Last updated: August 25, 2026
This page describes what actually happens to your bill, in the order it happens. If something here is not true of our system, it is a bug and we want to hear about it.
The file you upload is held in memory for the length of a single request, read by our analysis engine, and discarded. No copy is written to disk, to a database, or to any file store — not temporarily, and not as a backup. There is nothing to purge later because nothing is kept.
To produce your report we keep what the bill says about energy and money: your provider, the billing period, quantities, rates, line items and totals, plus the ZIP code we use to match the correct regional tariff. We deliberately do not keep the parts that identify you personally: your account number is reduced to its last four digits before storage, and your street address is discarded entirely. The full account number is never written down anywhere.
We do not delete reports on a timer. You paid for the analysis and you may want to come back to it, so it stays in your account until you decide otherwise. You can permanently delete any report — and the bill data behind it — from your dashboard at any time, with immediate effect and no waiting period.
All traffic between your browser and our servers is encrypted with TLS. Reports are retrieved only by the signed-in account that owns them; a request from any other account is refused, and full report data is released only after payment is confirmed.
Reading the bill requires an AI model, so the document is sent to Google's Gemini API for extraction and returned to us. That is the only third party your bill reaches. We do not sell your data, and we do not share it with utilities, brokers, marketers, or data resellers.
Our application and database run on dedicated European server infrastructure (Hetzner Online GmbH, Germany) under our own administration, not on shared consumer hosting.
Under the California Consumer Privacy Act and comparable laws you may request access to the data we hold about you, and you may delete it. Deletion is built into the product rather than being a request queue: the delete control in your dashboard removes the record immediately. For anything a button cannot cover, contact us and we will action it.