Privacy

The public calculator collects an optional name, email, phone, and company when you consent to be contacted. It does not ask for a street address. A covered copy of a bill photo can be sent so the readings can be taken. That copy is not kept.

• Customer and staff sign-in uses Supabase Auth. There is no unsigned event cookie.
• A lead is stored only after you tick the contact-consent box. Anonymous inserts go through a checked server path with a honeypot and a basic rate limit.
• You can read your own leads and bill-check submissions. A manager can read all of them.
• Auditor certificates go to a private storage bucket. Other customers cannot open them.
• Pasted bill text is used to fill the check. Account numbers are not required and are not stored with the lead.
• The public check records whether it passed. It does not store a money or kWh result.