Privacy Policy

Last updated: June 18, 2026

This is a private beta. Cole is early-stage software offered by invitation to a small number of operators. The Service, the data we collect, and this policy may all change as the product evolves — we’ll update the date above when they do.

This Privacy Policy explains how SanctifAI ("SanctifAI," "we," "us") collects, uses, and protects information when you use the Energy application, also branded Cole by SanctifAI (the "Service"), available at app.energy.sanctifai.com. The Service is currently in private beta — offered by invitation to a small number of businesses and their authorized users while we actively develop it.

Information we collect

Account information. When an account is created for you, we collect your name and email address. If you sign in with Google, we receive your basic Google profile (name, email address, and profile picture) through Google’s OAuth, limited to the permissions you grant.
Business data you enter. The Service stores the operational data you and your organization put into it — such as proposals, pricing, customers, vendors, and field records — so we can provide the Service to your organization.
Usage and log data. We record actions taken in the Service in an audit/event log, along with standard technical data such as IP address, browser type, and timestamps, to operate and secure the Service.
Cookies. We use a session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

How we use information

To provide, maintain, and secure the Service and your account.
To authenticate you and isolate your organization’s data from others.
To provide support and communicate with you about the Service.
To diagnose problems and improve the Service.

We do not sell your personal information, and we do not use it for advertising.

Google user data

If you choose to sign in with Google, we access your basic Google profile and email address solely to authenticate you and create or identify your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer Google user data to third parties except the service providers that operate the Service for us, as described below, and we do not use it for advertising or sell it.

How information is shared

We share information only with service providers that help us run the Service, and only as needed to do so:

Supabase — database and authentication.
Google — sign-in, when you choose to use it.
Render — application hosting.

We may also disclose information if required by law, or to protect the rights, safety, and security of SanctifAI, our users, or the public.

Data security

Data is encrypted in transit. Each organization’s data is isolated from other organizations through database row-level security. Access to production data is limited to personnel who need it to operate the Service. No system is perfectly secure, but we work to protect your information using reasonable measures.

Data retention

We retain information for as long as your account is active or as needed to provide the Service. You or your organization may request deletion of your account and associated personal data by contacting us at the address below.

Your choices and rights

You may request access to, correction of, or deletion of your personal information by emailing privacy@sanctifai.com. Because the Service is provided to your organization, some requests may be directed to your organization’s account owner.

Children

The Service is intended for business use by adults and is not directed to children under 18. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by email where appropriate.

Contact

Questions about this Privacy Policy can be sent to privacy@sanctifai.com.