Privacy policy

WaterMe provides a water-consumption platform to water utilities: a console for utility staff and a mobile app for their customers.

Two roles, two responsibilities

• Your water utility is the data controller for the data in your utility account: your identity and contact details, contracts, meters, readings and consumption. WaterMe processes that data on the utility's behalf as a processor. Privacy requests can go to your utility or directly to us — we route them.
• WaterMe is the data controller for console staff accounts, this website's visitors, and the platform's own service telemetry.

What we process

• Identity & contact — name, email (from you or your utility).
• Account & contract — account reference, service-point address, contract dates.
• Metering — readings and consumption per meter; consumption can reveal household patterns, so we treat all of it as personal data.
• App activity — sign-ins, screens used, app version; first-party only, no third-party analytics or advertising SDKs.
• Support — messages you send via in-app support, and our replies.
• Notifications — your device's push token, with your OS-level permission.
• Technical — server logs and error traces (passwords and tokens filtered out).

Why (legal bases)

• Contract — performing the utility's service: your consumption, bills and estimates, alerts, challenges.
• Legitimate interests — security (audit trails, access logging, tenant isolation), first-party service-quality telemetry, abuse prevention.
• Consent — push notifications (revocable any time in system settings).

Who we share it with

Nobody buys, rents or receives your data for marketing. We use a small set of service providers: server and database hosting, error and uptime monitoring (EU), transactional email and push-notification delivery (US providers — transfers covered by Standard Contractual Clauses).

Retention

• Your account: as long as your utility contract makes the service available, or until you delete your account.
• Uploaded import files: purged after your utility's configured retention period (default 90 days).
• Service telemetry: purged on a rolling schedule.
• Meter readings and consumption history belong to your utility's regulated records and remain with the utility after account deletion (GDPR Art. 17(3)).

Your rights

Access, rectification, erasure, portability, restriction, objection — and complaint to your supervisory authority (in France, the CNIL, cnil.fr). Erasure is self-service: delete your account in the app (Profile → delete account, password-verified). For everything else: hello@waterme.space or your utility — we answer within one month.

Security

Row-level tenant isolation enforced in the database itself, encrypted transport, bcrypt password hashes, revocable database-backed sessions, and a full audit trail of administrative actions — including any access by WaterMe platform staff to a utility's tenant, which is individually logged.

Children & changes

The service accompanies a household water contract and is not directed at children. Any material change to this policy will be posted here and dated.