SWBNO customers should ask what data was shared with Promise for utility bill relief

Hey r/NewOrleans,

I’m a former employee of Promise Pay / Promise who recently quit after becoming disillusioned with leadership and what the company is doing. Promise partnered with The Sewerage & Water Board of New Orleans a few years ago to offer payment plans to customers that could not afford to pay their bills.

That kind of program may have helped a lot of people. On paper it sounds helpful, but underneath, the business model centers on collecting, aggregating, and eventually monetizing personal data that governments have using AI tools. Many of the execs and employees at Promise came straight from Palantir.

Promise is presented as a convenient way to get an interest-free payment plan if you are behind on your water bill. That can be genuinely useful. But it also means all of your personal data is now owned by Promise. Promise is not just a payment form. It is a government/utility infrastructure company that publicly markets AI-powered outreach, automated tools, machine learning, audit trails, and “data-driven program outcomes” to these utilities.

They’re building a data moat behind the feel-good language of helping people so that they can sell your data.

Why this matters in Louisiana

Louisiana does not have the same consumer privacy rights that California residents for example have under the CCPA/CPRA. That means you have no right to demand access, deletion, correction, or opt-out for all personal information held by a private vendor. Even if it was sold to them by your state utility. That’s exactly why this matters. At worst, you deserve to at least know what is going on.

What you can do:

Please note: I’m not adding any emails or phone numbers to this post, because I previously did this and Reddit shadow banned the account.

  1. Send PromisePay a privacy and data-use request anyway.

Even if Louisiana does not give you the same CCPA/CPRA rights as California, you can still ask PromisePay what data it has about you, where it got it, who it shared it with, and whether it will delete data that is not legally required.

You can email or call PromisePay and say something like:

“I am a Louisiana resident and SWBNO customer requesting information about the personal information PromisePay maintains about me in connection with my Sewerage & Water Board of New Orleans account or payment plan. Please disclose the categories and specific pieces of personal information you maintain about me, the sources of that information, the purposes for which it is used, and the categories of third parties, affiliates, vendors, service providers, contractors, government entities, or utility partners to whom it has been disclosed.

Please also disclose whether PromisePay receives or derives any information about my account balance, payment history, shutoff risk, hardship status, assistance eligibility, household information, landlord/tenant status, dispute status, or other sensitive utility-account information.

I request deletion of my personal information unless retention is required by law or required under a valid contract with SWBNO. I do not consent to unnecessary sale, sharing, reuse, analytics, AI training, profiling, marketing, product development, or secondary use of my personal information.”

  1. Send the same request to SWBNO.

Ask SWBNO what data it shared with PromisePay, what contract terms govern that data, and whether customers can enter payment arrangements without PromisePay.

You can say:

“Please disclose what personal information SWBNO shares with PromisePay, the legal and contractual basis for that sharing, the purposes for which PromisePay may use the information, the retention period, and whether SWBNO customers can obtain a payment plan directly through SWBNO without using PromisePay.

Please also identify whether PromisePay receives account balance, payment history, shutoff-risk, hardship, assistance, dispute, household, landlord/tenant, or other sensitive customer information, and whether PromisePay is allowed to use that information for analytics, AI systems, profiling, marketing, product development, or any purpose beyond administering payment plans.”

  1. Ask SWBNO directly:

“Can I set up a payment plan directly with SWBNO without PromisePay? I do not consent to unnecessary third-party sharing of my water account, billing, payment, dispute, hardship, household, or shutoff-risk information.”

Promise has LOST utilities in the past by those utilities eventually building their own repayment plan infrastructure into their own billing software.

  1. Use public records requests.

SWBNO and the City of New Orleans provide public-records request channels. Ask for the PromisePay contract, data-sharing terms, privacy review, procurement materials, vendor security documents, data retention terms, and any communications about customer data use. A public-records request can ask for:

“All contracts, statements of work, data-processing agreements, privacy assessments, procurement documents, security questionnaires, retention schedules, and communications concerning SWBNO’s partnership with PromisePay, including any documents describing what customer data is shared, how that data may be used, whether customers can opt out, and whether PromisePay may use customer data for analytics, modeling, AI systems, marketing, product development, or secondary business purposes.”

  1. File complaints if the process is unclear, misleading, or evasive.

If Promise or SWBNO will not clearly explain what data is collected, how it is used, how long it is retained, whether customers can avoid PromisePay, or whether PromisePay can reuse customer information, consider filing a complaint with the Louisiana Attorney General’s Consumer Protection Section.

