Privacy Policy — WattPal

WattPal, a product of BZS Commerce LLC ("we," "us," or "our"), operates wattpal.net. This policy explains what data we collect, why we collect it, and your rights.

1. Data we collect

SmartMeter Texas CSV — your 15-minute electricity usage file, uploaded by you. This contains your ESIID (meter ID) and usage history. It does not contain your name, address, or account number.
Email address — collected by Stripe at checkout. We use it only to email you a link to your results page. We do not use it for marketing.
Payment information — handled entirely by Stripe. WattPal never sees or stores your card number, CVV, or full payment details.
Session token — a random UUID generated when you start a session. Stored in your browser's sessionStorage and our database to associate your file with your results.
Optional contract context — if you choose to provide it, we store your contract status and expiration date with your session to personalize switching-timeline guidance. It does not affect plan rankings.
Voluntary feedback and testimonials — if you choose to submit feedback or a savings story, we collect the information you provide, including your first name, last initial, city, story, optional email, and the page from which you submitted it. With your required consent, we may publish your story, first name, last initial, and city as a testimonial. Your email is never published.
EFL Inspector uploads — if you use the public EFL Inspector, we receive the TDU you select and the PDF, PNG, or JPG you submit for one inspection. The file is processed transiently and is not retained by WattPal after the inspection. Please do not include personal account documents.

2. How we use your data

To analyze your electricity usage against Texas fixed-rate plans and return ranked results.
To email you a permanent link to your results page.
To cache analysis results so the results page loads quickly on repeat visits.
To show optional switching and renewal timing guidance without rerunning your plan analysis.

We do not sell your data. We do not share your data with electricity providers. We do not use your data for advertising.

3. Data retention

Uploaded CSV files — automatically deleted from our storage within 5 days of upload. We retain it briefly so we can re-run your analysis if plan data is updated.
Analysis results — retained for at least 6 months so your permanent results URL keeps working. Results contain ranked plan data only — no personal information.
Optional contract context — paid contract context remains with your permanent results until you replace or clear it. You can clear it directly from the results page. Unpaid sessions are scheduled for deletion after 24 hours; deletion by our database service may occur asynchronously.
Email address — retained only as long as needed to deliver your results email. We do not build mailing lists.
Feedback and testimonials — retained in our feedback inbox while needed to review feedback, respond when requested, and manage approved testimonials. You may request deletion at any time through the Contact button; a results session token is not required.

4. Third-party services

Stripe — payment processing. See stripe.com/privacy.
Google Cloud — infrastructure (Cloud Run, Firestore, Cloud Storage). Data is stored in the us-central1 region. See cloud.google.com/privacy.
Google Gemini API — used to parse Electricity Facts Label PDFs from PowerToChoose.org and documents submitted to the EFL Inspector. Inspector uploads are sent to Google for extraction and are not retained by WattPal after the request. Your SmartMeter usage data is never sent to Gemini.
Resend — processes results emails and voluntary feedback or testimonial submissions sent to our feedback inbox. Optional feedback email addresses are used only to reply and are never published.
Google Analytics (GA4) — we use Google Analytics to understand aggregate site usage (page views, session counts, general geography) and categorical use of optional contract timing. We do not send contract dates, calculated dates, days remaining, session tokens, emails, ESIIDs, or provider URL parameters to analytics. GA4 sets first-party cookies (_ga, _ga_*) that persist for up to 2 years. No personally identifiable information is sent to Google Analytics. You can opt out using the Google Analytics Opt-out Browser Add-on. See Google's Privacy Policy.

5. Cookies and tracking

WattPal does not use advertising cookies or sell data to third parties. We use Google Analytics (GA4) for anonymous aggregate analytics — see the Third-party services section above for details and opt-out options. No other tracking pixels or behavioral ad networks are used.

6. Your rights

You may request deletion of data associated with a results session by with the session token visible in your results URL. You may also request deletion of feedback or a testimonial through the same Contact button using the email address or attribution you submitted; no session token is required. We will delete associated records within 5 business days.

7. Security

Data is transmitted over HTTPS. Uploaded files are stored in a private Google Cloud Storage bucket accessible only to the WattPal service account. Stripe handles all payment data in their PCI-DSS Level 1 certified environment.

8. Changes to this policy

We may update this policy as the service evolves. Material changes will be noted at the top of this page with an updated effective date.

9. Contact

Questions? .