter collectively referred to as the “California Privacy Laws”), together with the implementing regulations of the California Privacy Protection Agency. Any terms defined within the California Privacy Laws have the same meaning when used in this Privacy Policy.

Information we collect

The App and Leviton Product(s) collect information that is reasonably capable of being associated with a particular consumer or household. Specifically, in the preceding twelve (12) months the App and the related Product(s) have collected the following categories of Personal Information (“PI”) from its consumers, as defined by the California Privacy Laws:

Category	Examples	Collected by Leviton?	Sold or Shared by Leviton (subject to the California Privacy Laws’ exceptions)?
A. Identifiers	A real name, alias, postal address, unique personal identifier, Internet protocol address, email address, account name, device identifier, Personal API Token identifier, or other similar identifier	YES	NO
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. Leviton collects only name, address, telephone number and, for paid subscriptions, payment information processed by a third-party payment processor; Leviton does not collect Social Security numbers, driver’s license numbers, passport numbers, medical or health insurance information	YES	NO
C. Sensitive Personal Information	Precise geolocation and account log-in credentials (account name in combination with a password or credential allowing access to the account). Leviton does not collect government identifiers, racial or ethnic origin, religious or philosophical beliefs, union membership, genetic or health information, sexual orientation, or the contents of mail or email where Leviton is not the intended recipient	YES (limited, as described)	NO. Leviton uses Sensitive PI only for purposes permitted by 11 Cal. Code Regs. § 7027(m) and therefore does not offer a separate right to limit
D. Protected classification characteristics under California or federal law	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO	NO
E. Commercial Information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES	NO
F. Biometric Information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. Leviton does not extract or store biometric templates or identifiers. Where you unlock the App using your device’s fingerprint or facial recognition, authentication occurs on your device and Leviton does not receive the biometric data	NO	NO
G. Internet or other similar network activity	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement, including App and API usage, device telemetry and server logs	YES	NO
H. Geolocation data	Physical location or movements. Leviton collects the address or coordinates of your Leviton Products and approximate device location to support product features; Leviton does not track your movements over time	YES	NO
I. Sensory data	Audio, electronic, visual, thermal olfactory, or similar information, limited to photographs, video, recordings and files you voluntarily submit to customer support	YES	NO
J. Professional or employment-related information	Current or past job history or performance evaluations. Leviton collects trade or professional affiliation only where you register for a contractor or professional version of the App	YES (limited)	NO
K. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g; 34 C.F.R. Part 99)	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO	NO
L. Inferences drawn from other personal information	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes	YES	NO

PI does not include:

•       Publicly available information from government records.

•       Deidentified or aggregated consumer information.

•       Information excluded from the California Privacy Laws’ scope, such as other categories of information protected by different laws.

Leviton obtains the PI listed above from the following categories of sources:

•       Directly from you. For example, from forms you complete and submit, from products and services you purchase or register with Leviton, and from your communications with customer support.

•       Indirectly from you. For example, from observing your actions on our App or paired Leviton Product(s), as more fully described in Section 2 above.

•       From third parties. For example, from service providers such as analytics and hosting providers, from integration partners and smart-home platforms you connect to your account, and from publicly available sources.

Use of PI

Leviton may use or disclose the PI collected for one or more of the business purposes listed below, subject to your right to limit or opt-out of such collection. If we disclose PI for a business purpose, we require the recipient to both keep that PI confidential and not use it for any purpose other than that specified by Leviton. The business purposes for collection or disclosure of PI are as follows:

•       To fulfill the reason you provided the information, to provide you with support, and to respond to your inquiries;

•       To develop, update, and improve our App and products;

•       To maintain the safety, security, and integrity of our App, products and services, including to authenticate users, issue and manage Personal API Tokens, monitor for and investigate abnormal, excessive or abusive traffic, apply rate limits, and suspend, revoke or terminate access;

•       To create, maintain, customize, and secure your account;

•       To process your requests or purchases;

•       To personalize your App experience, and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our App, third-party sites, and via email or text message (with your consent, where required by law);

•       To perform services on our behalf, including order fulfillment, customer service, analytics and storage; to undertake internal research for technological development and demonstration; and to perform quality and safety maintenance and debugging to identify and repair errors;

•       To respond to law enforcement requests and as required by applicable law or court order;

•       As described to you when collecting your PI or as otherwise set forth in the California Privacy Laws; or,

•       To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which PI held by Leviton or its affiliates is among the assets transferred.