The Louisiana Attorney General says consumer complaints may help the office detect patterns of unfair or deceptive trade practices. Louisiana also has a Database Security Breach Notification Law, so customers should pay attention to how personal information is protected and whether any breach notice obligations arise if data is compromised.

Contact New Orleans elected officials and oversight bodies.

Reach out to your City Council member, the Mayor’s office, SWBNO leadership, and any officials now involved in SWBNO oversight. This is especially important because New Orleans City Council oversight of SWBNO has recently expanded, with reporting describing new authority over utility operations, budget, and policies.

Tell them:

“My water account data is not government property to casually hand over to a private vendor. I want to know who approved the PromisePay partnership, what customer data is being shared, whether PromisePay receives hardship, dispute, payment, shutoff-risk, household, or assistance-related information, whether customers can opt out, and whether payment plans are available directly through SWBNO.

I also want to know what protections prevent PromisePay from reusing customer information for analytics, AI systems, marketing, profiling, product development, or any secondary business purpose.”

Ask who owns the partnership, who reviewed the privacy terms, whether the contract is public, and whether SWBNO has audited PromisePay’s data practices.

Relief programs should help people without turning essential-service data into a permanent private data asset. I wish I had better options for what you can do, but the reality is that if you’re an American you have little to no control over your own data and how it’s bought, sold, or used against you.

reddit.com
u/Acrobatic-Evening790 — 17 days ago
▲ 606 r/Bellingham+1 crossposts

Washington State residents need ask why their data was given to Promise Pay

Hey r/Washington,

I’m a former employee of Promise Pay / Promise who recently quit after becoming disillusioned with leadership and what the company is doing. I'm making my rounds warning Promise's customers and tip-toeing around not getting shadow banned on Reddit for posting too much.

Promise publicly states that it partnered with Washington Energy Relief to distribute money. The partnership is regularly used as a use case when Promise sells to other states and utilities:

https://www.promise-pay.com/government-copy

This kind of program may have helped a lot of people. On paper it sounds helpful, but underneath, the business model centers on collecting, aggregating, and eventually monetizing personal data that governments have using AI tools. Many of the execs and employees at Promise came straight from Palantir.

Promise is presented as a convenient way to distribute state money, or get an interest-free payment plan if you are behind on your water bill. That can be genuinely useful. But it also means all of your personal data is now owned by Promise. Promise is not just a payment form. It is a government/utility infrastructure company that publicly markets AI-powered outreach, automated tools, machine learning, audit trails, and “data-driven program outcomes” to these utilities.

They’re building a data moat behind the feel-good language of helping people so that they can sell your data.

Why this matters in Washington State:

Washington does not have the same broad consumer privacy law that California residents have, for example, under the CCPA/CPRA. There is no simple statewide equivalent that lets every Washington resident demand access, deletion, correction, or opt-out for all categories of personal information unfortunately.

Washington does have something though: the My Health My Data Act. This is really the strongest tool you have in this case.

That law is aimed at consumer health data that may fall outside HIPAA. It gives Washington consumers rights involving certain health-related data, including the right to confirm whether a regulated entity is collecting, sharing, or selling consumer health data; access that data; obtain a list of third parties and affiliates with whom the data has been shared or sold; and request deletion. Washington law also requires consent for certain collection and sharing of consumer health data and prohibits selling consumer health data without valid authorization.

This is especially important because PromisePay presents itself as an AI company operating inside public-sector and utility programs. Customers should be able to know whether a private vendor is simply helping administer repayment plans or whether it is also monetizing systems built around low-income residents’ billing, hardship, and repayment data. And Promise IS doing this.

What you can do:

Please note: I’m not adding any emails or phone numbers to this post, because I previously did this and Reddit shadow banned the account.

  1. Send PromisePay a Washington privacy request.

You can ask PromisePay what data it has about you, where it got it, who it shared it with, and whether any of it qualifies as consumer health data under Washington’s My Health My Data Act.

  1. You can email or call PromisePay and say something like:

“I am a Washington State resident requesting information about the personal information PromisePay maintains about me in connection with my utility account or payment plan. Please disclose the categories and specific pieces of personal information you maintain about me, the sources of that information, the purposes for which it is used, and the categories of third parties, affiliates, vendors, service providers, contractors, government entities, or utility partners to whom it has been disclosed.

I also request that you identify whether any information you maintain about me is treated as consumer health data under Washington’s My Health My Data Act, including any information related to hardship, household vulnerability, disability, medical need, shutoff protection, assistance eligibility, or inferred health-related status.

If you maintain consumer health data about me, I request access to that data, a list of third parties and affiliates with whom it has been shared or sold, and deletion of that data unless retention is required by law. I do not consent to unnecessary sale, sharing, reuse, analytics, AI training, profiling, marketing, or secondary use of my personal information.”

