Privacy Policy

Effective date: April 27, 2026 Last updated: April 27, 2026

This Privacy Policy explains how ASA Energy Consulting Ltd. ("we," "us," "our") collects, uses, stores, and protects your personal information when you use EnergyIntel ("the Service").

We are based in Vancouver, British Columbia, Canada. Your data is stored and processed in Canada.

1. What We Collect

Account Information

When you create an account, we collect:

• Your name
• Your email address
• Your organization name
• A password (stored as a hashed value, never in plain text)

Customer Data

When you use the Service, you upload data about your facilities, systems, and operations. This may include:

• Facility names, locations, and configurations
• System specifications and operating parameters
• Operating data (energy use, flow rates, pressures, temperatures, etc.)
• Energy rates and financial information you choose to enter
• Documents and reports you upload

Usage Information

We automatically collect basic technical information when you use the Service:

• Browser type and version
• Device information
• IP address
• Pages visited and actions taken
• Timestamps of activity

Communications

If you contact us by email or through the Service, we keep a record of that correspondence.

2. How We Use Your Information

We use your information to:

• Provide and operate the Service
• Authenticate your account and protect against unauthorized access
• Process and store the data you upload
• Generate BEF scores, ECM recommendations, and reports based on your inputs
• Communicate with you about your account, the Service, or support requests
• Improve the Service, including methodology, accuracy, and features
• Comply with legal obligations

We do not use Customer Data to train machine learning models for resale or to build aggregate datasets shared with third parties.

3. Where Your Data Is Stored

Your data is stored in Canada, on infrastructure provided by Supabase (PostgreSQL database) hosted in a Canadian region. Application hosting and content delivery use Vercel infrastructure with Canadian region routing where available.

We do not transfer Customer Data outside Canada except as required to deliver authentication emails (see Section 4).

4. Service Providers

We use a small number of trusted service providers to operate the Service. Each is bound by contract to keep your data confidential and use it only to provide their service.

The Postmark service processes only email metadata (recipient address, subject, body for delivery) — no Customer Data passes through it beyond what is included in the email itself.

We do not sell or rent your personal information or Customer Data to anyone.

5. Data Sharing

We share your information only:

• With service providers as described above
• When required by law, court order, or governmental request
• To protect our rights, property, or safety, or that of others
• With your explicit consent

We do not share Customer Data with other users, with utilities, with government programs, or with any other party without your direction.

6. Data Retention

We retain your data while your account is active.

If you delete your account or end your use of the Service, we will delete or anonymize your Customer Data within 90 days, except where we are required by law to retain certain records longer.

You can request export of your data or earlier deletion by contacting us at info@energyintel.ca.

7. Security

We use commercially reasonable safeguards to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for stored data
• Row-level security on the database, scoping access to your organization
• Hashed password storage
• Restricted access to production systems on a need-to-know basis

No system is perfectly secure. We cannot guarantee absolute security, but we work to minimize risk and respond promptly to any incident.

8. Your Rights

Under Canadian privacy law (PIPEDA and applicable provincial laws), you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent for our use of your information (which may end your access to the Service)
• Request deletion of your data
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, email info@energyintel.ca. We will respond within 30 days.

9. Cookies and Tracking

We use only essential cookies needed for authentication and session management. We do not use advertising cookies, third-party analytics that track you across websites, or cross-site tracking pixels.

10. Children

The Service is not intended for use by anyone under 18. We do not knowingly collect information from children. If you believe a child has provided information to the Service, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by email or prominent notice within the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact

Privacy questions, requests, or complaints can be sent to:

ASA Energy Consulting Ltd. Vancouver, BC, Canada Email: info@energyintel.ca