Privacy Policy

1. Overview

Ungrid.ai (“we,” “us,” or “our”) is operated by Matthew Shilts. This page explains what data we collect, why we collect it, how long we keep it, and what control you have.

Plain English summary: we collect the minimum needed to run monitoring and alerts, we do not sell your data, and we do not share it for advertising.

1.1 At a glance

• We collect: account details, system telemetry, and delivery settings (email) so alerts can work.
• We do not collect: full card numbers (payments are handled by Stripe).
• We use your data for: service delivery, reliability, billing, and required legal/compliance purposes.
• We keep monitoring history: up to 90 days by default.
• You can request: access, correction, export, or deletion at support@ungrid.ai.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address — for account login, alert delivery, and communication
• Name — for personalized communications
• Password — stored as a secure hash, never in plaintext

2.2 Third-Party Monitoring Credentials

To monitor your power system, we collect login credentials for your monitoring platform (e.g., Victron VRM, EG4 Cloud). These credentials are:

• Encrypted and stored in Google Cloud Secret Manager
• Used solely to read your system data
• Never stored in plaintext or logged
• Deleted when you remove your account

2.3 System Monitoring Data

We collect energy system data including battery state of charge, solar production, load consumption, and system status. This data is retained only as long as needed to provide the Service (up to 90 days).

2.4 Alert Delivery Information

We collect email addresses for alert recipients (up to 5 per account).

2.5 Payment Information

Payment processing is handled by Stripe. We do not collect or store your card number. We receive only subscription status, last four digits (for display), and billing history.

2.6 Usage Data

We may collect basic usage data such as pages visited, alert delivery timestamps, and account activity logs.

3. How We Use Your Information

• Provide and maintain monitoring, alerting, and daily briefings
• Authenticate your account and apply notification preferences
• Process subscriptions and billing events through Stripe
• Troubleshoot outages, failed alerts, and integration issues
• Improve reliability using aggregated or de-identified usage patterns
• Comply with legal obligations

3.1 Data Sharing

We share data only with service providers needed to run Ungrid.ai (cloud hosting, billing, message delivery). We do not sell personal data and we do not share personal data with ad networks.

4. What We Do NOT Do

• We never sell your personal or energy data to third parties
• We never share your data for advertising or marketing by third parties
• We never monetize your energy usage patterns
• We never use your data to train machine learning models for sale
• We do not use third-party tracking cookies or advertising pixels

5. Data Storage and Security

Your data is stored on Google Cloud Platform. All data is encrypted in transit (TLS/HTTPS) and at rest (Google-managed encryption keys). Monitoring credentials receive additional encryption via Secret Manager. Access to production data is limited to authorized personnel and automated services under the principle of least privilege.

6. Data Retention

• Account data — retained while your account is active
• Monitoring data — retained for up to 90 days
• Credentials — deleted immediately when you disconnect a system or delete your account
• Payment records — retained as required by financial regulations (typically 7 years)

When you delete your account, we delete your personal data, monitoring credentials, and system data. We may retain anonymized, aggregated data for service improvement.

7. Third-Party Services

• Google Cloud Platform — infrastructure and data storage
• Stripe — payment processing
• Victron VRM / EG4 Cloud — system data reading (using your credentials)

8. Your Rights

Email support@ungrid.ai from your account email to exercise any of the following rights:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data upon request
• Withdraw consent by cancelling your account

We aim to acknowledge requests within 5 business days and complete most requests within 30 days.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. For significant changes, we will also notify you via email.

11. Contact

Questions about this Privacy Policy: support@ungrid.ai