New Day Energy

Privacy Policy

Who we are

New Day Energy provides a web platform at app.newday.energy for NYC energy consulting firms. This policy explains what information the platform handles, including information we receive from Google when a firm connects a Gmail account, and what we do with it. Effective October 6, 2026. Questions: info@newday.energy.

What we access and store

The platform handles the following information for each firm that uses it.

• Account details. The names, email addresses, and sign-in details of the firm's users.
• Client and property information. The firm's clients and properties, filing status, ENERGY STAR application answers, certification tracking, notes, and activity logs.
• Saved logins. If the firm chooses to save a client's EPA Portfolio Manager or NYC.ID login, we store it encrypted.
• Gmail information, only if the firm connects Gmail. We ask Google for permission to read messages and to create drafts and send email (the gmail.readonly and gmail.compose permissions). Google does not offer a narrower permission for this combination, so the permission technically covers the whole mailbox. The platform searches the mailbox only for messages whose subject lines match NYC DOB and BEAM notices, such as "NYC Building Sustainability Laws," and reads only those. It stores each message's subject line and the details it extracts, such as the type of message, the property, the filing year, and the categories of any error reported. It does not keep the message text. It creates reply drafts that the firm reviews. It sends email only when someone at the firm clicks send, for ENERGY STAR outreach and for handoff emails. It never deletes or changes messages. Our own operational emails, such as failure alerts and a weekly usage summary, come from a New Day mailbox, never from a firm's.
• Usage information. Sign-ins, pages opened, actions taken with the client and property names involved, run results and error messages, and messages sent with the Feedback button. We use it to keep the service working and to support the firm.

How we use information and who we share it with

We use a firm's information only to provide the features that firm uses, to find and fix problems, and to contact the firm about the service. We do not sell it, and we do not use it for advertising. The one other use is platform-wide counts, such as the number of filings processed, that do not identify any firm, client, or building.

We share information only with the following, and only as needed to run the service:

• DigitalOcean, which hosts the platform in New York.
• Google, for the Gmail connection a firm chooses to make.
• Anthropic, an AI provider. Parts of the platform use AI to answer questions in the in-app assistant, draft answers to ENERGY STAR alert questions, and write part of the LL97 report text. These features send the property information they need, including DOB and BEAM status records derived from Gmail messages when a user asks about them.
• EPA's Portfolio Manager and NYC DOB systems, when a firm uses the platform to share, submit, or file.
• Authorities, when the law requires it.

Google API Services disclosure

New Day Energy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms:

• We use information from a firm's Gmail account only to provide the features described above, which are visible in the platform.
• We transfer it to others only when needed to provide those features, to keep the service secure, or to follow the law.
• We do not use it for advertising.
• We do not use it to develop, improve, or train generalized AI or machine-learning models.

Human access, security, retention, and your choices

Who can read it. Our staff do not read the contents of a firm's Gmail messages, or the information we derive from them, except with the firm's agreement for specific messages (for example, to help with a support request), when needed for security or to investigate abuse, to follow the law, or in aggregated form for internal operations.

Security. Gmail connections and saved logins are stored encrypted. Each firm's data is separated from every other firm's at the database level. Access to the platform's servers is limited to one administrator. If we ever find that information has been exposed, we will notify the affected firms and anyone else as the law requires.

Keeping and deleting. A firm can disconnect Gmail at any time in the platform, or at myaccount.google.com/permissions. When a firm leaves, we export its data on request and delete everything we hold for it within 30 days: user accounts, client and property records, saved logins, the Gmail connection, collected DOB email records, filing and certification tracking, and activity logs. Backup copies age out on their normal schedule. Anthropic, our AI provider, currently deletes the information we send it within 30 days, except content its systems flag as a policy violation.

Contact and changes. Write to info@newday.energy with any question or request. We will post changes to this policy here and update the effective date.