Privacy Policy

Introduction

This Privacy Policy explains how Grid Getter ("we," "our," or "us") collects, uses, stores, and protects information from users and via connected third-party services (e.g., Tesla). By using our platform, you agree to this Privacy Policy.

1. Information We Collect

User-Provided Data: When you register for an account, we collect your email and profile details such as name.

Linked Data: When you authorize your Tesla account, we collect related energy, battery, solar, and site data for comparison and auditing—you control how long we retain it.

Technical & Auth Data: We collect IP addresses, authentication tokens, and logs solely for security and audit purposes. This data is never shared or sold.

Location Data: You may optionally provide your approximate location so we can retrieve local weather data to improve solar output forecasting. We collect your location once per site and store only approximate geographic coordinates — never your street address. We do not sell or share your location data with third parties. You may revoke location access at any time, and upon revocation all stored location data for your site is permanently deleted.

Push Notification Tokens: If you enable push notifications on a mobile device, we store a device token to deliver energy alerts, automation updates, and service notifications. You may disable push notifications at any time through your device settings, and we will no longer send notifications to that device.

2. How Data Is Collected

All data is collected directly from you, through forms or OAuth-based third-party connections. We use essential cookies for session security and functionality. With your consent, we also use analytics cookies to measure site usage (see Analytics & Tracking below).

3. Legal Basis & Purpose of Processing

We process your data to deliver services like grid comparisons, automations, and notifications. Where applicable, processing is based on consent or necessity to fulfill our service.

4. Data Retention

We retain your account and Tesla-linked data only as long as your account is active or as required by law. You may request early deletion at any time.

When you delete your account, we permanently remove all associated data across our systems, including your profile, linked energy data, automation configurations, subscription records, and any stored location data. Certain transaction records may be retained as required by law or payment processor obligations.

5. Data Security

We host on AWS and protect your data with encryption at rest and in transit, strict access controls, logging, and periodic security audits.

6. Third-Party Services

We use third-party providers to deliver our service:

• Tesla API for energy data access (with your consent).
• AWS Cognito for user authentication and session management.
• Hosting & Infrastructure via AWS.
• Stripe for processing web subscription payments. Stripe receives your payment method information and billing details.
• Apple App Store for processing iOS in-app subscription purchases. Apple manages payment and renewal on your behalf.
• Google Play for processing Android in-app subscription purchases. Google manages payment and renewal on your behalf.
• Google reCAPTCHA to prevent spam.
• Google Analytics (via Google Tag Manager) to collect aggregated usage and performance data for improving the site (only with your consent via the cookie banner).
• PostHog (via Google Tag Manager) for product analytics and usage insights such as page views, session duration, and feature adoption (only with your consent via the cookie banner).
• Email service provider for essential transactional notifications (e.g., account verification, password resets).
• Email marketing service provider for lifecycle communications related to your account and subscription status. We share your email address and subscription status with this provider. You may unsubscribe from marketing emails at any time.
• Weather Data Provider for local weather conditions used in energy generation forecasting (only when you opt in to location-based features).

No third-party service receives your data for advertising or profiling purposes.

Analytics & Tracking

With your consent we use Google Analytics and PostHog (both loaded via Google Tag Manager) to collect aggregated information about how visitors use our site — for example, pages visited, browser and device types, approximate geographic region, session duration, and performance metrics. We do not use these tools to collect or store personal account data. Where possible, we enable privacy-enhancing features such as IP anonymization.

You can opt out of all analytics tracking using the cookie banner that appears on your first visit. If you reject analytics cookies, neither Google Analytics nor PostHog will be loaded for your browser (we store your choice in localStorage under cookie_consent).

For information about how Google uses data, see Google's Privacy & Terms. For PostHog, see PostHog's Privacy Policy.

7. User Rights

You have the right to access, correct, or delete your data. You can also revoke Tesla access or location data access at any time. You may delete your account directly within the app or by submitting a request via support@gridgetter.com—we aim to respond within 30 days.

8. International Data Transfers

While we operate in the U.S., your data may reside on global cloud infrastructure. Transfers comply with applicable laws and safeguards.

9. Privacy by Design

Our platform follows a "privacy by design" approach—collecting only necessary data, implementing strong data protection, and putting your privacy as a priority throughout the system.

10. Refunds and Cancellation

All fees paid are non-refundable except as required by applicable law. Any changes in your subscription (such as upgrades, downgrades, or cancellations) may result in proration credits—but these credits are not cash refunds.

This policy applies to all subscriptions and services provided and is prominently displayed at check-out and in your account dashboard.

11. Changes to This Policy

We may update this policy. Major changes will be communicated via email and updated here with an updated effective date.