Privacy Policy

1 What we collect

When you create a GridSaver account and use the service, we collect the following information:

• • Name, email address, phone number, and home address
• • State and ZIP code
• • Utility company, monthly kWh usage, current electricity rate, and current supplier
• • Energy preferences (e.g. renewable preference, contract length preference)
• • Solar system details, if provided (system size in kW, install date)
• • SREC enrollment status
• • Rate scan history and switch alert history

2 What we do NOT collect

We are deliberate about not collecting sensitive information that is not needed for our service:

• ✕ Utility account credentials or passwords — we never ask for these
• ✕ Social Security numbers
• ✕ Credit card numbers — Stripe handles all payment processing with PCI-DSS compliance
• ✕ Passwords — we use email-only (magic link) authentication

3 How we use your data

• • To scan electricity rates in your state and identify better offers
• • To send you rate alerts and SREC price notifications when significant changes occur
• • To power the Aria AI chat — we pass your state, usage, and current rate as context, but never your name or email
• • To improve our rate-matching algorithms and personalized recommendations

4 Third parties we share with

We share your data only with the following service providers, for specific purposes:

We do not sell your personal data to any third parties, including energy suppliers, for marketing purposes.

5 Your rights

• • Access — View all data we hold about you in your account dashboard
• • Correct — Update your information at any time from your Profile page
• • Delete — Request deletion by emailing support@grid-saver.com

6 Data retention

We retain your data for as long as your account is active. If you request deletion, your data is permanently removed from our systems within 30 days. Anonymized, aggregated usage statistics (e.g. average kWh usage by state) may be retained indefinitely as they cannot be linked back to you.

7 Security

• • PostgreSQL database with SSL encryption on Railway
• • HTTPS enforced on all pages
• • Email-only (magic link) authentication — no passwords stored

8 Children

GridSaver is not intended for users under the age of 18. Electricity contracts are legal agreements that require an adult. We do not knowingly collect personal data from children.

9 Contact

If you have questions about this Privacy Policy or how your data is handled, please contact us at support@grid-saver.com.