Privacy Policy
This policy describes how Oil Data AI LLC (“OilData,” “we,” “us”) handles information when you use oildata.ai and related services (the “Service”). OilData is a research tool for public oil and gas records. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use advertising pixels or session recording.
1. Who this policy covers
This policy applies to visitors and account holders who are 18 or older. It does not change the public nature of government records that we display. Those records are published by their source agencies, not collected from you.
2. Information you give us
- Account data. If you sign in, we receive the email address and password credentials you submit. Authentication is provided by Supabase. Public self-serve registration is not generally open. Password-reset messages are sent only when you request them.
- Research you choose to save. Signed-in features can store watchlist items (such as a county code or operator number), notes you type, saved-search criteria you enter, and alert preferences. We store that content so the feature works.
- Messages. If you email us, we receive the address you write from and the contents of the message.
3. Sign-in cookie
Signing in uses a strictly necessary cookie. The @supabase/ssr library stores the session in a cookie whose name matches sb-*-auth-token. That cookie keeps you signed in and is read by the server to recognize your account. It is not an advertising cookie. We do not use it to measure product analytics.
4. Search and hosting logs
When you search, the text is sent to our database so we can return matching public records. We do not keep a general search-history table of what you typed. If you save a search, we store the criteria you chose to save.
Some searches put the query in the address bar. A request to GET /search?q= includes the search text in the URL. Vercel, which hosts the Service, records request logs, and those logs can include that URL and the search terms in it, along with an IP address and ordinary request headers. We use hosting logs to operate and secure the Service. We do not sell them.
5. Product analytics
We do not currently run product analytics. We do not load Vercel Web Analytics, and we do not write a first-party product-event log. If we enable product analytics later, we will update this policy before it starts and describe what is collected, how long it is kept, and how browser privacy signals are handled.
We do not use third-party advertising pixels, Google Analytics, Tag Manager, Meta, LinkedIn, or similar tags. We do not record sessions, heatmaps, or keystrokes.
6. How we use information
- Provide the Service, including search, public-record pages, saved items, and account access.
- Protect the Service against abuse, including automated scraping.
- Respond to you and send authentication messages you request.
We do not currently send product digests or marketing email. Alert preferences stored on an account are settings only.
7. Sale and sharing
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use personal information for targeted advertising or for profiling that produces legal or similarly significant effects. Public oil and gas records shown on the Service remain public records.
8. Processors
We use these processors to run the Service:
- Vercel, Inc. Hosts the site and processes request logs, including URLs.
- Supabase, Inc. Provides authentication, the sign-in cookie, and the database that stores account content.
They process information for us to provide the Service. We do not authorize them to sell it or to use it for their own advertising.
9. Retention
Account information is kept while the account is open. To delete saved items, watchlists, or your account, email hello@oildata.ai. After that email, we keep the related personal information only for the time needed to complete deletion, resolve a security incident, or meet a legal duty. Hosting providers keep their own operational logs, including request URLs, under their retention schedules. We do not describe a product-analytics retention period because product analytics is not running.
10. Security
The sign-in cookie is limited to the session that Supabase issues for your account. Browser code does not receive database administrator credentials. No method of transmission or storage is perfectly secure. Please use a unique password and tell us if you believe your account was accessed without permission.
11. Your choices and rights
You may request access to, or correction of, personal information we hold about you, and you may appeal a refusal. To delete saved items, watchlists, or your account, email hello@oildata.ai. The Service does not let you delete saved items, watchlists, or an account. We will verify an emailed request and respond within 45 days. If we need more time, we will tell you why and may take up to 45 additional days where the law allows.
California (CCPA/CPRA). California residents may request to know the categories and specific pieces of personal information we collected, the sources, the purposes, and the categories of recipients; to ask us by email to delete personal information, subject to legal exceptions; to correct inaccurate personal information; and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we do not use it for cross-context behavioral advertising, so there is no sale or sharing to opt out of. We will not discriminate against you for exercising these rights. You may use an authorized agent if you provide proof of authorization.
Texas (TDPSA). Texas residents may request to confirm whether we are processing their personal data and to access it; to correct inaccuracies; to ask us by email to delete personal data provided by or obtained about them; and to opt out of sale, targeted advertising, and profiling in furtherance of a decision that produces a legal or similarly significant effect. We do not sell personal data, we do not process it for targeted advertising, and we do not use it for that kind of profiling. If we decline a request, you may appeal by replying to our decision. If we deny the appeal, we will tell you how to contact the Texas Attorney General.
Residents of other U.S. states with similar consumer privacy laws may use the same email address. We will honor a request when that state’s law applies to us.
12. Age
The Service is for adults. You must be 18 or older to use it. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 provided personal information, email hello@oildata.ai and ask us to delete it.
13. Public records
Pages may show records published by the Railroad Commission of Texas and other public sources. Those records can include business names and, where the source publishes them, information about people. We display them as published public records. We do not use them to advertise.
14. Changes
We will post changes on this page and update the effective date. If a change materially expands how we use personal information, we will say so in the updated policy. If you have an account, we will send notice of a material change to the email address on the account. Continued use of the Service after the effective date means you accept the updated policy.
15. Contact
Oil Data AI LLC
Email: hello@oildata.ai