Privacy & data handling

What we process

• Interval data (30-min kWh): parsed in memory during your request; the uploaded file is never written to disk and is discarded immediately after analysis.
• Bill inputs you type (unit rates, standing charge, MIC, contract end): stored as bare numbers tied to your session.
• Benchmark aggregates (opt-in only): anonymized, aggregated ranges — never identifiable back to you or your business.

What we never do

• Store raw uploaded files
• Send your data to third parties for marketing
• Use tracking cookies or ad pixels

Your rights (GDPR)

Access, correct, export or delete your data — email the address on the contact page. Deletion is honoured within 30 days. Breach notification to the Irish DPC within 72h where required.

Retention

Derived metrics: 12 months. Anonymized aggregates: indefinite. Lawful basis: consent (upload) + legitimate interest (analysis).