Privacy Policy

Starter Labs LLC ("we," "us," or "our") builds software applications and services that help people get more value from their data. This Privacy Policy describes how we collect, use, disclose, and protect personal information across all Starter Labs applications and services, including applications that integrate with third-party data sources such as utility providers.

1. Information We Collect

Account Information

We use third-party authentication providers to manage user accounts. We retain user identifiers, email addresses, and profile information necessary to operate your account and associate your preferences and data with your profile.

Utility and Energy Usage Data

For applications that integrate with utility providers (such as Pacific Gas & Electric via the Share My Data program), we collect energy data only when you explicitly authorize us to do so through the utility's OAuth authorization flow. Depending on the scopes you authorize, this data may include:

• Electricity and/or gas interval usage data (typically hourly for residential, 15-minute for commercial customers)
• Monthly usage summaries and billing details
• Account information (name, service address)
• Meter and service point identifiers
• Program enrollment information (tariff, demand response status)
• Up to 48 months of historical data, as authorized by you

Access to your utility data requires your explicit, informed consent. You may revoke this access at any time through your utility provider's account portal, including removing specific service points or canceling authorization entirely.

To access your data we receive short-lived OAuth access tokens (valid for 1 hour) and longer-lived refresh tokens (valid for up to 1 year). Both are encrypted before storage and used solely to retrieve your authorized data.

Data from Connected Third-Party Services

Some Starter Labs applications allow you to optionally connect third-party services (such as fitness platforms or other data sources). We request only the permissions necessary for the specific feature you are using. Access tokens for connected services are encrypted and stored securely. We do not access these services beyond what is necessary to fulfill your requests.

Usage and Technical Data

We may collect standard technical information such as browser type, device type, and general application usage patterns to maintain and improve our services. We do not use tracking for advertising purposes.

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve our applications and services
• Provide the specific features you have requested or explicitly authorized
• Analyze your usage data (including energy data) to generate insights and outputs within the application
• Process requests using AI models where applicable to that application's features
• Respond to your support requests
• Comply with applicable law

We use your data only for the purposes described at the time of collection. Your data is never used for advertising, profiling unrelated to our services, or purposes beyond those you have authorized.

3. AI Processing

Some Starter Labs applications use third-party AI APIs (such as Anthropic's Claude) to analyze your data and generate insights or content. When such processing occurs, we transmit only the minimum data necessary for the specific feature you are using. Data sent to third-party AI APIs is also governed by those providers' own privacy policies. We do not store AI-generated outputs beyond what is needed to display results to you.

4. Data Sharing and Disclosure

We do not sell your personal information. We do not share your personal information with third parties for their own marketing or advertising purposes. We may share information only in the following circumstances:

• Service providers: Third parties that help us operate our services (such as authentication providers, cloud infrastructure, and AI APIs), under appropriate data protection agreements and limited to what is necessary to perform those services.
• At your direction: When you explicitly authorize a connection to a third-party service, we share the data necessary to establish and operate that connection.
• Legal requirements: When required by applicable law, valid legal process, or to protect the rights, property, or safety of Starter Labs LLC, our users, or others.

5. Utility Data (PG&E Share My Data)

For Starter Labs applications that access your PG&E energy data via the Share My Data program, the following specific terms apply:

• We access your energy data solely on the basis of your explicit authorization through PG&E's OAuth flow. You select the data scopes (usage, billing, account, program enrollment) at the time of authorization.
• Your energy data is used exclusively to provide the features within the application you authorized — no other purpose.
• Your energy data is not sold, rented, or disclosed to any third party except as described in Section 4 above.
• You may revoke our access at any time through your PG&E online account at pge.com. You can remove individual service points from the authorization, extend or shorten the authorization period, or cancel authorization entirely. Once canceled, access cannot be restored without a new authorization from you.
• Starter Labs LLC complies with PG&E's Share My Data Tariff and Terms and Conditions and with the California Public Utilities Commission's rules governing the privacy and security of energy usage data.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of sensitive credentials and OAuth tokens before storage
• Secure HTTPS connections for all data in transit
• Access controls limiting who within our organization can access personal data
• Use of reputable, security-audited third-party infrastructure

No method of transmission or storage is completely secure. If you believe your information has been compromised, please contact us immediately.

7. Data Retention

We retain your personal information and associated data for as long as your account is active or as needed to provide our services. You may request deletion of your account and all associated data at any time by contacting us. Upon a deletion request, we will remove your personal data within 30 days, except where retention is required by applicable law or legitimate business necessity.

8. Your Privacy Rights

California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale: We do not sell personal information. If this changes, we will provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

All Users

Regardless of your location, you may:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Revoke authorization to any connected third-party service at any time through that service's own portal or by contacting us

To exercise any of these rights, contact us using the information in Section 10.

9. Children's Privacy

Our services are not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated effective date. Your continued use of our services after any changes constitutes your acceptance of the revised policy. For material changes, we will make reasonable efforts to notify affected users.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a concern, please contact us: