Energy Modeller
Log in

Legal

Privacy Notice

Effective date: 17 May 2026 · Last updated: 21 June 2026

1. Who we are

EM AI Ltd, trading as Energy Modeller (“we”, “us”), acts in two capacities:

Registered office: 2 Edensmuir Court, Glenrothes, KY7 6GQ, Scotland (registered in Scotland, company number SC892873). ICO registration number: ZC176891. Contact: privacy@energymodeller.com.

2. What we collect

From installers (as controller): email, company name, website, phone, brand colours, MCS certificate number, billing details (handled by Stripe; we store only payment IDs and subscription state), service-account audit logs.

From installers’ end customers (as processor on behalf of the installer):name, address, postcode, email, phone, energy bill data, questionnaire responses, chatbot conversations, signature metadata (IP, timestamp, T&Cs hash), smart-meter consumption data (when authorised via n3rgy or similar).

3. Why we process it

3a. How recommendations work — and how we keep your data siloed

When we generate a recommendation or quote for an installer, we process that installer’s own identifiable customer records (postcode, usage, quote activity, etc.) to return the result to that installer. We do this as the installer’s processor— on their data, for their eyes only, as part of delivering the Service they signed up for.

We do not pool one installer’s data with another’s. The results you see on your own leads and quotes are always computed from your own account’s data — never from another account’s identifiable customers, quotes or commercial figures. (If in future we introduce any platform-wide model improvement, it would use only aggregated, de-identified data that identifies no individual, and we would update this notice before doing so.)

What we do NOT do: we do not send installer or end-customer personal data to any third-party AI vendor for that vendor to train on. Our AI sub-processors (e.g. Anthropic, OpenAI) are used on no-training / zero-retention API terms — they process a request to return a result and do not retain it to train their models.

4. Who we share data with

We use the following subprocessors to deliver the Service. We hold data processing agreements with the processors that handle personal data; processors tied to an optional feature (e.g. voice, smart-meter data) or an installer-connected integration are covered by a DPA before that feature or integration is enabled:

5. Retention

6. Your rights

Under UK GDPR you have the right to:

To exercise any of these, email privacy@energymodeller.com. We respond within one month (UK GDPR Art. 12(3)), and will tell you promptly if a request needs identity verification or an extension for complexity.

Installers can self-serve a machine-readable export of their account data at any time from their account settings. End customers (homeowners): because the installer is the controller of your data, send access or erasure requests to your installer; we action them on the installer’s instruction as their processor, or directly if you contact us and we route it to them.

7. International transfers

Some subprocessors (Vercel, Anthropic, OpenAI, ElevenLabs, Stripe) process data in the US. We rely on Standard Contractual Clauses + the UK Addendum and, where applicable, the EU-US Data Privacy Framework.

8. Cookies

We use a single httpOnly session cookie (__Host-em_session) for authentication, which is strictly necessary and needs no consent. We also use PostHog (EU region) for product analytics and session replay to understand how the product is used and improve it. PostHog is off by default and only starts after you accept non-essential cookies via the banner; it is disabled for our own staff sessions, does not auto-capture every click, and masks form inputs. Session replay is switched off entirely on customer- facing pages (proposal, intake, formal-quote). You can decline at any time and we respect Do-Not-Track.

9. Changes

Material changes to this Notice will be emailed at least 30 days before they take effect.