Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account Information: Name, email address, and password (securely hashed)
• Profile Data: Display name and preferences
• Communication: Contact form submissions and support requests
• Usage Data: Search queries, document interactions, and feature usage
• Payment Information: If we offer paid plans in the future, payment details may be processed by a payment provider (we do not store credit card numbers on our servers)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Send daily FERC order digest emails, OASIS transmission alert emails, and other regulatory update notifications
• Operate accounts and features you choose to use
• Respond to your comments, questions, and customer support requests
• Generate AI-powered summaries and recommendations personalized to your usage
• Monitor and analyze usage patterns to improve service quality
• Detect, prevent, and address technical issues and security threats
• Communicate with you about service updates, features, and promotional offers

3. Third-Party Services

We use the following third-party services to provide our platform:

• Google Cloud Platform: Infrastructure hosting and data storage (Firestore, Cloud Storage)
• Google Vertex AI: AI model processing for summaries and analysis
• Firebase Authentication: User authentication and account management
• Brevo (formerly Sendinblue): Email delivery for notifications and monitor digests
• Stripe: May be used for payment processing if paid plans are offered
• Google OAuth: Third-party login authentication

These services have their own privacy policies governing the use of your information. We share only the minimum data necessary for these services to function.

4. Data Storage and Security

We implement industry-standard security measures to protect your information:

• Passwords are hashed using bcrypt with salt
• Data is encrypted in transit using TLS/SSL
• Data is stored in secure Google Cloud data centers
• Access to user data is restricted to authorized personnel only
• We regularly audit our security practices and conduct vulnerability assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We will retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain service quality and security

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and personal data
• Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails via the link in each email
• Object: Object to certain processing of your data

To exercise these rights, contact us at jciarabellini@gmail.com. We will respond within 30 days.

7. Email Communications

By creating an account, you consent to receive:

• Monitor emails: Automated FERC order digest and OASIS change alert emails (as configured in Monitor Settings)
• Transactional Emails: Account-related notifications, password resets, and service updates
• Service Updates: Important announcements about service changes or maintenance
• Marketing Communications: Feature announcements and promotional offers (opt-out available)

You can unsubscribe from monitor digest and alert emails and marketing emails at any time using the unsubscribe link in each email or through your account settings. Transactional emails related to your account cannot be disabled.

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Keep you logged in during your session
• Remember your preferences and settings
• Understand how you interact with our service
• Improve service performance and user experience

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. This may affect your ability to use certain features of the service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that your data receives an adequate level of protection.

10. Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will delete such information promptly.

11. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Lawful basis for processing: Consent and legitimate interests
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to data portability in a structured, commonly used format

12. CCPA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights:

• Right to know what personal information we collect and how we use it
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. We will also send an email notification for significant changes. Your continued use of the service after such modifications constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: jciarabellini@gmail.com