Sharing PI

Leviton has disclosed the categories of PI identified above for business purposes to the following categories of recipients: service providers and contractors (including cloud hosting, analytics, customer support, communications, security and payment processing providers); Leviton affiliates; integration partners and smart-home platforms you authorize; and government authorities or other parties where required by law or to protect our legal rights. Leviton has not sold or shared PI, and has not disclosed Sensitive PI other than for permitted business purposes, in the preceding twelve (12) months.

Updates

We will not collect additional categories of PI or use the PI we collected for materially different, unrelated, or incompatible purposes without providing you with notice. We will retain your information only as long as necessary to comply with the purpose(s) for which it was collected, as further described in the Retention subsection of Section 2.

California consumers’ rights regarding PI

The California Privacy Laws provide California residents with specific rights regarding the collection and use of their PI. This section describes those rights and explains how to exercise them. Specifically, you have the right to request:

•       Disclosure of the categories of PI Leviton has collected about you;

•       Disclosure of the categories of sources from which the PI was collected;

•       Disclosure of Leviton’s business/commercial purpose for collecting and disclosing of the PI;

•       Disclosure of the categories of third parties with whom Leviton shares the PI;

•       Disclosure of the specific pieces of PI collected about you;

•       Correction of inaccurate PI that Leviton maintains about you;

•       Information about automated decision-making affecting you, and related access, opt-out, or appeal rights, where and when required by applicable law;

•       Deletion of the PI collected, subject to certain exceptions. Once we receive and confirm your request, we will delete (and direct our service providers and contractors to delete, if applicable) your PI from our records, unless an exception applies. An exception to your request may apply if retaining the information is necessary for us or our service provider(s) to do the following:

o   Complete the transaction for which we collected the PI, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;

o   Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;

o   Debug products to identify and repair errors;

o   Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;

o   Comply with the California Electronic Communications Privacy Act, Cal. Penal Code §§ 1546–1546.5;

o   Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided your consent;

o   Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with Leviton;

o   Comply with a legal subpoena or court order;

o   Make other internal and lawful uses of that information that are compatible with the context in which you provided it; or,

o   To provide technical support or troubleshooting related to your account or a Leviton product or service.

•       To opt out of the share or sale of PI, via the methods listed below. As stated above, Leviton does not sell or share PI; we honor opt-out preference signals, including the Global Privacy Control, and we do not require you to verify your identity to submit an opt-out request:

o   If you are 16 years of age or older, you may direct us to not share or sell your PI at any time.

o   Once you make an opt-out request, we will wait at least 12 months before asking you to reauthorize PI disclosure or sales. However, you may change your mind and opt back in to PI disclosures or sales at any time by supplying your PI to Leviton on its App or by contacting Leviton at privacy@leviton.com. You do not need to create an account with us to exercise your opt-out rights. We will only use the PI provided in an opt-out request to review and comply with the request.

•       To limit the use and disclosure of Sensitive Personal Information where Leviton uses it for purposes that are subject to the right to limit under the California Privacy Laws. As stated above, Leviton currently uses Sensitive PI only for purposes permitted by 11 Cal. Code Regs. § 7027(m) and therefore does not offer a separate limit request for those uses.

•       To not be discriminated against if you exercise your California Privacy Laws rights, meaning that Leviton will not deny you goods or services, charge you different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties, provide you a different level or quality of goods or services, suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. However, Leviton may offer and you may consent to receive certain financial incentives permitted by California Privacy Laws that can result in different prices, rates, or quality levels. Any California Privacy Laws-permitted financial incentive Leviton offers will reasonably relate to your PI’s value and contain written terms that describe the program’s material aspects. You may revoke your consent to participate or receive such financial incentives at any time.

