Effective Date: December 8, 2018
We collect a variety of information from you through the UtilityAPI website at utilityapi.com (the "Site") or the UtilityAPI-enabled third party software used by your third party technology provider ("Software"). This information is divided into three categories: information you submit, information we collect automatically, and information we collect from third parties.
To use the Service, you have to provide us with certain information about you and your utility account.
In order to use the Service, you'll need to provide us with certain information, including your name, contact information, and account authentication and access information for your utility's website, which can be used to access your Utility Data. We will only use this information to perform the actions listed in your Authorization Form (for example, collecting your Utility Data and providing it to you and your energy technology provider), unless you give us permission to use it or share it another way.
Our servers automatically collect certain basic information when you use the Site or the Software, such as log information and cookies.
These days, whenever you use a website, mobile application, or other internet service, there's certain information that almost always gets created and recorded automatically. The same is true when you use our Site or Software (even if you decide not to use the Service). Here is some of the types of information we collect:
Log data. When you visit the Site or use the Software, our servers automatically record information ("log data"), including information that your browser sends whenever you visit a website. This log data includes your computer's IP address, browser type, the webpage you were visiting before came to our Site or Software, and how you used the Site or Software (such what parts of the Site you viewed and when, and how often and how long you've used the Site).
Do Not Track Signals and Similar Mechanisms. We do not respond to browser-initiated Do Not Track signals, as the Internet industry is currently still working on Do Not Track standards, implementations, and solutions.
We get information from your utility, as authorized by you in your Authorization Form.
When you authorize us to do so, we collect your Utility Data from your utility in accordance with your Authorization Form.
We use the information we collect to provide you and develop the Service, provide you with information, and protect UtilityAPI and our users.
We internally use the information we collect about you as follows:
We share the Utility Data with the parties that you authorize, our service providers, and where required to comply with the law. We may also share authorization statistics with third parties.
We share and disclose the information we collect about you as follows:
We are not responsible for how Authorized Persons use your Utility Data once they download it.
If we get acquired by another company or engage in a similar transaction, your authorization record and logs will transfer to that other company, but your authorization will be revoked and Utility Data will not transfer to that company unless you re-authorize.
We don't provide your personal information to third parties so they can market to you without your consent.
We WILL NOT provide your personally identifiable information to third parties for their own marketing purposes without your written consent. Signing the consent form and agreeing to the Utility Account Holder Authorization and Agreement DOESN'T qualify as written consent for anyone other than the third parties listed on the consent form. We'll ask for any additional consent directly, if we ever do.
If you have any questions regarding this policy, or would like to change your preferences, you may contact us at firstname.lastname@example.org.
If you're a California resident, you have certain additional rights.
California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their 'personal information' (if any, and as defined under applicable California law) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit your request in an email to email@example.com.
You can see and delete your Utility Data anytime.
You can see and download the collected Utility Data collected through a link in the receipt email sent to your submitted email address, or you can request to access all Utility Data we have collected from your utility account at any time by sending an email to firstname.lastname@example.org.
You can also expire your authorization to share Utility Data at any time through the same receipt email. This expiration will delete your authentication and access information and halt the collection of new Utility Data with your Authorized Person(s), but it will not delete the Utility Data we previously collected and the third parties will continue to have access to that Utility Data until your authorization is revoked by either you, your utility, or your Authorized Persons. Your Authorization Form also provides the option of setting your authorization to automatically expire after a certain period of time.
To delete your Utility Data, utility account authentication, and utility account access information, you can revoke your authorization through the same receipt email, or by sending us a request to do so through an email sent to email@example.com. This only applies to Utility Data we store on our servers, not to Utility Data downloaded by Authorized Person(s). To delete downloaded Utility Data, contact your Authorized Person(s).
We take measures to protect your information, but no security measures are 100% effective.
We're committed to online data security, and for that reason we take technical and organizational measures to protect your data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. However, no method of transmission over the Internet, or method of electronic storage, is absolutely secure. Therefore, while we strive to protect your information, we cannot guarantee its absolute security.
We keep your authentication and access information until the authorization is expired. We keep your Utility Data until the authorization is revoked. We may have to keep your information for longer if legally required to do so.
When your authorization expires, we will delete your access and authentication information so no further Utility Data can be collected. We will keep Utility Data we previously collected unless you revoke the authorization.
When you revoke an authorization, we will immediately disable access to your Utility Data by your Authorized Persons, delete your authentication and access information and Utility Data from our database, and we will set your Utility Data to be deleted from our raw data storage upon the next scheduled raw data deletion period. Federal, state, local laws may require us to store certain information. In order to comply with those requirements, we may be unable to delete your information from our database until the expiration of the applicable period.
Your Utility Data and utility account authentication and access information will processed in your country, but other information may be processed in the United States, so you consent to the transfer of that information to the US.
Your Utility Data, utility account authentication, and utility account access information will be processed in your country and will not be transferred outside of that country. Other information, such as authorization receipts and logs, may be processed by us in the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world, such as the European Union. By using the Service, you agree to this Policy and you consent to the transfer of all such information to the United States, which may not offer a level of protection equivalent to that required in the European Union or certain other countries, and to the processing of that information as described in this Policy.
We don't knowingly collect information from children under 13.
This Policy applies to information we collect on or after the Effective Date above. This Policy may change, but those changes will not be retroactive unless you agree.