Privacy Policy

This Privacy Policy explains how Summit Energy Holdings ("Summit," "we," "us," or "our") collects, uses, and protects information when you use our applications and services, including the Strata fuel-operations app, the my time employee app, the SummitOS platform, and related software and integrations (collectively, the "Services").

1. Who this policy covers

Our Services are business tools provided to fuel retailers, jobbers, and their staff. Accounts are provisioned by an operating organization; the Services are not directed to the general public and are not directed to children. We do not knowingly collect information from anyone under 13.

2. Information we collect

Account information

• Email address — used to create and identify your account and to sign you in.
• User and organization identifiers — a unique account ID and tenant/role assigned by your organization's identity provider (Amazon Cognito), used for authentication and to determine what data and features you may access.

Operational data

When you use the Services, we process the business data your organization manages — for example fuel tank readings, pricing, deliveries, dispatch records, and site information. This data belongs to the operating organization, not to Summit, and is processed on its behalf.

Device permissions (only when you use the related feature)

• Bluetooth — used solely to connect on-site monitoring hardware to a network during an optional, one-time device setup.
• Camera — used solely to scan a Wi-Fi QR code during that device setup.
• Local Network — used solely to confirm an on-site device joined the site network.
• Face ID / Touch ID — used on-device to unlock the app and authorize sensitive actions; biometric data never leaves your device and is never sent to us.

We do not collect precise location, contacts, health, financial account information, photos, or browsing history, and we do not use advertising identifiers.

3. How we use information

• To authenticate you and keep your session secure.
• To provide, operate, and maintain the Services and their features.
• To diagnose problems, prevent abuse, and improve reliability and performance.
• To communicate with you about your account, security, and service changes.

4. We do not sell your data or track you

We do not sell or rent personal information. We do not use your information for cross-app or cross-site advertising tracking, and we do not share it with third parties for their own marketing.

5. How information is shared

We share information only as needed to run the Services:

• Service providers — infrastructure and identity vendors (such as Amazon Web Services / Amazon Cognito and Cloudflare) that host and secure the Services, bound by contract to protect the data.
• Your organization — administrators of the organization that provisioned your account may access data associated with it.
• Legal — when required by law, or to protect the rights, safety, and security of users, the public, or Summit.

6. Data retention

We keep account and operational data for as long as the account is active or as needed to provide the Services, and as required to meet legal, accounting, or reporting obligations. On request from the operating organization, account data is deleted or anonymized.

7. Security

Information is transmitted over encrypted connections (HTTPS/TLS) and stored with access controls. Authentication tokens are held in the device's secure keychain. No method of transmission or storage is perfectly secure, but we work to protect your information using reasonable technical and organizational measures.

8. Your choices and rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain processing. Because accounts are managed by your operating organization, please direct such requests to your administrator or contact us at the address below; we will assist or route the request appropriately.

9. Children

The Services are intended for business use by adults and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

10. International users

The Services are operated from the United States. If you use them from outside the United States, you understand your information will be processed in the United States.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

12. Contact us

Questions about this Privacy Policy or your information:

Summit Energy Holdings
Email: [email protected]