This Privacy Policy explains how Dev Vaibhav Markandey trading as EnerxAI ("we", "us", "our") collects, uses, and protects your personal data when you use the EnerxAI platform at enerxai.io ("the Platform").
We are committed to protecting your privacy and handling your data with transparency and care.
1. Who We Are
EnerxAI is operated by Dev Vaibhav Markandey (sole proprietor). Contact: support@enerxai.io
For the purposes of applicable data protection law (including the UK GDPR and EU GDPR), Dev Vaibhav Markandey is the data controller for personal data collected through the Platform.
2. What Data We Collect
2.1 Account Data
When you register, we collect:
- Email address
- Password (stored encrypted — we never see your plain-text password)
- Date of account creation
- Role preference (if provided during subscription setup)
2.2 Usage Data
When you use the Platform, we automatically collect:
- Reports generated (type, zone, timestamp)
- Wallet transactions (top-up amounts, report charges)
- Subscription status and configuration
- Alert rules configured
- Zones watched
2.3 Payment Data
Payment processing is handled entirely by Dodo Payments. We do not store your card number, CVV, or full payment details. We receive from Dodo Payments:
- Payment confirmation and transaction ID
- Amount paid
- Payment status
2.4 Technical Data
- IP address (used for fraud prevention on free trial usage)
- Browser type and version
- Device type
- Pages visited and time spent
2.5 Communications
If you contact us for support or submit a feature request, we retain the content of that communication.
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Providing the Platform and delivering reports | Contract performance |
| Processing payments and managing wallet balance | Contract performance |
| Sending Morning Brief emails | Contract performance (subscription) |
| Sending Signal Alert emails | Contract performance (subscription) |
| Preventing fraud and abuse (IP-based trial limits) | Legitimate interests |
| Improving the Platform | Legitimate interests |
| Responding to support requests | Legitimate interests |
| Complying with legal obligations | Legal obligation |
| Sending product updates (if opted in) | Consent |
4. Data Sources We Use
The Platform processes publicly available energy market data from:
- ENTSO-E — EU TSO network data
- Energinet — Danish 5-minute wind/solar data
- GIE/AGSI — EU gas storage data
- Elexon BMRS — GB power market data
- Open-Meteo — Weather forecast data (open-meteo.com)
- EIA — US energy data (used internally only)
None of this data contains personal information. It is grid telemetry and market pricing data.
5. Who We Share Your Data With
We share your data only with:
5.1 Dodo Payments
For payment processing. Dodo Payments acts as Merchant of Record and processes your payment details directly. See Dodo Payments' privacy policy at dodopayments.com.
5.2 Supabase
Our database provider (hosted in Frankfurt, EU). Your account data and usage data are stored on Supabase infrastructure.
5.3 Vercel
Our hosting provider. Processes server requests including your IP address.
5.4 Resend
Our email delivery provider. Used to send Morning Brief and Signal Alert emails. Your email address is shared with Resend solely for delivery purposes.
5.5 Google (Gemini AI) and Anthropic (Claude AI)
Our AI providers process zone data and generate intelligence reports. We do not send your personal data to these providers. Only grid telemetry data (prices, generation, stress scores) is processed by AI models.
5.6 Legal Requirements
We may disclose your data if required by law, court order, or to protect our legal rights.
We do not sell your personal data to any third party.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days |
| Transaction records | 7 years (tax/legal requirement) |
| Report generation logs | 2 years |
| Signal delivery records | 1 year |
| Support communications | 2 years |
| IP address logs (fraud prevention) | 90 days |
7. Your Rights
Under UK GDPR and EU GDPR, you have the right to:
7.1 Access — Request a copy of the personal data we hold about you.
7.2 Rectification — Request correction of inaccurate personal data.
7.3 Erasure — Request deletion of your personal data ("right to be forgotten"), subject to our legal retention obligations.
7.4 Portability — Request your data in a machine-readable format.
7.5 Restriction — Request that we restrict processing of your data in certain circumstances.
7.6 Object — Object to processing based on legitimate interests.
7.7 Withdraw consent — Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, email us at support@enerxai.io. We will respond within 30 days.
8. Cookies
The Platform uses essential cookies only:
- Authentication cookies — to keep you logged in (Supabase session)
- Preference cookies — to remember your settings
We do not use advertising cookies or third-party tracking cookies.
9. International Transfers
Your data may be transferred to and processed in countries outside the UK/EU (including the United States, where Vercel and Anthropic are based). Where such transfers occur, we ensure appropriate safeguards are in place including Standard Contractual Clauses where required.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted data storage (Supabase)
- Encrypted data transmission (HTTPS)
- Row-level security on all user data tables
- Passwords stored using bcrypt hashing
- Service role keys restricted to server-side use only
11. Children
The Platform is not directed at children under 18. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email. The "Last updated" date at the top of this page indicates when the policy was last revised.
13. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with:
UK: Information Commissioner's Office (ICO) — ico.org.uk EU: Your local data protection authority
We would appreciate the opportunity to address your concerns directly first — please email support@enerxai.io.
14. Contact
Data Controller: Dev Vaibhav Markandey trading as EnerxAI Email: support@enerxai.io Platform: enerxai.io
This Privacy Policy was drafted to comply with UK GDPR, EU GDPR, and applicable data protection legislation.