GreaseBook Privacy Policy
Effective Date: March 31, 2026
GreaseBook, LLC (“GreaseBook,” “we,” “us,” or “our”) operates the website www.greasebook.com, the GreaseBook mobile application, and TinyPumper connected hardware devices and related services (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Services.
By using our Services, you agree to the collection and use of information in accordance with this policy.
Applicability
This policy applies to all GreaseBook products and services, including:
- The GreaseBook website and blog
- The GreaseBook mobile application (iOS and Android)
- TinyPumper hardware devices (gateways, sensors, and related equipment)
- Data transmitted from field devices to our servers
- Customer support and sales interactions
This policy does not cover third-party websites, applications, or integrations that may be accessible through our Services. Those services have their own privacy policies.
Information We Collect
Account Information. When you create an account or request information, we collect your name, email address, phone number, company name, title, billing address, and payment information.
User Information. We collect information about all users added to your account, including pumpers, executives, and guests. This includes names, email addresses, phone numbers, assigned facilities, user roles, device types, and timezone settings.
Production and Well Data. When you use our Services, you submit or your devices transmit production data, including tank levels, pressures, flow rates, well identifiers, API numbers, lease information, gas volumes, water volumes, downtime reasons, well test data, and operational readings. This data is owned by you (the customer) and controlled by your account administrator.
Device Information. TinyPumper hardware devices transmit sensor readings, GPS coordinates, connectivity status, battery levels, and device diagnostics to our servers over cellular and satellite networks.
Location Information. We collect location data from TinyPumper devices installed at your well sites. The GreaseBook app may collect location data from your mobile device if you grant permission, including for geofencing features that record when field personnel visit well sites. You can enable or disable location access at any time through your device settings.
Camera and Photo Library. The GreaseBook app may request access to your device’s camera and photo library to allow you to capture and attach field photos (e.g., gauge readings, equipment conditions). You can enable or disable this access at any time through your device settings.
Usage and Log Data. We collect information about how you use our Services, including login times, login locations, device types, browser type and version, pages visited, features used, and other diagnostic data. User activity logs are maintained for up to 60 days.
Billing and Payment Data. We collect payment information including credit card numbers, security codes, expiration dates, cardholder names, and billing addresses. For ACH payments, we collect banking information. Payment data is processed through third-party payment processors and encrypted using 256-bit AES encryption.
Cookies and Tracking Technologies. We use cookies, pixels, and similar technologies to collect usage data, remember your preferences, and improve our Services. We use third-party analytics services, including Google Analytics, to understand how our Services are used. You can instruct your browser to refuse cookies, but some portions of our Services may not function properly without them.
Communications. We retain records of communications between you and GreaseBook, including support tickets, in-app chat messages, emails, phone call notes, and scheduling information.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our Services
- Process transactions and send related information (confirmations, invoices, receipts)
- Set up and configure your account, wells, facilities, and user permissions
- Monitor and transmit well data and alerts from TinyPumper devices to your account
- Send you technical notices, security alerts, production alerts, and operational notifications via email, SMS, or push notification based on your preferences
- Deliver summary reports (e.g., Daily Ops Summary) to designated account users
- Provide customer support, onboarding, and training
- Respond to your requests, comments, and questions
- Send marketing and promotional communications (you can opt out at any time)
- Generate production reports, well history files, and regulatory reports (e.g., RRC reports)
- Analyze usage patterns to improve our Services
- Detect, prevent, and address technical issues, fraud, and security concerns
How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances:
With Your Organization. If your account is managed by a company or organization, your account administrator may access and control your account data, including production data, user activity, and billing information. User access is governed by roles (Executive, Pumper, Guest) with varying levels of permission.
Service Providers. We share information with third-party vendors who perform services on our behalf, including:
- Cloud hosting and infrastructure (Microsoft Azure)
- Payment processing (Stripe, Freshbooks)
- Customer support and messaging (Intercom)
- Analytics and usage tracking (Google Analytics)
- Email delivery and communications
- Scheduling (Calendly)
These providers are contractually obligated to use your information only to provide services to us.
Cellular and Satellite Providers. TinyPumper devices transmit data through third-party cellular and satellite networks. These providers may process device identifiers and transmission metadata as part of delivering connectivity services.
Data Transfers Between Operators. When wells change hands, production data and facility information may be transferred to a new operator. Production data transfers require explicit permission from the original data owner. Facility setup information (well names, tank configurations) may be transferred separately.
API and Data Export Integrations. If you enable API access or FTP data export, your production data may be transmitted to third-party systems you designate, such as reservoir engineering software or other operational tools.
Legal Requirements. We may disclose your information if required by law, regulation, legal process, or governmental request.
Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
With Your Consent. We may share information for other purposes with your explicit consent.
Data Ownership
You are the owner of your data, not GreaseBook. Your production data, well data, and operational information belong to you. Account administrators control access to this data and can export it at any time.
Data Retention
Production and Well Data. We retain your production data for as long as your account is active and in accordance with your account settings. You or your account administrator can export or delete your data at any time.
Upon Cancellation. After your account is canceled, your data is retained for a 30-day grace period. During this window, account executives can request temporary access to export data. After 30 days of inactivity, your account and all production data are permanently deleted.
Account Information. We retain account information for as long as your account is active and for a reasonable period afterward for record-keeping, legal compliance, and dispute resolution.
Activity Logs. User login times, locations, and device information are retained for up to 60 days.
Device Data. Sensor readings and device diagnostics are retained in accordance with your account’s data retention settings.
Backups. We perform daily backups of all data as part of our disaster recovery procedures.
Security
We take the security of your information seriously. Our security measures include:
- 256-bit AES encryption for all credentials and sensitive data
- Encryption of data in transit and at rest over public networks
- Cloud infrastructure hosted on Microsoft Azure
- Daily data backups
- Role-based access controls (Executive, Pumper, Guest permissions)
- Two-factor authentication (available for all accounts)
- Single sign-on (SSO) support
- Configurable data editing policies (e.g., restricting how far back field users can modify entries)
- User activity logging for security monitoring
No method of transmission over the internet or method of electronic storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security.
Your Rights and Choices
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your personal information
- Export your data in a portable format
- Opt out of marketing communications at any time
- Restrict certain processing of your information
- Control notifications by configuring your alert preferences (email, SMS, push) through your account settings
To exercise these rights, contact us at info@greasebook.com or reach out through your account administrator.
California Residents. Under the California Consumer Privacy Act (CCPA), California residents have additional rights, including the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.
Children’s Privacy
Our Services are not directed to anyone under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us and we will take steps to remove that information.
International Data Transfers
Your information may be transferred to and processed in the United States, where our servers and operations are located. If you are accessing our Services from outside the United States, your information will be transferred to, stored, and processed in the United States. We take steps to ensure your information receives an adequate level of protection in the jurisdictions in which we process it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website prior to the change becoming effective. Your continued use of our Services after any modifications constitutes your acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
GreaseBook, LLC
Oklahoma City, Oklahoma
info@greasebook.com
www.greasebook.com