AlbSoftUtilityCore is supplied to participating utility organizations. The organization using the service ordinarily decides why customer and operational records are processed. Its own notice, agreement, and local legal requirements may provide additional terms.
Information processed
Depending on the deployment and user role, UtilityCore can process customer codes, names, addresses and optional phone numbers; meter and reading records; billing periods, tariffs, invoices and payments; notifications; verified account email addresses, credentials and authentication sessions; audit events; device synchronization records; reports; and operational monitoring data.
Why information is processed
Records are processed to operate the utility service, support field work, synchronize authorized devices, manage billing and payments, maintain auditability, secure user access, troubleshoot service operation, and meet the participating organization’s legal or operational requirements.
Offline and synchronized storage
The Android field client can store authorized operational records locally so work can continue without a network connection, then synchronize when connectivity returns. Android authentication tokens use Android Keystore-backed encryption. The web portals are online-only. Commercial and Operations use secure, HttpOnly refresh cookies and in-memory access tokens; the Platform administrator portal holds its access token in memory.
System boundaries
Identity manages customer account credentials and verification. Commercial manages subscriptions and related finance. Platform administrators operate tenant lifecycle controls. Operations manages each participating utility’s business records. Access between these systems is limited to authorized, purpose-specific exchanges rather than shared user sessions or unrestricted database access.
Sharing and retention
Information may be available to the participating organization’s authorized users, AlbSoft personnel or service providers who need access to operate and support the service, and authorities where legally required. Retention, deletion, and access rules depend on the organization’s deployment agreement and applicable law. AlbSoft does not sell UtilityCore customer records.
Our service providers include Render for application hosting, Neon for database hosting, Resend for transactional email, and Cloudflare for the public website and email routing. Service infrastructure may process data outside your country. Transactional email includes account verification, invitations, and security or account notifications. UtilityCore does not contain advertising or advertising tracking.
Account credentials and session records are retained while needed for account access and security. Operational and financial records are retained according to the participating utility’s obligations; deleting a sign-in does not delete that organization’s invoices, payments, or audit history. There is no single retention period for every organization and record type. Contact us for the retention rules applicable to your account. Restricted backups, where maintained, may retain records until their normal expiry and are not used to restore a deleted account to active use.
Security and individual requests
UtilityCore uses role-based access, authenticated synchronization, encryption in transit, and audit records. No system is completely secure. Individuals should ordinarily direct requests about a utility company’s customer or billing records to that organization. For a UtilityCore account-deletion request, use our account-deletion page. For other privacy questions contact support@albsoft.me. Do not send passwords or customer records by email.
You can request deletion from the Android account settings or the relevant account portal, or contact support if you cannot sign in. Identity verification is required. An account owning a subscription or administering a workspace may need to transfer responsibilities or resolve open obligations first. We revoke access and remove or de-identify eligible personal account information; financial and security records needed for legitimate obligations may remain with restricted access.
Device access and your choices
The Android app uses network access for authentication and synchronization. Meter and customer details are entered through the app; the current app does not request access to your contacts, microphone, or precise location. Offline records remain on an authorized device until removed through the app’s storage lifecycle or by clearing its data or uninstalling it. Device owners should protect their screen lock and avoid sharing an authorized device. Clearing local data does not delete synchronized server records.
Children
UtilityCore is a business tool intended for authorized utility personnel, not a service directed at children. Contact support if you believe a child has provided personal account information.
Changes
This policy may be updated as the service and deployment terms evolve. The effective date above identifies this website version. Material changes will be communicated through the service or another appropriate channel.