WattGap Privacy Policy

What we collect

• Your ZIP code (and optionally your street address) for rebate analysis.
• Household characteristics you provide in the wizard: household size, income range, utility provider, current heating fuel, the energy projects you're interested in.
• Your email address if you opt in for alerts or a free report.
• Bucketed session and analytics data (e.g. which pages were viewed, which partner CTAs were clicked). These are aggregated and do not identify you personally.
• The paid household application service is not currently offered on WattGap’s public site. If you believe you completed a prior household checkout, contact WattGap so we can verify the record. WattGap does not store or retain your card number. If records confirm a payment was processed through Stripe, Stripe may retain its own payment records under its privacy policy.

ATTORNEY_REVIEW_REQUIRED: list is non-exhaustive and subject to legal expansion.

What we don't collect

• Social Security Numbers.
• Driver's license numbers.
• Precise location data beyond what you enter (no GPS tracking).
• We do not sell your personal information to advertisers, data brokers, or marketing platforms.

ATTORNEY_REVIEW_REQUIRED: negative list may need jurisdiction-specific expansion (CCPA, Colorado Privacy Act, etc.).

How we share data

• Partner referrals. When you click a financing or community-solar CTA, we pass a short hashed session identifier (first 12 hex characters of a SHA-256 hash) plus non-identifying campaign tags (UTM parameters and, when applicable, a non-dollar-specific amount bucket) to the partner for attribution. We do NOT send your email, ZIP, address, income, exact dollar amount, or any other identifying information to the partner unless you submit a form on their site yourself.
• Prior application-prep records. The paid household application service is not currently offered. If you believe you completed a prior checkout, contact WattGap for support. You remain the applicant; WattGap does not impersonate you in any government system.
• Service providers. Several external providers process limited data on our behalf to run the platform. The complete list lives on our Data Sources page. In short:
  • Rebate and incentive lookups: Rewiring America, U.S. Census Bureau (ZIP-level housing characteristics), NREL (solar and utility-rate data via OpenEI and PVWatts), U.S. Energy Information Administration, NASA POWER (climate), DSIRE (incentive database), Google Solar API (rooftop solar analysis when address is supplied).
  • Prior payments: The paid household application service is not currently offered on WattGap’s public site. If you believe you completed a prior household checkout, contact WattGap so we can verify the record. WattGap does not store or retain your card number. If records confirm a payment was processed through Stripe, Stripe may retain its own payment records under its privacy policy.
  • Email: Resend delivers transactional emails, including alerts and support messages about prior records.
  • Hosting + infrastructure: Railway hosts the application servers and the Postgres database.
  • Error tracking and observability: Sentry (when configured) receives error context, including request identifiers and stack traces, to help us diagnose failures.
  • AI-assisted home-chat: Google Gemini processes the text you type into the home chat, if you use that feature. Messages are not used to train the underlying model.
  • Hosting and CDN: Cloudflare is our CDN and edge network. All traffic passes through Cloudflare before reaching WattGap servers. As part of normal CDN operation, Cloudflare may process your IP address and derive an approximate location from it. When you first open the analyzer, we read that approximate location from the edge -- your IP is not forwarded to any separate geolocation service. See Cloudflare's Privacy Policy.
  Each provider has its own privacy practices. Follow the linked Data Sources page for the links to each.

How to delete your data

Email [email protected] with the subject "Delete my data" and include the email address you used with WattGap. We'll process your request and confirm deletion within 30 days. If you're in a jurisdiction with specific privacy rights (for example California CCPA, Colorado CPA, Virginia VCDPA, Connecticut CTDPA, Oregon OCPA, Utah UCPA, or EU/UK GDPR), you have the rights enumerated in those statutes -- contact us to exercise them.

How to correct your data

If any information we hold about you is inaccurate, email [email protected] with the subject "Correct my data." Include the email address you used with WattGap and the correction you want made. We'll update the record and confirm within 30 days. This aligns with the right of correction granted under California CCPA §1798.106, Colorado CPA §6-1-1306(1)(a)(II), Virginia VCDPA §59.1-577(A)(2), Connecticut CTDPA §42-518(a)(2), Oregon OCPA §646A.572(1)(b), and EU GDPR Article 16. Utah UCPA does not currently grant a right of correction; we honor the correction request regardless.

Data retention

If you submit your contact information, we currently retain it until you request deletion via the section above. Retention policies may be updated as we scale. If our records confirm a prior household checkout, records from that checkout may be retained longer for tax recordkeeping (U.S. IRS Publications 552 and 583 recommend 3-7 years for payment substantiation). If those records also confirm a payment was processed through Stripe, Stripe may retain its own payment records under its privacy policy. Legal-hold retention is applied case-by-case when litigation, regulatory inquiry, or dispute resolution requires it.

Cookies and similar technologies

We use browser session storage to keep your calculator state while you're on the site. Admin and contractor users who sign in also have a persistent first-party authentication token stored locally so they stay logged in, plus a first-party UI-preference cookie (for example, whether the admin sidebar is expanded). We do NOT use persistent third-party tracking cookies for advertising, retargeting, or cross-site behavioral profiling.

Contact

Questions about this policy? Email [email protected].