Privacy Policy

Introduction

Spigot Software LLC, a California limited liability company ("Spigot", "we", "our", or "us"), operates the Spigot web application and Spigot Field mobile application. This Privacy Policy explains how we collect, use, and protect information when you use our services.

Information We Collect

Account Information: We collect your email address when you create an account. It is used to authenticate you and to deliver service emails related to your water company, such as bills, statements, payment receipts, and notices.

Billing and Account Records: Water companies using Spigot maintain records about their shareholders, tenants, and account holders, such as names, service and mailing addresses, phone numbers, share assignments, bills, and payment history. Spigot processes these records on behalf of and at the direction of your water company, and portal users can view and update their own mailing address.

Meter Readings: Field staff submit meter readings through the Spigot Field app; readings can also be imported from a CSV file or retrieved automatically from your water company's AMR/AMI meter-reading vendor when your company connects one. Readings entered in the field are associated with the submitting user's account and synced to the Spigot dashboard. On field devices, route data and captured readings are cached in an encrypted local database on the device until they sync.

Location Data: The Spigot Field app uses a crew member's device location only while the app is open, to show and sort nearby meters by distance during a reading route; this device location is not stored on our servers. Separately, staff can save the fixed geographic coordinates of water-system assets (properties, meters, and supply points) so crews can locate them. These are infrastructure locations we retain as part of your system records, not personal tracking.

Meter images: The Spigot Field app can use the device camera to read a meter dial. The image is sent to our image text-recognition provider to extract the number, and is not uploaded to or stored on Spigot's servers. Only the resulting numeric reading is saved.

Payment Information: Customers who pay bills online through the Spigot portal do so via Stripe, a third-party payment processor. Spigot does not collect or store credit card numbers, bank account details, or any payment card data. All payment information is handled directly by Stripe. Spigot receives only a confirmation of payment status from Stripe.

Integration Credentials: If your water company connects an optional integration such as QuickBooks Online or an AMR/AMI meter-data service (for example, Badger BEACON), we store the credentials or tokens needed to operate that connection. They are encrypted at rest and used only to run the integration your company connected.

Website Analytics: On our marketing website (usespigot.com), we use Google Analytics to measure aggregate, anonymized traffic (such as pages viewed, general region, and referral source) using first-party cookies. We have disabled Google Signals, so this data is not used for advertising or cross-site tracking, and analytics cookies are not used to identify you personally.

How We Use Your Information

We use collected information exclusively to operate and improve the Spigot platform. We do not sell, share, or disclose your information to third parties for advertising or marketing purposes.

Data Storage and Security

Application data is hosted with established cloud infrastructure providers that maintain SOC 2 compliance. Data is encrypted in transit (TLS) and encrypted at rest in our cloud database. Access is restricted to authorized staff and administrators of your water company.

Third-Party Services

Spigot uses the following third-party services to operate:

• Stripe: online payment processing for customer bill payments
• Cloud hosting and database providers: application hosting, data storage, and authentication
• Email delivery provider: transactional and notification emails
• Image text-recognition provider: automated reading of meter images captured in the field app (Google Cloud Vision)
• Error-monitoring provider: application error and performance diagnostics (Sentry)
• Intuit QuickBooks Online: accounting synchronization of summary journal entries (company financial totals, not account-holder personal information), only when your water company connects it
• AMR/AMI meter-data vendors (e.g., Badger BEACON): automatic retrieval of meter serial numbers and readings, only when your water company connects its vendor account
• Google Analytics: aggregate website traffic measurement on our marketing site (Google Signals disabled)

Data Retention

We retain your data for as long as your organization maintains an active Spigot account. After account termination, we delete or de-identify personal data within 90 days of a request, except where we are required to retain it for legal, tax, accounting, or dispute-resolution purposes. Residual copies may persist temporarily in routine encrypted backups until those backups are overwritten on a rolling cycle.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at contact@spigothq.com.

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the following rights regarding your personal information:

• Right to know: the categories and specific pieces of personal information we have collected, the sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to delete: request deletion of personal information we have collected, subject to legal exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to opt out of sale or sharing: we do not sell your personal information or share it for cross-context behavioral advertising, so no opt-out is necessary. If this ever changes, we will provide a "Do Not Sell or Share My Personal Information" mechanism.
• Right to limit sensitive personal information: we use any sensitive personal information only as needed to provide the Service.
• Right to non-discrimination: we will not discriminate against you for exercising any of these rights.

To exercise these rights, contact us at contact@spigothq.com. We will verify your request and respond within the timeframes required by law, and you may use an authorized agent to submit a request on your behalf, subject to verification. Note that much of the personal information we process belongs to shareholders or account holders of a water company that uses Spigot; where we act as a service provider to that water company, we will direct your request to them or assist them in fulfilling it.

Other U.S. State Privacy Rights

Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and others) may have similar rights to access, correct, delete, or obtain a copy of their personal information, and to opt out of certain processing. To exercise any such rights, contact us at contact@spigothq.com.

Children's Privacy

Spigot is intended for use by water company staff and administrators and by the adult shareholders, tenants, and account holders of those companies. We do not knowingly collect information from anyone under the age of 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email.

Contact

If you have questions about this Privacy Policy please contact us at contact@spigothq.com or visit usespigot.com.