Privacy Policy

1. Information We Collect

To provide our services (both free tools and paid reports), we collect the following information:

• Personal Data (Paid Accounts): Your email address and zip code. We use your zip code strictly to determine TDU service area eligibility (e.g., Oncor vs. CenterPoint) and plan availability.
• Calculator Input Data (Free Tools): Information you voluntarily enter into our "Bill Savings Calculator," including bill amounts, kWh usage, TDU region, and bill month. This data is processed client-side in your browser to generate your estimate.
• Usage Profile: The data you manually enter (average monthly kWh) or the profile you select for a paid report. We use this to simulate your annual costs against the Texas seasonality curve.
• Search Preferences: Specific criteria you select, such as "Contract Length Preference", "I might move soon" (flexibility mode), or "Include 1-2 Star Providers". We store these with your purchase record to generate and reproduce the specific report you requested.
• Confirmations: Whether you confirmed that your home does not have solar panels and that you accepted the Terms of Service and Privacy Policy. These are stored as part of your report footprint.
• Account & Credit Data: We maintain a record of your available Analysis Credits and your redemption history.
• Technical Data: We collect standard log data (IP address, browser type) to ensure site security and prevent fraudulent transactions.

2. How We Use Your Information

We use the collected data for the following purposes:

• To perform calculations and generate your savings report or free estimate.
• To manage your Analysis Credit balance and process secure payments via Stripe.
• To email you results, purchase receipts, and critical service updates.
• To measure the performance of our marketing campaigns (see "Cookies" below).

3. Data Storage and Retention

We are committed to data minimization:

• Calculator Inputs: Data entered into free tools is primarily processed client-side (in your browser) or transiently. We do not create a permanent user profile for calculator users unless they proceed to purchase a full report.
• Analysis Inputs (Paid): Usage data is stored with your account to allow you to refresh your report later.
• Analysis Reports: Generated reports are stored securely so you can access them via your unique link.
• Credit Balance: We retain your credit balance indefinitely so they are available for future use. Requesting data deletion will permanently erase your credit balance.
• Payment Data: We do not store your credit card information. All payment processing is handled by Stripe.

4. Sharing Your Information

We only share information with trusted infrastructure providers required to operate our service:

• Amazon Web Services: For secure cloud hosting and database storage.
• Stripe: For secure, PCI-compliant payment processing.
• Amazon SES: For delivering your analysis reports via email.

5. Cookies & Tracking

We use a limited number of cookies required for the site to function and measure performance:

• Essential Cookies: Session cookies to keep you logged in during checkout and Security cookies to prevent Cross-Site Request Forgery (CSRF) attacks.
• Stripe Cookies: To detect fraud and process payments securely.
• Analytics Cookies: We use Google Analytics (GA4) for page view analytics and Google Ads conversion tracking to measure the effectiveness of our advertising. This helps us understand site usage patterns and whether users who clicked our ads purchased a report. We do not use this data to target you with ads on other websites.

6. Your Rights (Texas Data Privacy and Security Act)

As a Texas-based service, we respect your rights under the TDPSA. You have the right to:

• Access & Correct: Confirm processing and correct inaccuracies in your data.
• Delete: Request the deletion of personal data provided by or obtained about you.
• Portable Data: Obtain a copy of your data in a portable format.

To exercise these rights, please contact our technical team via the email or address below.

7. Security

We use industry-standard security measures to protect your information, including:

• Encryption: All data is encrypted in transit (SSL/TLS) and at rest (AES-256).
• Report Access Control: Your analysis report is protected by email verification. To view a report, you must confirm the email address associated with that purchase. This prevents unauthorized access even if someone guesses or stumbles upon a report URL.
• No Shared Links: Report URLs are generated with unique, non-sequential identifiers. They cannot be enumerated or predicted.
• Payment Isolation: We never see or store your credit card number. All payment data is handled exclusively by Stripe's PCI-compliant infrastructure.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of the Service after any modification constitutes acceptance of the revised policy. For material changes that significantly affect how we handle your personal data, we will make reasonable efforts to provide advance notice (such as a banner on the site or an email to active account holders).

9. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected personal data from a minor, we will take steps to delete that information promptly.