Privacy Policy — ES Zone AI Connector
The AI connector lets you link your ES Zone portal account to an AI assistant of your choice — ChatGPT (OpenAI) or Claude(Anthropic). The assistant can then ask about your organisation's data in the portal (energy consumption, costs, contracts, documents) and, on your instruction, make selected changes. This page explains what data is processed when you use it. It supplements our general privacy policy (in Czech).
1. Who processes the data
The ES Zone portal and the AI connector are operated by Energy Saving s.r.o., company ID (IČO) 21052671, registered office Varšavská 715/36, Vinohrady, 120 00 Prague 2, Czech Republic. Privacy contact: info@energy-saving.cz.
The ES Zone app for ChatGPT and Claude (the AI connector) is developed and published with AI assistant providers by LarvaSystems s.r.o., company ID 17706921, registered office Habrová 137, 250 66 Zdiby, Czech Republic, registered with the Municipal Court in Prague under file no. C 375300, contact info@larvasystems.cz, under a contract with Energy Saving s.r.o. It processes portal data only as a processor for Energy Saving s.r.o. and only to the extent described on this page.
We process your organisation's data in the portal (metering points, consumption, invoices, contracts, documents) on behalf of your organisationunder our contract with it. We act as controller for your user account, the record of your AI connection and security logs. Data the connector returns to your AI assistant is then processed by the assistant's provider under your agreement with that provider (see section 4).
2. When the connector works
- The connector is off by default. Only your organisation's administrator can switch it on in the portal settings and choose which data areas assistants may access.
- Each user must authorise the connection personally on the ES Zone consent screen after signing in, for specific scopes:
energy:read(consumption and metering points),costs:read(costs and invoices),contracts:read(contracts and documents),actions:read(tasks) and optionallycontracts:write(changes to contracts and documents). - The assistant sees only what you can see in the portal. The connector has no direct database access; it reads data with your permissions, including any restriction to specific metering points.
3. What data is processed
3.1 What the AI assistant sends to the connector (tool inputs)
- Identifiers of metering points, contracts, documents and folders; periods and filters
- Search terms (e.g. a metering point name, town or tag)
- Figures to check, when the assistant verifies numbers it has quoted
- For changes (only with the
contracts:writescope): new folder and document names, moves, deletion to the trash, contract changes (end date, notice period, reminders, auto-renewal, contract number, a note of up to 2,000 characters) - Feedback on an answer (type and a comment of up to 1,000 characters)
We do not store tool inputs, except feedback and the changes themselves, which are saved in the portal exactly like changes made by hand (including an audit log entry).
3.2 What the connector returns to the AI assistant (tool outputs)
- Organisation: the name of your organisation and of clients you manage (for a sole trader this is a person's name)
- Metering points: name, tags, distributor, tariff, capacity, building type; EAN/EIC and addressdepending on your organisation's settings (the address can be limited to the town, EAN/EIC can be hidden)
- Consumption and metering: consumption series (kWh, MWh, m³, GJ), load profiles, peaks, anomalies, energy performance indicators, forecasts, data completeness
- Costs and invoices: cost components, invoice summaries (amounts, quantities, periods); invoice and contract numbers depending on your organisation's settings
- Contracts: supplier and distributor company names, prices, dates, status; tasks: title, status and dates
- Documents: folder and document names and properties. Document text only if your organisation's administrator explicitly enables it — the text may contain personal data of other people (names, addresses, signatures). The connector removes e-mail addresses, phone numbers and links from the text and masks national ID (birth) numbers and bank account numbers.
- Your connection profile: your name and e-mail address, if the assistant asks for them (so it knows who it is talking to)
- Electricity and gas market prices, simulations and general help texts
3.3 What we store about the connection
- Connection record: who connected which assistant and when, with which scopes, when it was last used, and when and why it was revoked
- Connector access log: time, user, tool and request type used, outcome, response time and size — without the content of requests or answers. Your organisation's administrator can view and export it.
- Figure verification records: the numbers the connector gave the assistant, so it can later be checked that the assistant did not distort them
- Security tokens (stored only as cryptographic hashes) and audit records of changes to settings and connections, including the IP address
4. Who receives the data
- The provider of the AI assistant you connected — OpenAI (ChatGPT) or Anthropic (Claude). It receives the tool outputs described in section 3.2 and processes them under your agreement and settings with that provider, including whether conversation content may be used to improve its models. See the OpenAI privacy policy and the Anthropic privacy policy. We recommend business accounts (ChatGPT Business/Enterprise, Claude for Work), where data is not used for training.
- Google Cloud (Google Ireland Limited) — hosting of the portal and the connector in the europe-west1 data centre (Belgium, EU)
- Cloudflare, Inc. — network protection and delivery
If your organisation has enabled AI recognition of scanned documents in the portal, the text of scanned documents was produced earlier by Google Gemini — this is covered by our general privacy policyand your organisation's consent in the portal. The connector itself does not call any other AI service. We never sell data.
5. Why we process the data
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the connector — answering the assistant's requests and making the changes you ask for | Performance of the contract with your organisation (b); for organisation data, on its instructions |
| Security, abuse prevention, an overview for your organisation's administrator (access log) | Legitimate interest (f) |
| Audit trail of changes | Legitimate interest and legal obligations (c, f) |
| Figure verification and feedback to improve answer quality | Legitimate interest (f) |
6. How long we keep the data
| Data | Retention |
|---|---|
| Access token for the assistant | 15 minutes |
| Refresh token (keeps the connection alive) | 30 days from last use, at most 90 days (30 days for partner access, 7 days for platform administrators); after that the connection must be authorised again |
| Connector access log | 12 months |
| Figure verification records | 90 days |
| Feedback | 12 months |
| Connection records and audit records of changes | For the life of the organisation's account; audit records at most 5 years |
| Service operation logs (no request or answer content) | 30 days |
How long the AI assistant's provider keeps data is governed by its terms and your settings with it.
7. How to control and revoke the connection
- You can revoke the connection at any time in the ES Zone portal under Account → Security → Connected apps, or by disconnecting the app in ChatGPT or Claude. Once revoked, the assistant immediately stops receiving data.
- Your organisation's administrator can switch the connector off (revoking all connections), limit scopes, hide EAN/EIC, addresses and invoice numbers, disable reading document text, disable partner access, revoke individual connections and view the access log.
- Your GDPR rights: access, rectification, erasure, restriction, objection and portability; you may lodge a complaint with the Czech data protection authority (ÚOOÚ). Send requests to info@energy-saving.cz. For data already held by the assistant's provider, also exercise your rights with that provider.
8. Security
The connection uses OAuth 2.1 with PKCE, short-lived tokens that we store only as cryptographic hashes, and encrypted transport. Each organisation's data is isolated at database level. Changes require an explicit scope, and bulk changes require confirmation.
9. Changes
When we change the connector's tools or the scope of data returned, we update this page and the effective date at the top.
Energy Saving s.r.o. · Company ID 21052671 · Varšavská 715/36, Vinohrady, 120 00 Prague 2, Czech Republic · Part of the Optimal Energy group
App publisher: LarvaSystems s.r.o. · Company ID 17706921 · Habrová 137, 250 66 Zdiby, Czech Republic