NOTE: If you are a UtilityAPI data services user, your use of UtilityAPI is covered by the Data Services Privacy Policy.

Effective Date: December 8, 2018

We wrote this Utility Account Holder Privacy Policy to help you understand what information we collect, how we use it, and what choices you have. Some of the concepts below are a little technical, but we’ve tried our best to explain things in a simple and clear way. We welcome your questions and comments on this policy; you can contact us at support@utilityapi.com.

UtilityAPI provides a platform that allows you to share your utility account, billing, and usage information (“Utility Data”) with third parties that you authorize (the “Service”). When you use the Site, Software, or the Service, you consent to the current version of this Privacy Policy. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICE.

This Utility Account Holder Privacy Policy only applies to utility account holders who wish to share their Utility Data with third parties. If you are a party who wishes to use our Service to access Utility Data from utility account holders, our Service Privacy Policy applies.

1. Information We Collect

We collect a variety of information from you through the UtilityAPI website at utilityapi.com (the “Site”) or the UtilityAPI-enabled third party software used by your third party technology provider (“Software”). This information is divided into three categories: information you submit,information we collect automatically, and information we collect from third parties.

(a) Information You Submit

To use the Service, you have to provide us with certain information about you and your utility account.

In order to use the Service, you’ll need to provide us with certain information, including your name, contact information, and account authentication and access information for your utility’s website, which can be used to access your Utility Data. We will only use this information to perform the actions listed in your Authorization Form (for example, collecting your Utility Data and providing it to you and your energy technology provider), unless you give us permission to use it or share it another way.

(b) Information We Collect Automatically

Our servers automatically collect certain basic information when you use the Site or the Software, such as log information and cookies.

These days, whenever you use a website, mobile application, or other internet service, there’s certain information that almost always gets created and recorded automatically. The same is true when you use our Site or Software (even if you decide not to use the Service). Here is some of the types of information we collect:

Log data. When you visit the Site or use the Software, our servers automatically record information (“log data”), including information that your browser sends whenever you visit a website. This log data includes your computer’s IP address, browser type, the webpage you were visiting before came to our Site or Software, and how you used the Site or Software (such what parts of the Site you viewed and when, and how often and how long you’ve used the Site).

Cookies. “Cookies” are small text files containing a string of alphanumeric characters that are downloaded by your web browser when you visit a web site. We may use cookies for purposes of authorizing access to content and identifying users across multiple requests. We may use both session cookies and persistent cookies when you access and use the Site or Software. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to the Site or Software. Most web browsers automatically accept cookies, but your browser may allow you to modify your browser settings to decline certain cookies if you prefer. If you disable cookies, you may not be able to use all of the features and functionality of the Site or Software.

Do Not Track Signals and Similar Mechanisms. We do not respond to browser-initiated Do Not Track signals, as the Internet industry is currently still working on Do Not Track standards, implementations, and solutions.

(c) Information We Collect Automatically

We get information from your utility, as authorized by you in your Authorization Form.

When you authorize us to do so, we collect your Utility Data from your utility in accordance with your Authorization Form.

1. How Do We Use the Information?

We use the information we collect to provide you and develop the Service, provide you with information, and protect UtilityAPI and our users.

We internally use the information we collect about you as follows:

1. We will use your information for the purposes for which you gave it to us, including to provide you the Service.
2. We may use your information to communicate with you about our Service, alert you to changes in our policies or agreements that may affect you, or to respond to questions you email to us.
3. We may use your information in order to troubleshoot or develop our services.
4. To enforce our Utility Account Holder Authorization and Agreement, protect the security and integrity of the Service and prevent fraud and other prohibited or illegal activities.

1. How is the Information Shared or Disclosed?

We share the Utility Data with the parties that you authorize, our service providers, and where required to comply with the law. We may also share authorization statistics with third parties.

We share and disclose the information we collect about you as follows:

1. We will share your Utility Data with the third parties you have authorized (“Authorized Persons”). We do NOT share your authentication and access information (e.g. login credentials) with these parties.
2. We may share your authorization information with your utility. For example, we may disclose your authorization details when your utility asks for proof of authorization.
3. We may share your information with contractors and third party service providers that help us operate our business. These contractors and third party service providers may be provided with access to your information needed to perform their functions but may not use such information for any other purpose. For example, we may use contractors for technical database support and troubleshooting.
4. We may provide third parties with authorization statistics about our user base and its usage patterns. This may include making these statistics available on the Site. Some examples of these types of statistics include the total number of authorizations per month. We do NOT provide third parties with your Utility Data.
5. We will also disclose information when we believe that disclosure is reasonably necessary to comply with a law, regulation or legal process (like a court order, search warrant, or subpoena); to protect the safety, rights, or property of the public, any person, or UtilityAPI; or to detect, prevent, or otherwise address fraud, security or technical issues.

1. Utility Data Downloaded by Authorized Persons

We are not responsible for how Authorized Persons use your Utility Data once they download it.

The Service permits your Authorized Persons to download your Utility Data. We are not responsible for how Authorized Persons use your Utility Data after it is downloaded. The use, and disclosure of your downloaded Utility Data is subject to the privacy policies of those Authorized Persons, and not this Privacy Policy.

