Below, the template privacy policy if using a service provider (Oakstead) that collects and holds the data. Pending your company's revisions (if any).

Privacy policy

Below, the Privacy Policy for [company name]'s PG&E utility-data collection service.

Introduction

At [company name], we value the privacy of our users. This privacy policy outlines our practices regarding the collection, use, sharing, and sale of personal information — both online and offline. We align our practices with the requirements set forth by the California Consumer Privacy Act (CCPA).

Information Collection

With their consent, [company name] collects historical energy data from PG&E customers, individuals and organizations (Users), thru PG&E's Share My Data service: name and service address, account and service-agreement numbers, billing history, and meter data (15-minute or 60-minute intervals), up to 48 months back.

The data access is read only.

How We Use the Data

The collected data is used exclusively to model each User's energy use and costs, for that User. [company name] and Oakstead do not sell or use this data for marketing or advertising purposes.

Our Service Provider

Oakstead collects and holds the data for [company name], under a written contract.

Oakstead may use the data only to provide this service to [company name]. It may not sell or share the data, or use it for anything else.

Under the CCPA, Oakstead is our "service provider": giving it the data isn't a sale or a share.

Sharing and Sale of Data

[company name] will never sell this data to third parties.

Without User's prior written consent, [company name] will never share this data with third parties.

Oakstead stores data with Dropbox, which holds it for Oakstead and uses it for nothing else.

Oakstead uses Claude, an AI service from Anthropic, to help process the data (and to build the tools that do). Anthropic handles the data only to provide that service — Oakstead stays opted out of model training support (related Anthropic webpage here).

User Rights under the CCPA

In compliance with the CCPA, we recognize and uphold the following rights of Users:

• Know.Ask what personal information we hold about you, and how we use it.
• Delete.Ask us to delete it.
• Correct.Ask us to fix anything that's wrong.
• Opt out.We don't sell or share personal information, so there's nothing to opt out of.
• Limit.We use personal information only to provide this service, so there's nothing to limit.
• No discrimination.Using any of these rights won't change how we treat you.

To use any of them, email share@[company name.com]. We pass each request on to Oakstead, which acts on it for the data it holds.

You can stop sharing your PG&E data anytime thru your PG&E account's Share My Data page.

If you want us to immediately delete data, please separately request this: share@[company name.com]

Cookies and Online Tracking

Our website doesn't use cookies.

Data Security

• Connection to PG&E.Data comes from PG&E over an encrypted connection that also requires [company name]'s own security certificate. Oakstead makes the request on [company name]'s behalf.
• Storage.The data is kept on Oakstead's computer(s), whose disk is encrypted and locked by a PIN, and in Oakstead's Dropbox account, which is encrypted and needs a code from a phone app to sign in.
• Access.Only Oakstead and [company name] have access to the data.
• This website.Oakstead runs it for [company name]. It runs over HTTPS only, uses no cookies, and stores nothing you enter.
• Deletion.When a User asks, we and Oakstead delete their data.

Contact Us

If you have any concerns or questions about this policy, or if you want to exercise any of your rights under the CCPA, please contact us: share@[company name.com]

(Please let us know if we failed to address anything here that we should have.)

More Information

For further details on consumer privacy rights under the CCPA, please refer to the California Attorney General's official page.