Privacy Policy

• We ask for your mobile number and date of birth. We use them, through our identity provider Prove, to confirm it is you and fill in your name and address.
• We use your information to verify you, review your application, arrange your enrollment, look after it, and bill our annual fee.
• We share it only with the companies needed to do that, and with the analytics and advertising services described below.
• We do not sell your information. We use analytics to improve the site, and we share scrambled (hashed) details with Meta to measure and show our ads. Your phone number is never part of that.
• We never share your mobile number or your text-message consent with anyone for their marketing.
• We text you only if you ask us to. Reply STOP any time.
• You can see, correct or delete your data from your dashboard, or by emailing us.

What you give us

• Your mobile number and date of birth.
• Any change you make to your name or address on the "Is this you?" screen. If the phone check cannot confirm you, the name and address you type instead.
• Your email address and phone number on your agreement, your signature, and the choices you make, such as which optional boxes you tick.
• If you apply before we open, your application and the choices you make on it.
• Messages you send us, and your waitlist sign-up if you join before we are live at your address.

What your wireless carrier and Prove tell us

• Whether the mobile number belongs to the phone you are using, and whether a code or link was confirmed.
• The name, address, date of birth and email addresses that Prove has on file for your number. We use them only to fill in or check your details, and we keep the ones you confirm or correct.
• A verification result and fraud-risk signals, and a reference number for the check.

What your utility, supplier and public sources tell us

• Your utility account number, which we obtain when you enroll, from your utility or your supplier, under the authorization in your Letter of Agency (see "Utility account numbers, Social Security numbers and usage").
• Your enrollment status, start and end dates, and the date of your utility's confirmation notice.
• Whether your address is in a community aggregation program. Program areas are public.
• Monthly usage and rate data for your account, if we receive it to watch your rate. We never ask for, or release, more detailed usage without your separate written consent.
• Public utility and supplier rate information.

What we collect automatically

• Browser and device type, pages viewed, taps, and how far you got in sign-up, recorded by our analytics provider PostHog (see "Cookies and measurement"). We use this to fix problems and see where people get stuck.
• Your IP address. For abuse prevention we keep a one-way hash, not the address. We keep the actual address only on consent and agreement records, where it is legal evidence of your signature.
• If you arrived from an ad: the campaign tags in the link, the ad's click ID, and the Meta cookies described under "Cookies and measurement". We use these to know which ads work.
• Error reports when something breaks.

Our fee records: the annual and early-exit fees you agreed to, the bills we mailed, and your payments. We do not store card or bank account numbers.

You authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to Ohio Energy Savings, LLC or its service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud. See our Privacy Policy for how we treat your data.

Our service provider for this check is Prove Identity, Inc. (Prove). When you start sign-up, Prove may ask your wireless carrier to confirm that the mobile number you entered belongs to the device you are using. On a computer, Prove may text a link to your phone instead. If that check cannot finish, Prove texts you a one-time code instead. We use the result only to verify your identity and to prevent fraud.

We use your information only for these purposes:

• to verify your identity at sign-up and keep the proof Ohio requires;
• to review an application you submit before we open, and to email you about it;
• to show you your rate and estimate your savings on the supply portion of your bill;
• to enroll you with the supplier you chose, file an aggregation opt-out if you need one, and handle cancellations, moves and renewals;
• to bill our annual fee by mail and keep a record of the amounts you agreed to;
• to run your account and dashboard, sign you in, and email you your documents;
• to send rate alerts, sign-up reminders and texts, only if you asked for them;
• to measure and improve our website and our ads, and to show our ads to people who visited us or who are like our customers, as described below;
• to answer you, fix problems and correct your details when you ask;
• to prevent fraud and abuse, including bot checks and rate limits;
• to keep the records the law requires, and to respond to the PUCO or resolve a dispute.

If you tick a box asking us to text you, we use your mobile number only to send the messages you asked for. Those are sign-up reminders (up to 3 over about a week), updates about an application you submitted before we open, and one go-live text if you joined the waitlist. When you tick the box, we also send one text confirming you joined. We send them through our text-delivery provider, Twilio.

Reply STOP to any text to stop, or HELP for help. You can also stop texts by emailing us or any other reasonable way, and we honor it within 10 business days, usually right away.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. We do not sell or share your mobile number, your text-message opt-in or your consent with any third party for marketing or promotional purposes. Every sharing category in this policy excludes text-messaging opt-in data and consent. The only exception is the provider that delivers our texts, which uses them only to send them.

