Privacy Policy

1. Application Name & Overview

frac.fyi is an oil and gas data intelligence and analytics application that provides energy professionals with access to Western Canadian completion, wellbore, production, and regulatory data. frac.fyi is a product of Sample Space. This Privacy Policy details how frac.fyi collects, uses, stores, and protects user data.

2. Google User Data & Account Information

frac.fyi allows users to sign in using their Google account via Google Firebase Authentication. When you sign in with Google, we request and collect the following information:

• Basic Profile Information: Your full name, email address, profile image URL, and unique Google User ID.
• Authentication Tokens: Secure session tokens issued by Google Firebase to maintain your logged-in state.

How We Use Your Google User Data

Your Google user data is strictly used for the following purposes:

• To authenticate your identity and allow you to access the frac.fyi application and features.
• To associate your saved wells, custom search filters, and activity history with your unique account.
• To send critical service announcements or respond to support requests initiated by you.

How We Store and Protect Your Data

All user authentication credentials and profile identifiers are securely managed using Google Firebase Authentication and stored in encrypted cloud databases (Google Cloud Platform / Firebase). All communication between your client device and our services is strictly encrypted using industry-standard Transport Layer Security (HTTPS/TLS).

Data Sharing, Transfer, and Advertising

We do not sell, rent, trade, or transfer your Google user data to third parties. We do not use Google user data for targeted advertising, credit assessment, or data broker marketplaces. Furthermore, Google user data is never used to train generalized artificial intelligence (AI) or machine learning models.

Data Retention and Deletion

We retain your account information only as long as your account remains active. You may request the immediate deletion of your account and all associated data at any time by contacting us at support@frac.fyi. Upon receiving your request, your personal data will be permanently deleted from our active databases within 30 days. You can also revoke frac.fyi’s access to your Google account at any time via your Google Account Security Settings.

3. How you use frac.fyi

To understand which features are useful and to fix problems, we record how the service is used:

• Google Analytics. Pages you view and actions you take, such as searches, wells and pads you open, sections and reports you view, map searches and the first part of questions you ask frac.bot. Google Analytics also records device, browser and approximate location (from your IP address), and uses cookies. We link these events to your Firebase user ID, never to your name or email.
• Sign-in records. We record when you sign in, together with your account, in our database (Google Firebase).
• Server logs. Our servers log requests (address, time, page or data requested) to keep the service secure, prevent abuse and enforce usage limits.

4. frac.bot

frac.bot answers questions using AI models. When you ask a question:

• your question and the earlier messages in that conversation are sent to our server and to an AI model provider through OpenRouter, together with a pseudonymous identifier (your Firebase user ID, or on iOS an app install ID). Your name and email are not sent;
• the AI provider and OpenRouter process the request under their own terms and privacy policies;
• when frac.bot looks up what a company reports, the company, topic and period are sent to Perplexity, through OpenRouter, to search public filings and press releases. Nothing identifying you is sent with it;
• your chat history is saved to your account, so you can see it on any device where you sign in. Only you can read it. Deleting a chat, or clearing your history, removes it from your account.

Please do not enter confidential, proprietary or personal information in frac.bot.

5. AI assistant connectors

You can connect frac.fyi to AI assistants such as Claude and ChatGPT through our MCP server (mcp.frac.fyi). When you connect one:

• you sign in to frac.fyi in your browser and authorize the assistant. It receives a token tied to your frac.fyi account, not your password. You can disconnect at any time in the assistant’s connector settings;
• we do not see your conversation with the assistant. We receive only the requests the assistant sends to frac.fyi’s tools (for example a licence number, a company name or a database query) and return frac.fyi data to it. The assistant’s provider handles your conversation and those results under its own terms and privacy policy;
• for each request we log your frac.fyi account ID, the tool used, the time, how long it took and whether it succeeded. We do not log your email, your name or what the request contained.

6. The iOS app

The iOS app works without an account. It sends a random install identifier with requests so we can apply usage limits and prevent abuse. It is not linked to your name, email or Apple ID.

7. Stored in your browser

We store preferences such as light or dark mode and frac.bot settings in your browser’s local storage, along with a copy of your frac.bot chats so they open quickly. That copy is kept separately for each account and is not shown to anyone else who signs in on the same browser. Firebase keeps you signed in the same way. Google Analytics sets cookies. You can clear all of these in your browser settings at any time.

8. Who processes your data

We use a small number of service providers to run frac.fyi:

• Google: sign-in (Firebase Authentication), our database (Firestore) and Google Analytics;
• Cloudflare: hosting of the website;
• Fly.io: hosting of our data and frac.bot servers;
• OpenRouter and the AI model providers it routes to: answering frac.bot questions;
• Perplexity, through OpenRouter: frac.bot’s search of company filings and press releases.

Some of these providers process data outside Canada, including in the United States. We do not sell, rent or trade your personal information, and we do not use it for advertising.

9. Well, production and regulatory data

The well, completion and production data in frac.fyi comes from public records published by the Alberta Energy Regulator (AER) and Petrinex, used under their terms. It is not personal information about you.

10. Keeping and deleting your data

We keep account and activity information while your account is in use and for as long as needed to run the service. Google Analytics data is kept for the period set in our Analytics settings. Server logs, including the AI assistant connector request log, are kept by our hosting provider (Fly.io) for about 7 days and are used only to keep the service secure, prevent abuse and fix problems. You can ask us to see, correct or delete the information linked to your account by emailing support@frac.fyi.

11. Security

All traffic is encrypted over HTTPS. Sign-in is handled by Google Firebase, and requests to our data and frac.bot services are checked against your sign-in before they are answered. No system is perfectly secure, but we work to protect your information.

12. Changes to this policy

We will update this page when our practices change and revise the date at the top. Significant changes will be highlighted in the app.

13. Contact

Questions about privacy? Email support@frac.fyi. frac.fyi is a product of Sample Space, based in Alberta, Canada.