Back to Heaven

Privacy Policy

Last Updated: September 11, 2026

1. Introduction

Heaven ("we", "our", or "us") respects your privacy and is committed to protecting the personal data and proprietary trading information you share with us. This Privacy Policy explains how we collect, use, and safeguard your data when you use the Heaven grid intelligence platform.

2. Information We Collect

  • Anonymous Device Identification (Device ID): When you access the Heaven platform without registering or logging in, we automatically generate a unique, random Device ID stored locally on your device (via browser localStorage and cookies). This identifier contains no personally identifiable information (PII) and enables immediate, unauthenticated platform access while partitioning your virtual assets and simulation telemetry exclusively to your device.
  • Account Information: If you register an account, we collect your name, email address, corporate entity details, and billing information.
  • Trading & Asset Telemetry: If you utilize our Asset-Aware bidding or SCADA Studio, we ingest hardware and synthetic telemetry (SoH, thermal load, capacity, output curves) regarding your physical or virtual BESS and generation assets.
  • Platform Usage Data: Logs regarding API requests, dashboard interactions, and optimizer scenario parameters.

3. Anonymous Device Access & Asset Isolation

We believe in open, frictionless exploration of grid intelligence:

  • Zero-Friction Access: You can explore the full terminal, inspect real-time 5-minute AEMO dispatch prices, and run dispatch simulations without entering personal details, registering, or logging in.
  • Complete Asset Isolation: Any virtual SCADA assets, battery models, or portfolios created under your Device ID are tagged with that unique identifier and isolated from other users across our database.
  • Account Conversion: When you register an account or sign in with a passkey, your existing Device ID and custom assets can seamlessly link to your authenticated profile.
  • User Control: You can reset or delete your anonymous Device ID at any time by clearing your browser cookies and site storage (keys: heaven_device_id and heaven_auth).

4. How We Use Your Data

We use your data strictly to provide and improve the Heaven platform. Specifically:

  • To execute algorithmic optimizations, power-flow simulations, and generate capital allocation reports.
  • To provide customer support and dedicated engineering assistance (for Enterprise tiers).
  • To maintain system security, monitor API rate limits, and prevent unauthorized access.

We do not sell your proprietary trading strategies, asset telemetry, or optimization results to third parties.

5. Data Security

We implement enterprise-grade security measures to protect your data. API routes require JWT or device-bound cryptographic authentication tied to role-based access controls (RBAC). All data transmitted between your systems, our FastAPI backend, and our PostgreSQL data warehouse is encrypted in transit (TLS) and at rest.

6. Third-Party Integrations

The platform ingests public data from AEMO and weather providers. However, your private asset data is never transmitted to these external providers. We use secure, audited third-party infrastructure providers (e.g., Vercel, Supabase, Railway) to host our services.

7. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact our security team at privacy@heaven-grid.com.