1. Business Transfers

If we get acquired by another company or engage in a similar transaction, your authorization record and logs will transfer to that other company, but your authorization will be revoked and Utility Data will not transfer to that company unless you re-authorize.

In the event of a merger, sale of capital stock or assets, reorganization, consolidation or similar transaction (a “Business Transfer”) involving UtilityAPI, the information we possess (including personally identifiable information) shall be transferred as a corporate asset to the acquiring entity, provided that such entity will continue to handle such information in accordance with this Privacy Policy. This DOESN’T include your Utility Data; your authorization for us to collect and share that information will be revoked in the event of a Business Transfer unless you re-authorize by the conclusion of the transfer.

1. Third Party Marketing

We don’t provide your personal information to third parties so they can market to you without your consent.

We WILL NOT provide your personally identifiable information to third parties for their own marketing purposes without your written consent. Signing the consent form and agreeing to the Utility Account Holder Authorization and Agreement DOESN’T qualify as written consent for anyone other than the third parties listed on the consent form. We’ll ask for any additional consent directly, if we ever do.

If you have any questions regarding this policy, or would like to change your preferences, you may contact us at support@utilityapi.com.

1. Your California Privacy Rights

If you’re a California resident, you have certain additional rights.

California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their ‘personal information’ (if any, and as defined under applicable California law) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit your request in an email to support@utilityapi.com.

1. Your Choices About Your Information

You can see and delete your Utility Data anytime.

You can see and download the collected Utility Data collected through a link in the receipt email sent to your submitted email address, or you can request to access all Utility Data we have collected from your utility account at any time by sending an email to support@utilityapi.com.

You can also expire your authorization to share Utility Data at any time through the same receipt email. This expiration will delete your authentication and access information and halt the collection of new Utility Data with your Authorized Person(s), but it will not delete the Utility Data we previously collected and the third parties will continue to have access to that Utility Data until your authorization is revoked by either you, your utility, or your Authorized Persons. Your Authorization Form also provides the option of setting your authorization to automatically expire after a certain period of time.

To delete your Utility Data, utility account authentication, and utility account access information, you can revoke your authorization through the same receipt email, or by sending us a request to do so through an email sent to support@utilityapi.com. This only applies to Utility Data we store on our servers, not to Utility Data downloaded by Authorized Person(s). To delete downloaded Utility Data, contact your Authorized Person(s).

1. Security

We take measures to protect your information, but no security measures are 100% effective.

We’re committed to online data security, and for that reason we take technical and organizational measures to protect your data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. However, no method of transmission over the Internet, or method of electronic storage, is absolutely secure. Therefore, while we strive to protect your information, we cannot guarantee its absolute security.

1. How Long We Keep Your Information

We keep your authentication and access information until the authorization is expired. We keep your Utility Data until the authorization is revoked. We may have to keep your information for longer if legally required to do so.

When your authorization expires, we will delete your access and authentication information so no further Utility Data can be collected. We will keep Utility Data we previously collected unless you revoke the authorization.

When you revoke an authorization, we will immediately disable access to your Utility Data by your Authorized Persons, delete your authentication and access information and Utility Data from our database, and we will set your Utility Data to be deleted from our raw data storage upon the next scheduled raw data deletion period. Federal, state, local laws may require us to store certain information. In order to comply with those requirements, we may be unable to delete your information from our database until the expiration of the applicable period.

1. International Users and Consent to Transfer

Your Utility Data and utility account authentication and access information will processed in your country, but other information may be processed in the United States, so you consent to the transfer of that information to the US.

Your Utility Data, utility account authentication, and utility account access information will be processed in your country and will not be transferred outside of that country. Other information, such as authorization receipts and logs, may be processed by us in the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world, such as the European Union. By using the Service, you agree to this Policy and you consent to the transfer of all such information to the United States, which may not offer a level of protection equivalent to that required in the European Union or certain other countries, and to the processing of that information as described in this Policy.

1. Third Party Links and Services

There might be links to third party sites on our Site. We’re not responsible for those sites, and your use of them is covered by those sites’ privacy policies, not our Privacy Policy.

The Site may contain links to third-party websites. UtilityAPI is not responsible for the content or practices of those websites or services. The collection, use, and disclosure of your personal and other information is subject to the privacy policies of the third party websites or services, and not this Privacy Policy.

1. Children Under 13

We don’t knowingly collect information from children under 13.

UtilityAPI doesn’t knowingly collect information from children under 13. If you believe that your child under the age of 13 has provided personal information to us through the Site, contact us at support@utilityapi.com or the mailing address at the end of this Privacy Policy and we’ll work to delete any such personally identifiable information.

1. Effective Date; Changes

This Policy applies to information we collect on or after the Effective Date above. This Policy may change, but those changes will not be retroactive unless you agree.

This Privacy Policy applies to all information collected by us or provided to us on and after the Effective Date (which you can find at the top of this page). We may occasionally make changes to this Privacy Policy, and if we do, we’ll post any changes on this page. By continuing to access or use the Site or Software, you agree to these changes to be effective on a going-forward basis. We won’t retroactively apply any material change to the Policy without first obtaining your consent.

1. Contacting Us

If you have any questions about this Privacy Policy, please contact us at support@utilityapi.com or (510) 907-0009 or UtilityAPI, Attn: Privacy Questions, 1212 Broadway, 16th Floor, Oakland, CA 94612.