Privacy Policy

Last updated: [Month Day, Year]

Plain-language summary: We collect the bill you upload and what our AI extracts from it — we retain that extracted data on our backend for every bill, whether or not you save a report. If you choose to save a report, we also collect your name, email, phone, and a password (stored securely hashed, never in plain text) so you can look it up later. We use a third-party AI provider (Anthropic) to read the bill. We don't sell your data. We don't share it with an energy broker unless you ask us to.

1. What we collect

When you use Certo, we may collect:

The bill you upload — sent to our AI provider (Anthropic) to extract the data on it. We do not store the original file itself after processing; we retain the structured data extracted from it. This structured data is retained on our backend for every bill that is uploaded and processed, regardless of whether you go on to save a report — this lets us maintain an operational record and improve accuracy over time.
Extracted bill data — utility, supplier, usage, rates, and charges as read from your bill.
Contact information and a password — first name, last name, email, phone number, business name, and a password, but only if you choose to save your report. Your password is stored as a salted, one-way hash — we can't read it back, and neither can anyone else with access to our database.
Contract and rate-request details — if you add a contract end date to a saved report, or click "Talk to an advisor" to request a rate comparison, we store that information alongside your saved report.
Basic technical data — standard web server logs (e.g., IP address, browser type) collected automatically by our hosting provider.

2. How we use it

We use this information to generate your bill report, to let you retrieve a saved report later, and to improve the accuracy of our bill-reading system over time. We do not use your data to train third-party AI models beyond what our AI provider's standard API terms permit (see their policy at anthropic.com/legal/privacy).

3. Who we share it with

We share bill data with our AI processing provider (Anthropic) solely to generate your report. We do not sell your personal information. We do not share your contact information or bill data with an energy broker, supplier, or any other third party unless you take a clear action requesting that connection (for example, clicking a "get a rate comparison" button).

4. How we store it

Saved reports are stored in our hosting provider's database and can only be looked up by entering both the email address and the password used to save them. Passwords are stored as salted, one-way hashes, not in plain text. Bill data from uploads that were never saved as a report is retained separately in our operational records and is not tied to a password or accessible through the same lookup. If you'd like a saved report deleted, contact us at [contact email] and we'll remove it.

5. Your choices

You can use Certo's core bill-review feature without saving anything or providing any contact information. If you've saved a report and want it deleted or corrected, email [contact email].

6. Children's privacy

Certo is not directed at children under 13, and we do not knowingly collect information from them.

7. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do.

8. Contact

Questions about this policy, or want your data deleted? Reach us at [contact email].