Privacy Policy

Introduction

Spigot ("we", "our", or "us") operates the Spigot web application and Spigot Field mobile application. This Privacy Policy explains how we collect, use, and protect information when you use our services.

Information We Collect

Account Information: We collect your email address when you create an account. This is used solely to authenticate your identity and provide access to the Spigot platform.

Meter Readings: Field staff submit meter readings through the Spigot Field app. These readings are associated with the submitting user's account and synced to the Spigot dashboard.

Location Data: The Spigot Field app collects precise location data to surface nearby meters during field reading routes. Location data is not stored permanently or used for any purpose beyond in-app navigation.

Photos: The Spigot Field app allows users to capture photos of meters using the device camera. Photos are used for meter documentation and OCR reading capture only.

Payment Information: Shareholders who pay bills online through the Spigot portal do so via Stripe, a third-party payment processor. Spigot does not collect or store credit card numbers, bank account details, or any payment card data. All payment information is handled directly by Stripe. Spigot receives only a confirmation of payment status from Stripe.

How We Use Your Information

We use collected information exclusively to operate and improve the Spigot platform. We do not sell, share, or disclose your information to third parties for advertising or marketing purposes.

Data Storage and Security

All data is stored securely using Supabase, a SOC 2 compliant database platform. Data is encrypted in transit and at rest. Access is restricted to authorized staff and administrators of your water company.

Third-Party Services

Spigot uses the following third-party services to operate:

• Stripe — online payment processing for shareholder bill payments
• Supabase — database and authentication
• Vercel — web application hosting
• Resend — transactional email delivery

Data Retention

We retain your data for as long as your organization maintains an active Spigot account. Upon account termination, data may be retained for up to 90 days before permanent deletion.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at contact@spigothq.com.

Children's Privacy

Spigot is intended for use by water company staff and administrators. We do not knowingly collect information from anyone under the age of 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email.

Contact

If you have questions about this Privacy Policy please contact us at contact@spigothq.com or visit usespigot.com.