  1. Send the same request to the utility or public agency.

  2. Ask the utility what data it shared with PromisePay, what contract terms govern that data, and whether customers can use a payment plan without PromisePay.

You can say something like:

“Please disclose what personal information my utility shares with PromisePay, the legal and contractual basis for that sharing, the purposes for which PromisePay may use the information, the retention period, and whether customers can obtain a payment plan directly through the utility without using PromisePay.

Please also identify whether any hardship, disability, medical, vulnerability, shutoff-protection, or assistance-related information is collected or shared with PromisePay, and whether that information is treated as consumer health data under Washington’s My Health My Data Act.”

Ask the utility directly:

“Can I set up a payment plan directly with the utility without PromisePay? I do not consent to unnecessary third-party sharing of my utility account, billing, payment, household, hardship, medical, disability, or assistance-related information.”

This is the key practical question. If the utility says PromisePay is optional, customers should know that. If the utility says PromisePay is required, then the public deserves to know what data-sharing protections exist.

  1. File a complaint if the process is unclear, misleading, or evasive.

If PromisePay or the utility will not clearly explain what data is collected, how it is used, how long it is retained, whether any consumer health data is involved, or whether customers can avoid unnecessary third-party sharing, consider filing a complaint with the Washington State Attorney General’s Consumer Protection Division.

The Washington AG’s Consumer Protection Division enforces the state Consumer Protection Act against unfair or deceptive practices, and the AG also says My Health My Data Act violations are treated as per se Consumer Protection Act violations.

  1. Contact local elected officials and utility leadership.

Reach out to your mayor, city council, public utility district commissioners, city attorney, utility board, or whoever oversees the utility in your area.

Tell them:

“My utility account data is not government property to casually hand over to a private vendor. I want to know who approved the PromisePay partnership, what customer data is being shared, whether PromisePay receives hardship, disability, medical, vulnerability, shutoff-protection, or assistance-related information, whether any of that data is protected under Washington’s My Health My Data Act, whether customers can opt out, and whether payment plans are available directly through the utility.

I also want to know what protections prevent PromisePay from reusing customer information for analytics, AI systems, marketing, profiling, product development, or any secondary business purpose.”

Ask who owns the partnership, who reviewed the privacy terms, whether the contract is public, and whether the utility has audited PromisePay’s data practices.

Relief programs should help people without turning things the government already used to do into a syphon for your tax dollars and personal information. 

u/Acrobatic-Evening790 — 21 days ago
▲ 48 r/Atlanta

Heads up about Promise/Promise Pay handling your private data if you are a resident of Atlanta

Hey /r/Atlanta,

Former employee of the company Promise Pay / Promise, who recently quit after becoming disillusioned with leadership and what the company is doing. Promise is a company that local utilities and governments partner with to let customers pay bills, apply for relief, etc. On paper it sounds helpful, but underneath, the business model centers on collecting, aggregating, and eventually monetizing personal data that governments have with AI tools. Many of the execs and employees at Promise came straight from Palantir.

On Tuesday the City of Atlanta Watershed Management announced that they partnered with Promise Pay:

https://atlantawatershed.org/promisepay/

This now means that regardless if you ever use Promise Pay, they now own all information about you that the City of Atlanta Watershed Management had.

Promise is presented as a convenient way to get an interest-free payment plan if you are behind on your water bill. That can be genuinely useful. But it also means all of your personal data is now owned by Promise. Promise is not just a payment platform. It is a government/utility infrastructure company that publicly markets AI-powered outreach, automated tools, machine learning, audit trails, and “data-driven program outcomes” to these utilities.

They’re building a data moat behind the feel-good language of helping people so that they can sell your data.

Why this matters in Georgia:

Unfortunately, Georgia has NO consumer privacy rights. That means Atlanta Water customers have no right to demand access, deletion, correction, or opt-out in the same way other states do. It’s totally legal for your state utility to sell your personal data for profit, and that’s exactly what they did…

What you can do:

Please note: I’m not adding any emails or phone numbers to this post, because I previously did this and Reddit shadowbanned the account.

  1. Send PromisePay a privacy request anyway.

Even if Georgia does not give consumer rights, you can still ask what they have, where they got it, who they share it with, and whether they will delete it. You can email or call PromisePay and say something like:

“I am an Atlanta, Georgia customer requesting information about the personal information PromisePay maintains about me in connection with Atlanta Department of Watershed Management. Please disclose the categories and specific pieces of personal information you maintain about me, the sources of that information, the purposes for which it is used, and the categories of third parties, vendors, service providers, contractors, or government entities to whom it has been disclosed. I also request deletion of my personal information unless retention is required by law or by the City of Atlanta. I do not consent to unnecessary sale, sharing, reuse, analytics, AI training, profiling, marketing, or secondary use of my personal information.”

