Privacy Policy

This site is maintained by Concord Energy Services on behalf of participating New Jersey municipalities that operate Government Energy Aggregation programs. This page explains what information the site collects, how it is used, and how it is protected. It is not a certification and does not create any legal rights beyond those granted by applicable law and each municipality's authorizing agreements.

Information we collect

Public form submissions. Contact, opt-in, opt-out, and inquiry forms collect the name, email, phone, municipality, and message you provide, plus a one-way hashed IP for abuse prevention.
Program identifiers. Opt-out and account lookup forms reference a mailing token printed on notices — never a full utility account number. If a resident chooses to enter an account number in supported flows, only the last four digits are stored for display.
Resident portal identities. If a resident claims an account, the resident's verified email is bound to their account for future magic-link sign-in. Passwords are not used.
Site logs. Standard web server logs record request paths, response codes, and coarse timing. These do not include form contents.

How we use information

To respond to residents and municipalities about program participation.
To operate and audit opt-in / opt-out workflows, generate confirmation numbers, and share status with authorized municipal staff.
To send resident portal magic links to a verified email.
To detect abuse, rate-limit forms, and maintain security.

What we do NOT do

We do not sell resident information.
We do not display full utility account numbers on this public site, and we do not put full account numbers in URLs, browser storage, analytics, or public logs.
We do not share individual resident data with the supplier beyond what is required to enroll or opt out of the program.
We do not use marketing cookies or third-party ad trackers on this site.

Data retention

Public form submissions and audit records are retained for the duration of the program plus the period required by the authorizing municipality and applicable New Jersey Board of Public Utilities requirements. Resident portal identities are retained while the associated account remains in a program.

Your rights

You may request a copy or deletion of information tied to a public form submission, or unbind an email from the resident portal, by contacting us using the details on the Contact page. Requests are verified through the associated email or mailing token.

Security

The site enforces HTTPS, uses row-level security on the underlying database, and hashes sensitive lookups with a server-side pepper. Full utility account numbers are stored encrypted at rest and are never exposed to public users of this site. Access to administrative surfaces is restricted to authorized Concord staff and audited.

Contact