Utilify

Privacy Policy

How Utilify collects, uses, and protects your personal information under Alberta's Personal Information Protection Act.

Last updated: April 13, 2026

Overview

Utilify (“we”, “our”, “us”) is committed to protecting your privacy in accordance with Alberta’s Personal Information Protection Act (PIPA, SA 2003, c P-6.5) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights. It should be read together with our Terms and Conditions, which govern your use of the service and include additional detail on consent and data sharing.

Information We Collect

Account information — When you register, we collect your full name, email address, and a cryptographically hashed password. We never store or have access to your plaintext password.

Utility bill data — Documents you upload for analysis (utility bills in PDF or image format). We extract the following personal information from your bills:

  • Full name and home or service address
  • Utility account numbers
  • Amounts owed, payment history, and billing dates
  • Energy and utility consumption figures

This information is considered sensitive under PIPA because it includes financial data and may reveal lifestyle or occupancy patterns through consumption figures.

Usage data — Standard web server logs including IP addresses, browser type, operating system, pages visited, and actions taken. These are used for security, debugging, and aggregate analytics only.

How We Use Your Information

We use your personal information only for purposes identified at or before the time of collection, in accordance with PIPA Section 16:

  • To provide and improve the Utilify service (bill parsing, analysis, visualization)
  • To manage your account (authentication, session management, email notifications)
  • To detect and prevent fraud or abuse
  • To comply with legal obligations
  • To produce aggregate, non-identifying statistics for service improvement and third-party partnerships (see Disclosure below)

We do not use your personal information for advertising, profiling, or automated decision-making that produces legal effects.

Express consent is obtained at registration via a checkbox for the collection and use of sensitive personal information (financial data, addresses, consumption patterns from your bills).

Implied consent applies to operational data necessary for the service to function (server logs, session cookies, IP addresses).

You may withdraw consent at any time by contacting us at the address below or by deleting your account (PIPA Section 9). Withdrawal does not affect processing carried out before withdrawal. See our Terms and Conditions for full details on the consequences of withdrawing consent.

Disclosure to Third Parties

We do not sell your personal information to third parties. We do not use your bill data for advertising or share it with energy providers without your explicit consent.

We may disclose information in these circumstances:

  • Aggregate statistics — Non-identifying, aggregate data (e.g., average consumption by region) may be shared with government bodies, researchers, and industry partners. No individual records are shared.
  • Government partnerships — Anonymized aggregate data may be shared with government bodies (such as the Alberta Utilities Commission or municipal energy programs) to support energy efficiency research and public policy.
  • Legal requirements — When required by law, court order, or a valid government request with lawful jurisdiction.
  • Service providers — Limited third-party providers (cloud hosting, email delivery) that process data on our behalf under contractual protections.

For full details, see the Disclosure section of our Terms and Conditions.

Data Storage

Your data is stored on servers in Canada. Uploaded bill documents and extracted data are encrypted at rest. We retain your data for as long as your account is active.

When you delete your account, personal data is removed within 30 days. Anonymized aggregate data may be retained indefinitely. Backups are purged within 90 days. Records required by law may be retained as legally required.

Your Rights

Under Alberta’s Personal Information Protection Act (PIPA), you have the right to:

  • Access the personal data we hold about you (PIPA Section 24)
  • Correct inaccurate information (PIPA Section 36)
  • Withdraw consent to collection, use, or disclosure of your information (PIPA Section 9)
  • Delete your account and associated data
  • Export your data in a portable, machine-readable format

To exercise any of these rights, contact us at the address below. We will respond within 45 days as required by PIPA.

Filing a complaint. If you believe we have not handled your personal information in accordance with PIPA, you may file a complaint with the Office of the Information and Privacy Commissioner of Alberta:

Office of the Information and Privacy Commissioner of Alberta
9925 – 109 Street NW, Suite 410
Edmonton, Alberta T5K 2J8
Phone: 780-422-6860
Website: www.oipc.ab.ca

Cookies

We use session cookies necessary for authentication. We do not use advertising or tracking cookies.

Changes to This Policy

We will update this Privacy Policy when our practices change or when required to maintain accuracy. Material changes will be communicated via an in-app prompt (as described in our Terms and Conditions) and by updating the “Last updated” date above.

Contact

Questions about this Privacy Policy? Get in touch — we read every message.