Privacy Policy — WattPal

WattPal, a product of BZS Commerce LLC ("we," "us," or "our"), operates wattpal.net. This policy explains what data we collect, why we collect it, and your rights.

1. Data we collect

SmartMeter Texas CSV — your 15-minute electricity usage file, uploaded by you. This contains your ESIID (meter ID) and usage history. It does not contain your name, address, or account number.
Email address — collected by Stripe at checkout. We use it only to email you a link to your results page. We do not use it for marketing.
Payment information — handled entirely by Stripe. WattPal never sees or stores your card number, CVV, or full payment details.
Session token — a random UUID generated when you start a session. Stored in your browser's sessionStorage and our database to associate your file with your results.

2. How we use your data

To analyze your electricity usage against Texas fixed-rate plans and return ranked results.
To email you a permanent link to your results page.
To cache analysis results so the results page loads quickly on repeat visits.

We do not sell your data. We do not share your data with electricity providers. We do not use your data for advertising.

3. Data retention

Uploaded CSV files — automatically deleted from our storage within 5 days of upload. We retain it briefly so we can re-run your analysis if plan data is updated.
Analysis results — retained for at least 6 months so your permanent results URL keeps working. Results contain ranked plan data only — no personal information.
Email address — retained only as long as needed to deliver your results email. We do not build mailing lists.

4. Third-party services

Stripe — payment processing. See stripe.com/privacy.
Google Cloud — infrastructure (Cloud Run, Firestore, Cloud Storage). Data is stored in the us-central1 region. See cloud.google.com/privacy.
Google Gemini API — used to parse Electricity Facts Label PDFs from PowerToChoose.org. Your usage data is never sent to Gemini.
Google Analytics (GA4) — we use Google Analytics to understand aggregate site usage (page views, session counts, general geography). GA4 sets first-party cookies (_ga, _ga_*) that persist for up to 2 years. No personally identifiable information is sent to Google Analytics. You can opt out using the Google Analytics Opt-out Browser Add-on. See Google's Privacy Policy.

5. Cookies and tracking

WattPal does not use advertising cookies or sell data to third parties. We use Google Analytics (GA4) for anonymous aggregate analytics — see the Third-party services section above for details and opt-out options. No other tracking pixels or behavioral ad networks are used.

6. Your rights

You may request deletion of any data associated with your session by with your session token (visible in your results URL). We will delete all associated records within 5 business days.

7. Security

Data is transmitted over HTTPS. Uploaded files are stored in a private Google Cloud Storage bucket accessible only to the WattPal service account. Stripe handles all payment data in their PCI-DSS Level 1 certified environment.

8. Changes to this policy

We may update this policy as the service evolves. Material changes will be noted at the top of this page with an updated effective date.

9. Contact

Questions? .