Privacy Policy

1. Information We Collect

SMEPro Technologies LLC ("SMEPro", "we", "us", or "our") provides monthly regulatory production reporting platforms for upstream oil and gas operators. To deliver our services, we collect:

• Account Information: Names, corporate email addresses, telephone numbers, and operator credentials authenticated securely via Firebase Auth.
• Production Data: Monthly production volumes (oil, gas, and water), days produced, inventories, well API numbers, and lease names uploaded via production workbooks.
• Geospatial Data: Well coordinates (latitude and longitude) and spacing parameters used to compute regulatory checks.

2. Multi-Tenant Workspace Isolation

We enforce strict multi-tenant isolation protocols at both the database and API layers. Your data is isolated by your operator's unique identifier.

• Cross-tenant queries are blocked at the database constraint level.
• Under no circumstances is production, accounting, or spacing data shared between different operator organizations.
• Authentication tokens (Firebase JWT) are validated on every API call to verify operator organization membership.

3. Data Storage & Signed-URL Protection

Regulatory flat files (XML/CSV) and official PDF filings are stored privately in Google Cloud Storage (GCS) buckets:

• Private Access Control Lists (ACLs): Storage buckets are fully private. Public read access is completely disabled.
• Signed-URL Expiration Policies: Access to rendered filing PDFs and submission flat files is granted exclusively via secure, temporary GCS signed URLs that expire exactly 15 minutes after generation.

4. Direct Electronic Exchange (EDI) Submissions

When direct submissions to state portals are authorized (e.g., Texas Railroad Commission Form PR XML or Colorado ECMC CSV Form 7), data is transmitted using encrypted TLS connections directly to state portals. We keep an audit trail of every submission payload, state receipt status, and transaction timestamp.

5. Contact Information

For questions or audits concerning your organization's data compliance and isolation logs, please contact us at: