Meterworx privacy policy

Who this policy is for

Meterworx is a business-to-business platform used by utility contractors and utilities themselves to manage AMI meter-exchange field work. There are three groups of people whose data flows through the product:

• Field crew members — meter technicians who sign into the mobile app to receive assigned work orders and record installations.
• Office users — supervisors, dispatchers, and administrators who use the portal to import work, assign it, review results, and export billing files.
• Utility customers — the property owners or renters at the addresses where meters are being replaced. Meterworx does not collect any personal information from customers directly; the customer's account number and service address are provided to us by the utility as part of the work-order file.

What we collect and why

From field crew members (mobile app)

• Email address and password — to authenticate you into the app. Passwords are hashed by our authentication provider (Supabase); we never see the plaintext.
• User ID — a random identifier we generate to link your captured work to your account.
• Precise GPS location — recorded once per completed meter exchange, so the utility can verify that the technician was on-site. Location is captured only while you have the app open and only at the moment you press "Complete job." We do not track you in the background.
• Photos you take — before-and-after site photos, meter reading photos, new radio / endpoint photos, and optional note photos. Photos are uploaded to encrypted cloud storage owned by your employer's utility contract.
• Meter data you enter — old and new serial numbers, meter reading, meter size, activation status, notes. These are the deliverables you were dispatched to capture; they belong to the utility, not to you personally.

From office users (portal)

• Email address and password — for authentication (same as above).
• Your role and job-site assignments — so we show you the work you're allowed to see. Access is enforced by row-level security in our database.

From marketing-site visitors (meterworx.ai)

• Standard server logs — page requests, IP address, referrer, and user-agent, kept for a short period for security and abuse prevention.
• Demo-request form submissions — the name, email, phone, company, and message you provide when you ask for a demo, plus the referrer / UTM tags on the page you submitted from.
• Privacy-first analytics — aggregate page-view counts via a first-party, cookie-less analytics tool. No cross-site tracking, no advertising IDs, no third-party cookies.

What we do not collect

• We do not track you across other apps or websites, and we do not sell or share your data with data brokers or advertising networks.
• We do not use third-party SDKs for analytics, attribution, or advertising in the mobile app.
• The mobile app does not read your contacts, calendar, microphone, or health data. Camera and photo-library-add access are used only for the job photos described above.
• We do not collect background location. The app requests only "while using the app" permission.

How we use what we collect

• To run the service — showing you the right work orders, capturing your completions, generating billing-export files for your utility.
• For customer support — troubleshooting issues you report.
• For security and abuse prevention — detecting unauthorized access, rate-limiting requests, keeping audit logs of who did what.
• For legal compliance — responding to lawful requests, keeping records where the law requires.

We do not use your data for advertising, we do not profile you for automated decision-making that produces legal effects, and we do not train machine-learning models on your captured work.

How we store and protect it

• All data is stored on Supabase infrastructure, hosted in the United States (us-east-1).
• All network traffic between the apps, the portal, and the backend is encrypted in transit (TLS 1.2 or higher).
• Data is encrypted at rest in the database and in object storage.
• Access to production data by IncWorx and KoldOps personnel is restricted to those with a need to know, logged, and reviewed.
• Photos and structured captures are additionally scoped by row-level security so a technician can only see their own assigned work, and a utility can only see its own job sites.

Who we share it with

• Your employer (the utility contractor) and the utility that owns the job site — they receive the completed work orders, photos, and billing-export files. This is the purpose of the product.
• Sub-processors — Supabase (database, auth, storage), Vercel (site + portal hosting). Both operate under written data-processing terms.
• Law enforcement or regulators — only when required by valid legal process.

We do not sell personal information under any US state privacy law's definition of "sell." We do not share personal information for cross-context behavioral advertising.

How long we keep it

• Captured work orders, photos, and reads — for the length of your utility's contract with IncWorx plus a reasonable archival period, unless the utility instructs otherwise. This data is the contracted deliverable.
• Your account credentials — until you or your administrator deletes them.
• Server logs — 30 days for typical requests; longer for security-relevant events.
• Marketing-site demo requests — as long as we are actively following up, then archived.

Your rights and choices

Account deletion

You can request that we delete your Meterworx account and its associated personal data at any time. In the mobile app, open the account menu (top right of the "My work" screen) and tap Request account deletion; this drafts an email to support@meterworx.com pre-filled with your user ID. We will confirm and complete deletion within 30 days.

Deletion removes your login and personal information. Captured work-order records that belong to the utility (their meter data, addresses, account numbers) are retained for the utility per the contract that governs their deployment.

Access, correction, portability

You can request a copy of the personal information we hold about you, correction of anything inaccurate, or a machine-readable export. Email support@meterworx.com.

US state privacy rights (CCPA / CPRA and similar)

If you are a California resident (or a resident of a US state with a comparable law), you have the right to know what personal information we've collected, to delete it, to correct it, and to opt out of any "sale" or "sharing" (we do neither). You may exercise these rights through the same email address above; we will verify your identity before responding. We do not discriminate against individuals who exercise their privacy rights.

EU / UK rights (GDPR / UK GDPR)

If you are in the EU or UK, you have the rights to access, rectification, erasure, restriction, portability, and objection. Where we rely on consent (for optional cookies on the marketing site, if any), you may withdraw it at any time. Where processing is based on our legitimate interests (security, product operation), you may object. The lawful basis for most of what the platform does is the contract between you (or your employer) and IncWorx. Complaints may be lodged with your local supervisory authority. IncWorx has not appointed an EU representative because the platform is not currently offered in the EU; if that changes, this policy will be updated.

Children

Meterworx is a workplace tool for adults performing utility field work. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We will update this page when we change how the product handles data. Material changes will be announced in the app and portal before they take effect. The "Effective" date at the top of this page reflects the current version.

Contact

Questions, complaints, or privacy requests: support@meterworx.com.

Meterworx is operated by IncWorx Consulting. The platform is developed and maintained by KoldOps LLC as data processor.