MeterLens (ReportRight Ltd)("we", "us", "our") operates the MeterLens platform and the website at www.meterlens.com. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. What we collect
We may collect the following personal data:
- Account information: name, email address, job title, and organisation name when you request a demo or create an account.
- Usage data: pages visited, features used, and session duration to improve the platform.
- Technical data: IP address, browser type, and device information collected automatically.
- Communications: any messages you send us via email or contact forms.
2. How we use it
We use your personal data to:
- Provide and maintain the MeterLens platform
- Respond to demo requests and support enquiries
- Send product updates and operational notifications (with your consent)
- Analyse usage patterns to improve the platform
- Comply with legal obligations
3. Legal basis for processing
We process your personal data on the following bases:
- Contractual necessity: to provide the platform services you have requested.
- Legitimate interests: to improve our services, ensure security, and communicate about relevant features.
- Consent: for optional communications such as marketing emails. You may withdraw consent at any time.
- Legal obligation: where required by law.
4. Data sharing
We do not sell your personal data. We share data only with the service providers below, each under a data processing agreement:
- Hosting and infrastructure: Railway (EU region, Amsterdam, Netherlands).
- Analytics (only with your consent): Google Analytics 4 via Google Tag Manager, and Microsoft Clarity. See our Cookie Policy.
- AI processing: OpenAI, used only for text embeddings to power evidence search. Submitted content is not used to train models, and is processed under OpenAI's API data use policy.
We do not use your building data, meter readings, or compliance evidence to train AI models.
5. Data retention
We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. Account data is retained while your account is active and for a reasonable period after closure. You may request deletion at any time.
6. Data security
Credentials (such as integration API keys and tokens) are encrypted at rest with AES-256-GCM, and passwords are hashed with scrypt. Other data at rest is protected via our cloud provider's managed disk encryption. All traffic is encrypted in transit with TLS, and sessions are managed server-side. See our Security page for more detail.
7. Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner's Office (ICO)
8. Cookies
We use essential cookies to operate the website and optional analytics cookies with your consent. See our Cookie Policy for full details.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via the platform or by email. The "last updated" date at the top reflects the most recent revision.
10. Contact
For any data protection enquiries, requests, or complaints, contact us at: support@meterlens.com
MeterLens (ReportRight Ltd), registered in England and Wales.