Privacy Policy

Effective Date: May 21, 2026 · Last Updated: September 23, 2026

Pylon LLC ("Pylon LLC," "we," "our," or "us") operates yourpylon.com (the "Site") and the Pylon LLC electricity management service (the "Service"). This Privacy Policy explains what personal information we collect, how we use and share it, how long we retain it, your rights with respect to it, and how to contact us.

By using the Site or registering for the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, do not use the Site or Service.

This Privacy Policy does not apply to the independent practices of third parties — including electricity suppliers and our platform partner PowerKiosk — whose own privacy policies govern their use of any information they independently receive.

1. Information We Collect

1.1 Information You Provide Directly

When you register for or use the Service, we collect:

• Contact information: your first and last name, email address, and phone number.
• Service and billing address: the address at which you receive electricity, and your billing address if different.
• Utility account information: your utility account number and any utility-specific identifiers (such as meter number, name key, or reference number) required by your utility.
• Supplier and contract information: whether you have a third-party electricity supplier, the end date of any existing contract, and your current rate per kilowatt-hour (collected for Connecticut and Illinois users only).
• Government-issued identifiers: for certain Texas enrollments, a supplier may require your Social Security Number and/or date of birth to complete enrollment. This information is collected only where required by the supplier and is transmitted solely for that purpose.
• Bill upload data: if you upload an electricity bill, we extract account-identifying fields from it. The bill file is streamed directly to our extraction service and is never stored on our servers. Extracted fields are retained as part of your account record.

1.2 Information Collected Automatically

When you visit the Site, we and our service providers (including Google Analytics — see Sections 3.3 and 6) may automatically collect:

• IP address and approximate location derived from it.
• Browser type, version, and operating system.
• Pages visited, time on page, links clicked, and referring URLs.
• Date, time, and duration of your visit.
• Device identifiers and randomly-generated analytics identifiers stored in cookies.
• How you reached the Site: the referring website, campaign tags in the link you followed (such as utm_source), and ad click identifiers (such as gclid, fbclid, or msclkid). See Section 6.

This data is used to operate and improve the Site, diagnose technical issues, measure marketing effectiveness, and maintain security.

1.3 Enrollment and Account Activity

We maintain records of all actions taken on your account by Pylon LLC's automated systems and operators, including enrollment submissions, supplier switches, rate comparisons, and changes to your automation preferences.

1.4 Information We Do Not Collect

We do not collect payment card numbers or banking information. Pylon LLC does not charge users. No payment processing occurs on the Site.

2. How We Use Your Information

2.1 To Provide the Service

• Enrolling you with an electricity supplier through PowerKiosk.
• Monitoring available electricity supplier rates in your area on your behalf.
• Automatically re-enrolling you with a lower-cost supplier at the appropriate time.
• Maintaining your account and enrollment history.
• Authenticating your identity when you access your dashboard.

2.2 To Communicate With You

• Sending transactional emails including enrollment confirmations and switch notifications.
• Delivering your secure dashboard login link.
• Responding to support inquiries.

2.3 For Legal and Compliance Purposes

• Generating, storing, and maintaining your signed Letter of Authorization (LOA) as a legal record of your authorization for Pylon LLC to act as your agent.
• Maintaining audit logs of enrollment activity as required by our agreement with PowerKiosk and applicable state energy regulations.
• Responding to lawful requests from regulatory authorities, law enforcement, or courts.
• Enforcing our Terms of Service and protecting the rights, property, and safety of Pylon LLC, our users, and the public.

2.4 To Operate and Improve the Service

• Analyzing usage patterns and service performance.
• Diagnosing and resolving technical issues.
• Internal reporting and analytics.

We do not use your personal information for targeted advertising. We do not sell your personal information to any third party.

3. How We Share Your Information

We share your personal information only as described below. We do not sell, rent, or trade personal information.

3.1 PowerKiosk (Platform Partner)

Pylon LLC operates on the PowerKiosk energy marketplace platform. When we enroll you with a supplier or submit a re-enrollment, we transmit the personal and account information necessary to complete that enrollment to PowerKiosk, which in turn transmits the required information to the relevant electricity supplier. PowerKiosk's privacy practices are governed by its own privacy policy.

3.2 Electricity Suppliers

When you are enrolled with an electricity supplier, that supplier receives the personal and account information required to establish your supply contract — including your name, service address, utility account number, and, for applicable Texas enrollments, your Social Security Number and/or date of birth. The supplier's use of your information is governed by its own privacy policy and your supply contract with them.

3.3 Service Providers

We share information with the following service providers who process it on our behalf:

• OpenAI: if you upload a bill, the image is transmitted to OpenAI's API for field extraction. The image is streamed in memory and not stored by Pylon LLC.
• Resend: our transactional email provider. Resend receives your email address and the content of emails we send you.
• Render: our hosting and infrastructure provider, which hosts the application servers and database.
• Backblaze B2: stores encrypted, compressed database backups for disaster recovery purposes.
• Sentry: application error monitoring, configured to scrub personal information and account numbers from error reports.
• Cloudflare: DNS and CDN provider that processes network traffic to and from the Site.
• Google (Google Tag Manager and Google Analytics): we use Google Tag Manager to load measurement tags on the Site, and Google Analytics to understand how visitors use the Site and to measure the effectiveness of our marketing. Google receives information described in Section 1.2 (including your IP address, pages viewed, device and browser characteristics, and randomly-generated analytics identifiers stored in cookies). Google's processing of this information is governed by its own privacy policy at policies.google.com/privacy. We have configured Google Analytics for first-party measurement only; we do not use it to build advertising audiences for cross-context behavioral advertising.

