Features How It Works Field App Pricing FAQ Log in Request a demo

Legal

Privacy Policy

Last updated:

Introduction

Spigot Software LLC, a California limited liability company ("Spigot", "we", "our", or "us"), operates the Spigot product suite, including the Spigot Utility web application, Spigot Field mobile application, Spigot ID and Suite account-management service, and our public website. This Privacy Policy explains how we collect, use, and protect information when you use our services.

Information We Collect

Account Information: We collect your name and email address when you create or use an account. For water-company staff who use Spigot ID, our identity provider, WorkOS, authenticates the account, and we retain the immutable provider identifier needed to link that identity safely to Spigot. Account information is used for authentication and to deliver service emails related to your water company, such as invitations, bills, statements, payment receipts, and notices.

Suite Organization and Access Records: For water-company staff, we maintain the organization you belong to, your organization role and membership status, invitations sent to you, and your assigned product seats and access levels. These records determine which Spigot products and organizations you may open. Water-company customers and ratepayers continue to use their Utility portal accounts and do not need a Spigot ID merely to view or pay a bill.

Billing and Account Records: Water companies using Spigot maintain records about their shareholders, tenants, and account holders, such as names, service and mailing addresses, phone numbers, share assignments, bills, and payment history. Spigot processes these records on behalf of and at the direction of your water company, and portal users can view and update their own mailing address.

Meter Readings: Field staff submit meter readings through the Spigot Field app; readings can also be imported from a CSV file or retrieved automatically from your water company's AMR/AMI meter-reading vendor when your company connects one. Readings entered in the field are associated with the submitting user's account and synced to the Spigot dashboard. On field devices, route data and captured readings are cached in an encrypted local database on the device until they sync.

Location Data: The Spigot Field app uses a crew member's precise device location only while the By distance view is open and the app is in the foreground, to calculate distances and sort nearby meters during a reading route. Those precise GPS coordinates are processed only within the app on the device; they are not transmitted to or retained on Spigot's servers. Location access can be revoked at any time in iOS Settings; route order remains available without it. Separately, staff can save the fixed geographic coordinates of water-system assets (properties, meters, and supply points) so crews can locate them. These are infrastructure locations we retain as part of your system records, not personal tracking.

Meter images: The Spigot Field app can use the device camera to read a meter dial. The image is sent to our image text-recognition provider to extract the number, and is not uploaded to or stored on Spigot's servers. Only the resulting numeric reading is saved.

Payment and Subscription Information: Stripe processes customer water-bill payments and water-company payments for Spigot subscriptions and one-time services. Spigot does not store full card numbers or bank-account numbers. We do retain the records needed to administer and reconcile those payments, such as Stripe customer, subscription, price, Checkout, payment-intent, and subscription-item identifiers; product and charge descriptions; amounts and currency; payment or subscription status; and relevant dates. A water company's Spigot subscription records are separate from its customers' water-bill payment records.

Demo and Contact Requests: If you request a demo or contact us through our public website, we collect your first and last name, email, organization, approximate number of service connections, and any message you choose to provide so we can respond to and manage the request.

Integration Credentials: If your water company connects an optional integration such as QuickBooks Online, ArcGIS Online, or an AMR/AMI meter-data service (for example, Badger BEACON), we store the credentials or tokens needed to operate that connection. They are encrypted at rest and used only to run the integration your company connected.

Website Analytics: On our marketing website (usespigot.com), we use Google Analytics to measure aggregate, anonymized traffic (such as pages viewed, general region, and referral source) using first-party cookies. We have disabled Google Signals, so this data is not used for advertising or cross-site tracking, and analytics cookies are not used to identify you personally.

How We Use Your Information

We use collected information to provide, secure, support, bill for, and improve the Spigot platform; administer organizations, memberships, invitations, and product access; process and reconcile payments; operate customer-selected integrations; and respond to demo and contact requests. We do not sell personal information or share it for advertising or cross-context behavioral advertising.

