1. Who is responsible
B-GREEN S.à r.l. is the controller for EnergyFlow account, project and service data. Our registered office is 11 Hannert de Kleppbeem, L-6995 Rameldange, Luxembourg; RCS B219547; VAT LU30609827. Email contact@energyflow.tech for privacy questions or requests. You can also write to our registered office.
This notice covers the website, signed-in application and simulation reports. The service is intended for adults. Please provide your own information and avoid entering personal details about other people.
2. Information we process
Account information includes your email address, account identifier and sign-in/session information. Project information includes the house description, location used to select weather, building geometry, equipment, occupancy assumptions, schedules and tariffs you enter. We store simulation results, saved scenarios, report text and PDF files against your account.
For purchases, we process order references, package, price, currency, tax and payment/refund status. Stripe collects payment details on its checkout page; EnergyFlow does not receive your full card number or security code. Support messages and technical records can contain contact details, IP addresses, request times and error information.
This release uses manual house entry. CPE, plan and quote uploads are not part of the released wizard. Do not put names, health information, passwords or payment-card details in project names or other text fields.
3. Why we use it
We use account, house and result information to provide the service you request: sign-in, saved projects, simulations, scenario comparisons, report preparation and support. The lawful basis is performance of our contract, or steps you ask us to take before entering a contract (GDPR Article 6(1)(b)). Required inputs are identified in the application; without them we may be unable to run a useful simulation.
We process necessary transaction and tax records to meet legal obligations (Article 6(1)(c)). We use proportionate security, access and error records to protect accounts, prevent abuse, investigate failures and establish or defend legal claims (Article 6(1)(f), our legitimate interests). You can object to processing based on legitimate interests, subject to the applicable legal conditions.
Accepting the terms is not consent to marketing or optional tracking. We do not sell your personal data or use your house inputs or documents to train AI models. Any future optional marketing or non-essential tracking will require its own information and, where required, consent.
4. How the AI report summary works
The simulation produces the numerical results. AI helps explain selected results in plain language; it does not run the energy model, choose your equipment or make decisions with legal effects. The results page identifies an AI-generated explanation or a factual summary. Check the figures and discuss final building or equipment choices with a qualified professional.
For AI narration, our server sends OpenRouter selected, structured house and equipment characteristics, model assumptions, aggregated energy and cost figures, and temperature findings computed from your simulation. OpenRouter routes the request to a compatible provider serving an Anthropic model, such as Amazon Bedrock. The AI does not receive your name, email address, street address, postal code, coordinates, account/project identifiers, project name, uploaded documents or arbitrary text you entered. It receives no raw annual hourly file. Detailed house characteristics can still describe a distinctive property; removing direct identifiers does not guarantee irreversible anonymity.
AI requests may be processed outside the EEA, including in the United States. We require routes designated for no training and zero data retention for inference. These controls do not mean that all provider data is deleted immediately: transient memory/buffering or caching, billing and security metadata, and legally required records can be handled under the provider terms. We do not enable model web-search tools or plugins for report narration.
We save the validated summary with the run so the website and PDF agree. Returning to results or downloading the PDF reuses it. When AI is unavailable, fails validation or reaches our spending limit, a factual summary can be supplied instead. Operational records include the model/provider, generation time and usage/cost, without putting report request bodies in application logs.
5. Service providers and access
Vercel serves the website and application. Fly.io runs the API and simulation workers in Frankfurt. Neon provides the application database in the EU, Upstash Redis carries job queues, and Cloudflare R2 holds private project/result/report files in our EU storage configuration. These services receive the information needed to host, protect or operate their part of EnergyFlow; network and support operations may involve other locations.
Clerk handles account identity and sessions, including US-hosted processing. It does not receive house inputs, documents or simulation results in account metadata. Stripe handles checkout, payments, tax and refunds when purchasing is enabled. OpenRouter and the selected model-serving provider receive only the report input described above. Email services process sign-in and support correspondence; service emails use an email provider when enabled. A provider named here is not a promise that every planned feature is available.
Only authorized personnel and service providers may access data for their assigned purpose. We may also disclose necessary information to authorities where legally required, or to establish or defend legal claims. Saved projects and reports are not published as a public database.
6. Processing outside the EEA
EU application storage does not mean every processing operation stays in the EU. Identity, payment, website/network services and the limited AI request can involve the US or other countries. For restricted transfers, the applicable provider arrangements use adequacy decisions for covered recipients or European Commission standard contractual clauses with relevant safeguards. Ask contact@energyflow.tech for information about the safeguards applicable to your data and a copy where available, with confidential commercial information removed.
OpenRouter's data-processing agreement is incorporated into its commercial terms and includes transfer clauses. Its zero-retention routing is a separate technical restriction, not a substitute for transfer safeguards. We review these boundaries when changing providers or the information sent to them.
7. Retention and deletion
For a paid project, house data, saved runs, summaries and PDFs are retained until 24 calendar months after the applicable paid access ends. A full refund that revokes access starts that 24-month period at revocation. New simulations stop at access expiry; retained PDFs remain available during the retention period. Free accounts with no purchase retain saved house/run data for 12 months of inactivity. You may request earlier deletion by email. These are retention policies; expiry cleanup may be carried out by an operator while automated scheduling is being completed.
Account deletion removes the associated house and run data and private report files, subject to any applicable legal exception. A request acknowledgment is not confirmation that deletion has finished. We restrict access while deletion is pending, handle failed cleanup attempts and confirm completion separately. Backup copies can remain for the provider's limited backup cycle; they are not used as an active archive, and deletion must be reapplied if a backup is restored.
We retain necessary accounting records separately for 10 years after the close of the relevant financial year where Luxembourg accounting law requires it. Deleting a house or account does not erase legally required invoices and payment records. Support and security records are kept only as long as needed to resolve the request, investigate an incident or establish/defend a claim within the applicable period; unrelated house details are not required for accounting retention.
9. Your rights and complaints
Subject to the GDPR's conditions, you can request access, correction, erasure, restriction and portability of your personal data, and object to processing based on legitimate interests. If processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Contact contact@energyflow.tech from your account email; we may need proportionate information to verify that the request is yours.
We normally respond within one month of receiving a request. If the law permits an extension for a complex or numerous request, we will explain it within that first month. Our ordinary support reply target does not change these statutory deadlines.
You can lodge a complaint with Luxembourg's Commission nationale pour la protection des données (CNPD), or the supervisory authority in the EEA country where you live or work or where an alleged infringement occurred. See cnpd.public.lu for the CNPD complaint procedure. You do not have to contact us first.
10. Changes to this notice
This English notice applies from 11 October 2026 to the described service processing. We retain a dated copy and publish changes here. We will give additional information where a new purpose, provider or data flow requires it. Public release in additional languages and opening paid sales are separate release steps.
Permanent link to this notice. Contact us or visit the CNPD rights and complaints page.