Below, the template privacy policy if your company collects and processes data (without a service provider). Pending your company's revisions (if any).

Privacy policy

Below, the Privacy Policy for [company name]'s PG&E utility-data collection service.

Introduction

At [company name], we value the privacy of our users. This privacy policy outlines our practices regarding the collection, use, sharing, and sale of personal information — both online and offline. We align our practices with the requirements set forth by the California Consumer Privacy Act (CCPA).

Information Collection

With their consent, [company name] collects historical energy data from PG&E customers, individuals and organizations (Users), thru PG&E's Share My Data service: name and service address, account and service-agreement numbers, billing history, and meter data (15-minute or 60-minute intervals), up to 48 months back.

The data access is read only.

How We Use the Data

The collected data is used exclusively to model each User's energy use and costs, for that User. [company name] does not sell or use this data for marketing or advertising purposes.

Sharing and Sale of Data

[company name] will never sell this data to third parties.

Without User's prior written consent, [company name] will never share this data with third parties.

[company name] stores data with Dropbox, which holds it for us and uses it for nothing else.

[company name] uses Claude, an AI service from Anthropic, to help process the data (and to build the tools that do). Anthropic handles the data only to provide that service — we stay opted out of model training support (related Anthropic webpage here).

User Rights under the CCPA

In compliance with the CCPA, we recognize and uphold the following rights of Users:

• Know.Ask what personal information we hold about you, and how we use it.
• Delete.Ask us to delete it.
• Correct.Ask us to fix anything that's wrong.
• Opt out.We don't sell or share personal information, so there's nothing to opt out of.
• Limit.We use personal information only to provide this service, so there's nothing to limit.
• No discrimination.Using any of these rights won't change how we treat you.

To use any of them, email share@[company name.com].

You can stop sharing your PG&E data anytime thru your PG&E account's Share My Data page.

If you want us to immediately delete data, please separately request this: share@[company name.com]

Cookies and Online Tracking

Our website doesn't use cookies.

Data Security

• Connection to PG&E.Data comes from PG&E over an encrypted connection that also requires [company name]'s own security certificate, so only [company name] can make the request.
• Storage.The data is kept on [company name]'s computer(s), whose disk is encrypted and locked by a PIN, and in [company name]'s Dropbox account, which is encrypted and needs a code from a phone app to sign in.
• Access.Only [company name] has access to the data.
• This website.It runs over HTTPS only, uses no cookies, and stores nothing you enter.
• Deletion.We delete a User's data when they ask.

Contact Us

If you have any concerns or questions about this policy, or if you want to exercise any of your rights under the CCPA, please contact us: share@[company name.com]

(Please let us know if we failed to address anything here that we should have.)

More Information

For further details on consumer privacy rights under the CCPA, please refer to the California Attorney General's official page.