Privacy Policy

Last updated: February 1, 2026

1. Introduction

WaterDuty ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the WaterDuty water monitoring platform ("Service").

2. Information We Collect

We collect the following types of information:

Account Information

  • Name and email address
  • Password (hashed, never stored in plaintext)
  • Account preferences and settings

Property Information

  • Property addresses and identifiers
  • Owner and property labels
  • Meter identifiers associated with your utility accounts

Utility Provider Credentials

  • Login credentials for your utility provider accounts (encrypted at rest using Supabase Vault)
  • These credentials are used solely to fetch water usage data on your behalf

Usage Data

  • Water consumption readings from your utility providers
  • Historical usage patterns and trends
  • Leak detection alerts and resolution history

Technical Data

  • Browser type and version
  • IP address and approximate location
  • Device information and session data

3. How We Use Your Information

We use your information to:

  • Provide and operate the water monitoring Service
  • Connect to your utility provider accounts and retrieve usage data
  • Detect anomalies and potential leaks in your water consumption
  • Send you alerts via email, SMS, or WhatsApp when issues are detected
  • Generate usage analytics and reports for your portfolio
  • Process billing and manage your subscription
  • Improve and develop new features for the Service
  • Communicate with you about your account and service updates

4. How We Protect Your Data

We implement industry-standard security measures:

  • Encryption in Transit: All data is transmitted over TLS 1.3
  • Encryption at Rest: Data is stored with AES-256 encryption via Supabase
  • Credential Vault: Utility credentials are stored in Supabase Vault, an isolated encrypted secrets manager separate from the application database
  • Row-Level Security: Database-level policies ensure users can only access their own data
  • Server-Side Processing: Sensitive data is processed exclusively on our servers and never exposed to client-side code

For more details, visit our Security page.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We may share data only in the following circumstances:

  • Service Providers: We use trusted infrastructure providers (Supabase for database, AWS for hosting) that process data on our behalf under strict data processing agreements
  • Legal Requirements: When required by law, court order, or governmental authority
  • Safety: To protect the rights, safety, or property of WaterDuty, our users, or the public

6. Data Retention

We retain your data as follows:

  • Account data: Retained while your account is active and for 30 days after deletion
  • Usage data: Retained for the duration of your subscription to provide historical analytics
  • Utility credentials: Deleted immediately upon account closure or when you disconnect a provider
  • Billing records: Retained as required by applicable tax and financial regulations

7. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and all associated data
  • Export: Export your usage data in CSV format
  • Withdraw Consent: Disconnect utility providers or close your account at any time

To exercise any of these rights, contact us at info@waterdutyai.com.

8. Cookies and Analytics

We use essential cookies to maintain your session and authentication state. We do not use third-party tracking cookies or advertising pixels. We may collect anonymized analytics data to improve the Service.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at info@waterdutyai.com.