We share the minimum needed, and only with:

• Prove Identity, Inc. and, through Prove, your wireless carrier, to verify your identity and prevent fraud.
• Your supplier, the PUCO-certified supplier named in your supply contract, to enroll you and serve your account.
• Your utility, to process, confirm or cancel your enrollment.
• The community aggregation program you are leaving, which gets the opt-out form with the details it needs to remove you.
• Companies that run our systems for us, and only to do that:
  • Vercel: hosting and cookieless traffic measurement;
  • Supabase: database, sign-in and file storage;
  • Resend: email delivery;
  • Twilio: text delivery;
  • Cloudflare: bot protection;
  • Upstash: rate limiting;
  • Sentry: error monitoring;
  • Google Workspace: our support inbox;
  • PostHog: site analytics (which pages and steps people use, and where they get stuck);
  • a print-and-mail service, if we use one, which receives only your name and mailing address to mail fee bills and paper copies.
• Meta Platforms, Inc. (Facebook and Instagram), to measure whether our ads work and to show our ads to the right people. We send Meta your name, email, address and date of birth, scrambled one way (hashed) before they leave our systems, so Meta can match them to its users without reading them. We never send Meta your phone number, your text-message consent, your utility account number, your usage or anything about your identity check.
• The PUCO, other regulators and law enforcement, when the law requires it, for example to investigate a complaint.
• A buyer or successor, if our business is sold or merged. We would tell you first, and this policy would keep applying to your information.

We do not sell your personal information. Apart from the Meta matching described above, we do not share it for advertising.

Ohio's rules limit what we may release (OAC 4901:1-21-10):

• We do not release your utility account number without your consent, given in your Letter of Agency. The only exceptions are our own collections and credit reporting, Ohio universal-service programs such as PIPP, governmental aggregation, and assigning your contract to another certified provider.
• We never ask for or keep your Social Security number.
• We do not release usage data more detailed than monthly without your separate written consent.
• Your utility account number is stored encrypted. The copy we search on is a one-way scramble, not the number itself.

These cookies keep the site working:

• a signed session cookie that keeps your sign-up together for up to 30 days;
• sign-in cookies set by Supabase that keep you signed in, removed when you sign out;
• a short-lived Cloudflare Turnstile cookie that checks you are a real person.

We also use:

• PostHog analytics. It records how the site is used: pages, taps and how far people get in sign-up. It can also make recordings of a visit with everything you type hidden. It never receives your name, phone number, date of birth, address, email or anything from your identity check, and recordings are switched off on the identity, agreement and account pages. PostHog sets its own cookie to recognize a returning browser.
• A first-party ad cookie (oes_attr, 90 days) that remembers which link or ad brought you here.
• The Meta Pixel and Meta's Conversions API. They tell Meta that a visit or sign-up came from one of its ads, using the hashed details described under "Who we share it with" and the Meta cookies _fbp and _fbc.

Our traffic measurement through Vercel Web Analytics does not use cookies and does not identify you. You can block these tools with your browser settings or an ad blocker, and the site still works.

We keep compliance records at least two years, as Ohio requires (OAC 4901:1-21-04). We also keep your contract for as long as it runs (OAC 4901:1-21-06(E)(3)(f)).

• Your information is encrypted in transit and at rest.
• Our staff see your records through an internal console, not the database. Access is limited by role, and every view and change is logged.
• Before we change your phone number or email on a request that did not come from your signed-in dashboard, we confirm it is you and record how.
• Your records are tied to your time at your address. Whoever lived there before or after you cannot reach yours, and you cannot reach theirs.

No system is perfect. If a breach exposes your personal information, we will tell you as quickly as we can, within the time Ohio law requires (ORC 1349.19).

• See or get a copy. Your documents are on your dashboard. For a copy of your data or of the contract version you signed, email us. We send the contract within three business days.
• Correct. Change your phone number and mailing address on your dashboard, or your email through the confirmation step that notifies both addresses.
• Delete. Use Delete my data on your dashboard, or email us if you never made an account or only applied. We finish within 30 days. If your enrollment is still active, it keeps running until it is cancelled or ends, and we delete your personal data then. We will always tell you which applies. Records the law makes us keep, listed above, stay until their retention period ends.
• Stop texts. Reply STOP, or ask us any other reasonable way.
• Stop optional emails. Use the unsubscribe link or your dashboard settings.
• Stop ad matching. Email us and we will remove your details from the lists we share with Meta. You can also adjust your ad settings in your Facebook or Instagram account.
• Withdraw the carrier consent. Email us. It ends anyway when you stop being our customer.

We will never treat you differently for using any of these choices.

Our service is for adults 18 and older. We do not knowingly collect information from anyone under 18. If you think a child gave us information, email us and we will delete it.

If we change this policy, we post the new version here with a new version number and effective date. If the change is significant, we tell account holders by email before it takes effect. The version you agreed to when you signed stays with your agreement and on your dashboard.

Ohio Energy Savings, LLC · 26202 Detroit Rd, Suite 212, Westlake, OH 44145 · support@ohioenergysavings.org · (855) 25-OHIOENERGY, 10 a.m.–4 p.m. Eastern, Monday–Friday.