Privacy Policy

Sagacity Technology Group LLC ("we," "us," or "our") operates Green Law Automator at greenlawautomator.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service to prepare and file Boston BERDO 2.0 compliance reports.

By using the Service you agree to the collection and use of information as described in this policy. If you do not agree, do not use the Service.

1. Information We Collect

1.1 Information You Provide

• Property name, street address, city, and ZIP code
• Gross floor area and property type
• Contact email address for filing delivery
• Utility bill documents (PDF, PNG, JPG, or TIFF) uploaded for processing
• Payment information processed securely by Stripe — we never store card numbers

1.2 Information Collected Automatically

• IP address and browser type for security and fraud prevention
• Pages visited and actions taken within the Service (via Vercel analytics, if enabled)
• Device type and operating system

1.3 Utility Bill Data

Uploaded utility bills are processed using OpenAI's API to extract energy consumption data (kWh and Therms). Raw utility documents are processed in memory only and are never stored on our servers after extraction is complete. Sensitive identifiers such as utility account numbers are cryptographically hashed (SHA-256) before any further processing and are never stored in plain text.

2. How We Use Your Information

• To extract and normalize energy data from your utility bill for BERDO 2.0 compliance
• To generate your city-compliant filing document via PDF.co
• To deliver the completed filing to your email address via SendGrid
• To process your $499 filing payment via Stripe
• To create and maintain your contact record in our CRM (HubSpot) for follow-up filings
• To respond to your support inquiries
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

3. Third-Party Service Providers

We share data with the following trusted third-party providers solely to operate the Service. Each is bound by their own privacy and data processing agreements.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

4. Data Retention

5. Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• API key authentication between all internal services
• SHA-256 hashing of sensitive utility account identifiers
• CORS restrictions limiting API access to authorized origins only
• Stripe webhook signature verification (HMAC-SHA256) on all payment events
• File type allowlisting and size limits on all uploads
• No storage of raw utility documents after processing

No method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Rights

Depending on your location you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Portability — request your data in a portable format
• Objection — object to processing of your personal data

To exercise any of these rights, email us at support@greenlawautomator.com. We will respond within 30 days.

7. Children's Privacy

The Service is intended for commercial real estate professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: