Privacy Policy

This policy explains how Easton Utilities Commission (“we”) handles information in the MyAccount customer portal and mobile app (together, the “portal”). It covers the portal only. Information we collect through your utility service itself — meter readings, service orders, and the account records the portal displays — is governed by our own customer privacy practices.

Information you give us.

• Your name, email address, and password when you register. Passwords are stored only as a cryptographic hash — we cannot read them.
• Your utility account number and last name, to confirm you are the customer on the account.
• A phone number, if you choose to receive text alerts.
• The contents of anything you submit through the portal, such as an outage report.

Information from your utility account. When you sign in, the portal reads your billing and service information from Easton Utilities Commission’s billing system — balances, statements, payment history, usage, and the services at your address — so it can show them to you.

Information collected automatically.

• Device and connection details such as IP address, browser or device type, and operating system.
• Sign-in activity, including failed attempts, which we use to protect accounts from unauthorized access.
• A record of security-relevant actions on your account — password changes, added or removed passkeys, and similar — retained as an audit trail.
• Diagnostic data when something goes wrong: error reports, performance timings, and, in the mobile app, a recording of the screens and interactions leading up to an error. These are sampled, not continuous.

Signing in sets a cookie that keeps you signed in; if you ask us to remember a device for two-factor authentication, that is a cookie too. We also store small preferences on your device — which account you were last viewing, for example — so the portal opens where you left it. These are necessary for the portal to work and are not used for advertising or cross-site tracking. Clearing them signs you out and resets those preferences.

• To show you your account and let you pay your bill.
• To confirm you are who you say you are, and to protect your account from unauthorized access.
• To send you the notifications you have asked for, and the security alerts you cannot opt out of — a password change, a new passkey, a sign-in method added or removed.
• To diagnose failures and improve reliability.
• To keep records we are required to keep, including of payments.

We do not sell your information, and we do not use it for advertising.

We use a small number of service providers to operate the portal. They may handle your information only to provide their service to us, and not for their own purposes.

• Payment processing. Card and bank payments are processed by Authorize.Net. Card numbers travel from your browser or app directly to Authorize.Net and are never received or stored by the portal; we keep only a token, the card brand, and the last four digits so you can recognize a saved method.
• Email and text delivery. Providers that send our messages and report whether they were delivered.
• Hosting and diagnostics. Providers that run the portal’s infrastructure and receive the error and performance data described above.
• Push notifications. Apple and Google deliver push messages to your device, if you turn them on.

We can tell you who our current providers are — just ask. We may also disclose information where the law requires it, or to protect the security of the portal or the rights of our customers.

• You control which notifications you receive, and through which channels, in Settings. Security alerts about your own credentials cannot be turned off.
• You can remove a mobile number from text alerts at any time in Settings.
• You can turn push notifications off in your device settings.
• You can add or remove passkeys and two-factor authentication in Settings, and sign out other devices.
• You can delete your portal login yourself in Settings, on the web or in the app, or ask us to — here's how, and what is and isn't removed. Deleting a portal login does not close your utility account.
• To correct your account information, contact us at customerservice@eastonutilities.com.

Traffic between your device and the portal is encrypted. Passwords are stored hashed, never in readable form, and we cannot retrieve yours. We offer passkeys and two-factor authentication, and we monitor for and block attempts to break into accounts. No system is perfectly secure, but account access is the thing we treat as most worth defending.

We keep your portal account for as long as it is active. When you delete it, your login and the information only it holds are removed right away. Payment records and security audit records are kept for as long as we need them for accounting, dispute resolution, and legal obligations, which may be longer than the account itself. Diagnostic data is kept only as long as it is useful for investigating problems.

The portal is intended for Easton Utilities Commission account holders and is not directed to children. We do not knowingly collect information from children.

If we change this policy we will update the effective date at the top of this page. Material changes will be communicated to you through the portal or by email.

Questions about this policy, or about information we hold about you: customerservice@eastonutilities.com or (410) 822-6110.