Privacy Policy

TariffSmart is a trading name of TariffSmart Energy Ltd (company number 17340814), a company based in the United Kingdom. This policy explains what personal data we collect when you use TariffSmart, why, and what rights you have over it.

Who we are

TariffSmart (TariffSmart Energy Ltd, company number 17340814) is the data controller for the personal data described in this policy. You can contact us at privacy@tariffsmart.co.uk with any question about how we handle your data.

What data we collect

• Your account email address.
• Your postcode and whether you have an electric vehicle or a heat pump, collected during onboarding to match you to eligible tariffs.
• Energy bill PDFs you upload. These are processed in memory to extract your usage data and are never stored — the file itself is discarded once processing finishes.
• The half-hourly consumption data extracted from those bills (date, time, and kWh used).
• Your tariff comparison results.

Why we process your data, and our legal basis

• Providing the comparison service — reading your bill, storing your usage data, and running tariff comparisons. Legal basis: performance of our contract with you.
• Service emails — account verification, password resets, and updates about your bill or comparison. Legal basis: performance of our contract with you.
• Marketing emails — energy-saving tips and product updates, only if you opted in at signup. Legal basis: your consent, which you can withdraw at any time.

Who we share data with

We use the following processors to run TariffSmart. None of them are permitted to use your data for their own purposes.

• Supabase — our EU-hosted database and authentication provider. Stores your account, profile, and consumption data.
• Anthropic — the text extracted from your bill is sent to Anthropic's Claude API to identify and extract your half-hourly consumption data. This data is not used by Anthropic to train their models.
• Vercel and Railway — hosting for our website and backend.
• Cloudflare — DNS and security for tariffsmart.co.uk.
• Resend — sending account and service emails.
• Sentry — error monitoring, to help us find and fix bugs.

How long we keep your data

We keep your account, profile, and consumption data for as long as your account exists, or until you ask us to delete it. Uploaded bill PDFs are never retained — only the extracted consumption data is stored.

Internal service statistics

We keep aggregate, non-identifying counts of activity on TariffSmart — for example how many people have signed up, how many bills have been processed, and how many comparisons have been run — to understand and administer the service. These figures are simple counts, never tied back to an individual account or used for profiling, and we don't share them with third parties. Legal basis: our legitimate interest in running and improving the service (UK GDPR Art. 6(1)(f)).

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Erase your data — you can permanently delete your account and all associated data at any time from your Profile page.
• Receive a copy of your data in a portable format — available as a data export from your Profile page.
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data.

We are registered with the Information Commissioner's Office (ICO), registration number ZC198902. TariffSmart Energy Ltd is the data controller.

Contact us

Questions about this policy or your data can be sent to privacy@tariffsmart.co.uk.