3.4 Legal Disclosures

We may disclose your personal information when required by law, regulation, or valid legal process, or when we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of Pylon LLC; (c) prevent or investigate fraud or security incidents; or (d) protect the safety of our users or the public.

3.5 Business Transfers

If Pylon LLC is involved in a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction. We will post notice of any such transfer and any material change to this Policy on the Site.

4. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, and no longer than required by law or our legal obligations. Specific retention periods:

• Account data (name, email, address, utility account information): retained for the duration of your active account, and deleted or anonymized within 12 months following account closure, subject to the exceptions below.
• Signed Letter of Authorization (LOA): retained indefinitely as a legal record. The LOA documents your signed authorization for Pylon LLC to act as your energy agent and must be available to regulators, suppliers, and parties in any dispute. Account closure does not delete your LOA.
• Audit log entries: retained indefinitely. Audit logs are append-only records of legally significant enrollment events and cannot be deleted.
• Bill upload images: not stored by Pylon LLC. Extracted field data is retained as part of your account record until account deletion.
• Application and error logs: retained for up to 30 days for operational purposes.

To request deletion of your account data, contact us at [email protected]. Deletion requests are subject to the retention obligations above.

5. Data Security

We implement technical and organizational measures to protect your personal information, including:

• Encryption of data at rest and in transit.
• Field-level encryption of sensitive data, including utility account numbers and, where collected, Social Security Numbers and dates of birth.
• Offline physical backup of encryption keys.
• Access controls limiting data access to personnel who require it.
• Audit logging of all enrollment actions and administrative access.
• Rate limiting and brute-force protections on authentication.
• Regular encrypted off-platform database backups.

No security measure is perfect or impenetrable. In the event of a data breach that requires notification under applicable law, we will notify affected users and regulators as required.

6. Cookies and Tracking

We use cookies and similar technologies for three purposes:

• Operating the Site and maintaining your session. We use session cookies and 90-day authentication tokens to keep you logged into your dashboard. Disabling these cookies may prevent your dashboard from functioning correctly.
• Usage analytics. Google Analytics, loaded via Google Tag Manager, sets first-party cookies (including _ga and related identifiers) used to distinguish unique visitors and measure how the Site is used. These cookies typically expire within two years. The information collected is described in Sections 1.2 and 3.3.
• Signup source. When you arrive at the Site, we set a first-party cookie (pylon_src) that records how you reached us: the referring website, any campaign tags in the link, and any ad click identifiers. It expires after 90 days. If you sign up, we store this with your signup record so we can measure which marketing channels bring us customers. This information stays with Pylon LLC; we do not send it to advertising platforms.

We do not use advertising cookies or cross-context behavioral advertising. We do not sell or share your personal information for advertising purposes. You can opt out of Google Analytics measurement by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout, or by blocking third-party scripts in your browser. Doing so will not affect the operation of your dashboard.

7. Your Rights and Choices

7.1 Pause or Stop Automatic Switching

You may pause or stop Pylon LLC's automatic rate-switching at any time via your dashboard. To formally revoke your LOA and terminate Pylon LLC's agency, submit a written request to [email protected].

7.2 Access, Correction, and Deletion

You may request access to, correction of, or deletion of your personal information by contacting us at [email protected]. We will respond within 45 days. Requests are subject to legal retention obligations described in Section 4. We may require verification of your identity before processing any request.

7.3 California Residents (CCPA/CPRA)

California residents have the following rights under the CCPA and CPRA:

• Right to know the categories and specific pieces of personal information we collect and how we use and share it.
• Right to delete personal information, subject to legal retention obligations.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing for cross-context behavioral advertising. We do not sell or share personal information for this purpose.
• Right to limit use of sensitive personal information. We use sensitive personal information only as necessary to provide the Service.
• Right to non-discrimination for exercising any of the above rights.

To exercise these rights, contact us at [email protected]. We will verify your identity before responding. California residents may designate an authorized agent to make requests on their behalf.

7.4 Residents of Other Supported States

Residents of Illinois, Ohio, Pennsylvania, New Jersey, New York, Massachusetts, Rhode Island, New Hampshire, Maine, Delaware, Texas, Connecticut, and the District of Columbia may have additional privacy rights under applicable state law, including rights to access, correct, and delete personal information. Contact us at [email protected] to exercise any such rights.

8. Children's Privacy

The Service is not directed to individuals under 18. Electricity account holders must be adults. If you believe we have inadvertently collected information from a minor, contact us at [email protected] and we will promptly delete it.

9. Third-Party Links

The Site may contain links to third-party websites, including utility and supplier websites. This Privacy Policy does not apply to those websites. We are not responsible for their privacy practices.

10. Changes to This Policy

We may update this Privacy Policy at any time. We will post the revised Policy on the Site with a new effective date. Material changes will be communicated by email or prominent Site notice. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

11. Contact Us

Pylon LLC
Email: [email protected]
Website: yourpylon.com