This Privacy Policy describes how Kylark Ventures LLC (“Kylark Ventures,” “we,” “us”) collects, uses, and shares information when you use the OilStats Revenue Tracking website and application at revenue.oilstats.us and related services (together, the “Service”). It supplements the privacy provisions of our Terms and Conditions. By using the Service, you agree to the practices described here.
Account information. Registration, sign-in, and subscription management are handled by our account and billing provider. When you create an account we receive information such as your name, email address, and subscription plan. We do not receive or store your password. If you sign in with Google, that sign-in is handled by our account provider and Google.
Payment information. Payments are processed by third-party payment processors. Your full card number and other payment credentials go directly to the processor and are never stored on our servers.
Your ledger. The ledger lines you approve — production month, payor, property, product, volume, price, gross, taxes, deductions, net, the payee name and check date you enter, the last four characters of an owner number, and notes — are saved to your account so they follow your login across devices.
Statements you ask to have read. A spreadsheet or delimited file (CSV, Excel) is read in your browser and is not uploaded. A PDF you ask to have read is sent to our servers, read, and not kept there once the reading is returned; Section 4 describes this, including when the AI-assisted reader is involved.
Sign-in records. Each time you sign in we record the time, your account, your plan, the approximate location of the connection (city, region, and country), and the type of browser. We keep these records for about thirteen months.
Usage counts. To apply your plan’s limits we keep the date your plan year began, a count of the statements read for your account in that year, and a short fingerprint of each file read — a code computed from the file, from which the file cannot be rebuilt — so that a file read again is recognised and not counted as a new statement. We also keep the names you give your entities, and the number of additional entities on your subscription as reported by our account and billing provider.
Information stored in your browser. The application keeps some things in your browser’s local storage on your device: payee names you have used, display preferences, your acceptance of the Terms, and — only while a save to your account is pending — the ledger lines waiting to be saved. Logging out clears the account-specific items.
Access logs. Our hosting provider logs requests to the Service, including IP addresses and request patterns, for security and to enforce our Terms.
We use the information described above to operate and provide the Service, apply subscription plan limits, save your ledger and preferences, secure the Service and enforce our Terms, respond to support requests sent to us, and send service-related communications (such as billing or account notices through our account provider).
Your statement and ledger data is used only to serve your account. We do not pool it with other customers’ data, we do not sell it, we do not use it to build datasets or products for others, and we do not use it to train artificial-intelligence models. We do not sell your personal information, and we do not run third-party advertising on the Service.
When you ask the Service to read a PDF statement, the file is sent to our servers. Where the statement carries its own text, the Service reads the printed figures from that text on our servers, and nothing is sent to any AI service.
Where a statement, or part of one, cannot be read and proved that way — for example a scan — the Service can use an AI-assisted reader. It does so only if you ticked the consent box before the read (one tick covers the statements you dropped together). The pages that need it are then transmitted to Anthropic, PBC, which acts as our subprocessor and processes them through its Claude API in order to return a reading to you. Anthropic processes and retains submitted content in accordance with its commercial terms in force at the time of processing, which do not permit Anthropic to use your submitted content to train its models.
We do not retain the statements you upload, or the readings returned, on our own servers; we record only the usage count described in Section 2. Only the last four characters of an owner number are kept in your ledger. Lines from a reading that you approve are saved to your account as part of your ledger.
The Service uses two session cookies to keep you signed in; they are set server-side, are not readable by page scripts, and expire within twelve hours of your sign-in. Our account provider may set its own cookies or tokens under its own privacy policy. The Service also uses your browser’s local storage as described in Section 2. We do not use third-party advertising or cross-site tracking cookies.
We share information with service providers only as needed to run the Service: our account and billing provider (registration, authentication, subscriptions, and service emails), payment processors, our hosting and infrastructure provider (which serves the site, runs the statement reader, and stores account-saved data), and Anthropic (AI-assisted reading, as described in Section 4). Our public pages load typefaces from Google Fonts, which receives standard request information such as your IP address when it serves them. Each provider processes information under its own terms and privacy policy.
We may also disclose information if required by law, to protect our rights or the security of the Service, or in connection with a sale or reorganization of our business. We do not sell personal information to anyone.
We keep your ledger while your account is active. Sign-in records are kept for about thirteen months, and access logs for a limited period appropriate to security and enforcement. If you cancel your account, or if you ask us to delete your data by contacting us at the address in Section 12, we will delete account-saved data within a reasonable time, except where we must keep it to comply with law, resolve disputes, or enforce our Terms. You can download your ledger as a file at any time before then. Data stored only in your browser remains on your device and under your control.
We use reasonable technical measures to protect information, including encrypted connections (HTTPS), server-side session cookies that page scripts cannot read, a sign-in that expires each day, and security headers on all responses. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You can review and update your account information through your account, cancel your subscription at any time, download or clear your ledger in the application, and clear browser-stored data through your browser. Depending on where you live, you may have additional rights over your personal information, such as the right to access, correct, or delete it. To exercise any of these, contact us at the address in Section 12 and we will respond as required by applicable law.
The Service is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.
We may update this Privacy Policy from time to time. The current version, with its effective date, will always be posted at this page, and material changes may also be announced in the application. Your continued use of the Service after an updated policy takes effect constitutes acceptance of it.
Questions about this Privacy Policy, or requests regarding your information, may be directed to Kylark Ventures LLC at [email protected].