Under the age of 16

Leviton’s App is not intended for children under 16 years of age. No one under age 16 may provide any PI on the App. We do not knowingly collect PI from children under 16, unless we receive affirmative authorization from either the consumer who is between 13 and 16 years of age, or the parent or guardian of a consumer less than 13 years of age. If you are under 16, do not use or provide any information on the App. If we learn we have collected or received PI from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at privacy@leviton.com.

Exercising rights under the California Privacy Laws

You can exercise any of the rights listed above by submitting a request to us using one of the three methods listed here:

•       Visiting our privacy request form at https://leviton.com/company/footer/privacy-policy;

•       Emailing us at privacy@leviton.com (and put “California Privacy Laws request” in the subject line, and include with specificity what you are requesting); or,

•       Calling Leviton’s toll-free number at 1 (877) 797-0879.

Responding to your request

Once we receive and confirm your request, we will respond within 45 days of its receipt. If we require more time (up to 90 days or as otherwise permitted by law), we will inform you of the reason and extension period in writing. Disclosures we provide will cover the 12-month period preceding the date we receive the request, unless you request information beyond that period and providing it would not be impossible or involve disproportionate effort. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your PI that is readily usable and should allow you to transfer the information from one entity to another without difficulty. If we deny your request, you may appeal by replying to our response or emailing privacy@leviton.com with “Privacy Request Appeal” in the subject line.

Who may make a request?

Only you, or a designated agent that you authorize to act on your behalf (with proof of authorization), may make a request related to your PI. You may also make a request on behalf of your minor child. You may only make a request for access or data portability twice within a 12-month period. The request must: (i) provide sufficient information that allows us to reasonably verify that you, or the person on whose behalf you are requesting, are the person about whom we collected PI; and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with PI if we cannot verify your identity or authority to make the request and confirm the PI relates to you. Making a request does not require you to create an account with us. We will only use the PI provided in a request to verify your identity. We will not collect additional personal information solely to verify a request, and we do not require verification for opt-out requests.

14. Your privacy rights in other U.S. states

If you are a resident of a U.S. state with an applicable comprehensive consumer privacy law, you may have the right, subject to that law and its exceptions, to: confirm whether we process your personal data and access it; obtain a copy in a portable format; correct inaccuracies; request deletion; and opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. Leviton does not sell personal data, does not use personal data for targeted advertising, and does not engage in such profiling.

Where required, we obtain your consent before processing sensitive data, including precise geolocation. We honor universal opt-out mechanisms, including the Global Privacy Control, in the states that require it. To exercise these rights, use the methods in Section 13 or contact privacy@leviton.com. We will respond within 45 days, which we may extend once by an additional 45 days where reasonably necessary. If we decline your request, you may appeal within a reasonable period by emailing privacy@leviton.com with “Privacy Request Appeal” in the subject line; we will respond to the appeal within 45 days (or 60 days where a state’s law so provides) and, if we deny the appeal, will tell you how to contact your state Attorney General.

Nevada residents may submit a verified request directing us not to sell their covered information by emailing privacy@leviton.com with “Nevada opt-out request” in the subject line; we will respond within 60 days.

15. Changes to this statement

Leviton may periodically update this Privacy Policy to reflect changes in our practices, technology or legal requirements. When we do, we will also revise the “updated” date at the top of this Privacy page. Where the changes are material, we will provide advance notice through the App, by email or by other means required by law, and, where required, we will obtain your consent before applying the change to information already collected. We encourage you to periodically review this privacy statement to stay informed about how we are helping to protect the personal information we collect. Your continued use of the service after an update does not replace any consent that applicable law requires for a specific processing activity.

16. Contact us

If you have questions regarding the security of the App, our Privacy Policy, and/or our information collection and dissemination practices, please contact us at privacy@leviton.com, and include in the subject line of the email “My Leviton App Privacy Policy request”.

You may also write to us at: Leviton Manufacturing Co., Inc., Attention: Legal Department – Privacy, 201 N. Service Rd., Melville, NY 11747, or call 1 (877) 797-0879. Quebec residents may contact our designated Privacy Officer, and UK and EEA residents may contact us regarding data protection matters, at the same address or at privacy@leviton.com.

Leviton Manufacturing Co., Inc. © 2026 All rights reserved.