Data Storage and Security

Application data is hosted with established cloud infrastructure providers. Data is encrypted in transit (TLS) and encrypted at rest in our cloud databases. Access is restricted to authorized users of your water company, authorized Spigot personnel, and service providers that need access to operate the Service.

Third-Party Services

Spigot uses the following third-party services to operate:

  • Stripe: payment processing and related billing records for customer water-bill payments, water-company Spigot subscriptions, and one-time Spigot services
  • WorkOS: authentication and credential management for Spigot ID accounts used by water-company staff
  • Cloud hosting and database providers: application hosting, data storage, and product-local authentication
  • Email delivery provider: transactional and notification emails
  • Image text-recognition provider: automated reading of meter images captured in the field app (Google Cloud Vision)
  • Error-monitoring provider: application error and performance diagnostics (Sentry)
  • Intuit QuickBooks Online: accounting synchronization of summary journal entries (company financial totals, not account-holder personal information), only when your water company connects it
  • AMR/AMI meter-data vendors (e.g., Badger BEACON): automatic retrieval of meter serial numbers and readings, only when your water company connects its vendor account
  • Google Analytics: aggregate website traffic measurement on our marketing site (Google Signals disabled)

Customer-connected ArcGIS Online: ArcGIS Online is an optional destination selected and connected by your water company, not a destination Spigot enables for every customer. When an authorized administrator connects it, Spigot publishes a one-way service-location layer into that company's own ArcGIS Online organization. The current layer includes coordinates, service account and connection number, account-holder name, service address, billing status, and meter class. Esri handles that published copy under the connected organization's account, access settings, and agreement with Esri.

Data Retention

We retain organization and application data for as long as the organization maintains an active Spigot account. We retain demo and contact-request information as needed to respond to the request and manage the resulting business relationship. After account termination, we delete or de-identify personal data within 90 days of a request, except where we are required to retain it for legal, tax, accounting, security, or dispute-resolution purposes. Residual copies may persist temporarily in routine encrypted backups until those backups are overwritten on a rolling cycle.

Customer Portal and Privacy Requests

The customer portal does not offer self-service account deletion. Your water company controls its customer and water-service records. Contact your water company about closing a water-service account or requesting access to, correction of, or deletion of those records. You may also contact Spigot at the address below for help directing a privacy request. Ending portal access does not cancel water service or erase bills, payments, balances, or records your water company must retain. Deletion requests remain subject to applicable legal exceptions and record-retention requirements.

You may request access to, correction of, or deletion of your personal data by contacting us at contact@spigothq.com.

Your California Privacy Rights

Where applicable, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives California residents the following rights regarding your personal information:

  • Right to know: the categories and specific pieces of personal information we have collected, the sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to delete: request deletion of personal information we have collected, subject to legal exceptions.
  • Right to correct: request correction of inaccurate personal information.
  • Right to opt out of sale or sharing: we do not sell your personal information or share it for cross-context behavioral advertising, so no opt-out is necessary. If this ever changes, we will provide a "Do Not Sell or Share My Personal Information" mechanism.
  • Right to limit sensitive personal information: we use any sensitive personal information only as needed to provide the Service.
  • Right to non-discrimination: we will not discriminate against you for exercising any of these rights.

To exercise these rights, contact us at contact@spigothq.com. We will verify your request and respond within the timeframes required by law, and you may use an authorized agent to submit a request on your behalf, subject to verification. Note that much of the personal information we process belongs to shareholders or account holders of a water company that uses Spigot; where we act as a service provider to that water company, we will direct your request to them or assist them in fulfilling it.

Other U.S. State Privacy Rights

Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and others) may have similar rights to access, correct, delete, or obtain a copy of their personal information, and to opt out of certain processing. To exercise any such rights, contact us at contact@spigothq.com.

Children's Privacy

Spigot is intended for use by water company staff and administrators and by the adult shareholders, tenants, and account holders of those companies. We do not knowingly collect information from anyone under the age of 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email.

Contact

If you have questions about this Privacy Policy please contact us at contact@spigothq.com or visit usespigot.com.