Privacy Policy

What we collect

• Account details — name, email address and organization, from sign-up.
• Your portfolio records — properties, utility and vendor accounts, statements and invoices you upload or send to your Conduit billing addresses, and reports such as RUBS / utility-management exports.
• Billing details — card details are entered on and held by Stripe; Conduit only stores your subscription status, never card numbers.
• Free audit requests — the email address and the bill you submit on our public audit page.
• AI-assistant requests — when you use Conduit from an AI assistant such as ChatGPT, the assistant sends us your question or the bill figures you ask about. We keep the question text and the tool used, without your name or email, to improve our guides, and delete it after 12 months. If you ask the assistant to have us contact you, we receive the contact details you give it and treat them like a free audit request.
• Basic usage data — sign-in times and actions taken in your workspace (an audit trail you can see under Activity).

How we use it

To run the service for you: reading statements, matching them to accounts, finding missing bills and savings, sending the notifications you turn on, and billing your subscription, and as described under Aggregated Data and AI below. We do not sell personal information or your portfolio data in a form that identifies you or your properties, and we do not use it for advertising.

Aggregated Data and AI

We use the information you provide and data generated by your use of Conduit to create aggregated or de-identified data and to develop and improve analytics, benchmarks and AI models. Aggregated Data does not identify you, any individual or a specific property, project or account, and we may use and share it for any lawful purpose, including in data products offered to third parties. We do not sell personal information.

Who processes it for us

• WorkOS — sign-in and account management
• Convex — database, file storage and application backend
• Vercel — website hosting
• Resend — sending and receiving email (including bills emailed to Conduit)
• Anthropic — reading statement PDFs and writing summaries (data is not used to train models)
• Stripe — payments
• U.S. Census and NREL public APIs — a property's address is used to look up its utility and published rates

Retention and deletion

We keep your records while your workspace is active so your history and audit trail stay intact. Email us to export everything or to delete your workspace; we delete it within 30 days, apart from records we must keep for tax or legal reasons. Marketing and audit emails carry a one-click unsubscribe.

Security

Data is encrypted in transit, each customer's records are isolated to their own workspace, access is limited by role, and changes are written to an audit log.

Changes

If we change this policy in a way that matters, we will email account owners before it takes effect.