  1. Send the same request to the City of Atlanta Department of Watershed Management.

  2. Ask DWM what data it shared with PromisePay, what contract terms govern that data, and whether PromisePay is allowed to use customer information for anything beyond administering payment plans.

You can say something like:

“Please disclose what personal information the City of Atlanta Department of Watershed Management shares with PromisePay, the legal and contractual basis for that sharing, the purposes for which PromisePay may use the information, the retention period, and whether customers can obtain a payment plan without using PromisePay.”

  1. Ask the utility to work with them directly:

“Can I set up a payment plan directly with Atlanta Department of Watershed Management without PromisePay? I do not consent to unnecessary third-party sharing of my water account, billing, payment, household, or hardship-related information.”

This matters because PromisePay’s pitch to utilities is that it helps them enroll more customers in payment plans and recover more revenue. That may be useful for the utility, but customers should still be able to ask whether a private data company needs to sit between them and a public water department

  1. If PromisePay or the City of Atlanta will not clearly explain what data is collected, how it is used, how long it is retained, or whether customers can avoid unnecessary third-party sharing, consider filing a complaint with the Georgia Attorney General’s Consumer Protection Division.

Unfortunately, you do not have the same data protection rights as a resident of California who can file a privacy enforcement complaint, but this could be a catalyst towards your state offering similar rights. Georgia’s consumer protection can’t force a deletion outcome, but it can create a record and put pressure on the company and public agency to explain their practices.

  1. Contact Atlanta elected officials and city leadership. Reach out to Mayor Andre Dickens, your Atlanta City Council member, and the leadership responsible for the Department of Watershed Management. Tell them:

“My water account data is not government property to casually hand over to a private vendor. I want to know who approved the PromisePay partnership, what customer data is being shared, whether customers can opt out, whether payment plans are available directly through the city, and what protections prevent PromisePay from reusing Atlanta residents’ data for analytics, AI systems, marketing, profiling, or product development.

I would like to know who inside the City of Atlanta owns this partnership, who reviewed the privacy terms, and whether the contract will be made public”.

Unfortunately your state laws hamstring you much more than other states, this is the best I could come up with based on what you state laws are and what I know about this particular Promise implementation.

reddit.com
u/Acrobatic-Evening790 — 1 month ago
▲ 202 r/SanJose

San Jose Water / California Water customers: your data is being sold

Hey /r/SanJose,

Former employee of the company Promise Pay / Promise, who recently quit after becoming disillusioned with leadership and what the company is doing. Promise is a company that local utilities and governments partner with to let customers pay bills, apply for relief, etc. On paper it sounds helpful, but underneath, the business model centers on collecting, aggregating, and eventually monetizing personal data that governments have with AI tools. **Many of the execs and employees at Promise came straight from Palantir.**

Promise is presented as a convenient way to get an interest-free payment plan if you are behind on your water bill. That can be genuinely useful. But it also means all of your personal data is now owned by Promise. Promise is not just a payment platform. It is a government/utility infrastructure company that publicly markets AI-powered outreach, automated tools, machine learning, audit trails, and “data-driven program outcomes” to these utilities.

They’re building a data moat behind the feel-good language of helping people so that they can sell your data.

**Why this matters in California:**

California has the strongest consumer privacy law in the country. Under the CCPA/CPRA, California residents can request access, deletion, correction, opt out of sale/sharing, and limit use/disclosure of personal information. California also has the new DROP system for data-broker deletion requests, which is a little tricky in this case though because Promise likely qualifies as a data broker AND service provider.

**What yo can do:**

**Please note**, I’m not adding any emails or phone numbers to this post, because I previously did this and Reddit shadow banned the account.

  1. Send Promise a CCPA request. Under CCPA you can request the following information from them. You can email them something like this, or call them and tell them this:

> “Under the California Consumer Privacy Act (CCPA/CPRA), I request disclosure of the categories and specific pieces of personal information you maintain about me, its sources and purposes, and the categories of third parties, service providers, or contractors to whom it has been disclosed. I also request deletion of my personal information except where retention is permitted by law, opt out of its sale or sharing—including for cross-context behavioral advertising—and limit the use and disclosure of my sensitive personal information.”

  1. Send the same request to San Jose Water as well.

  2. Ask San Jose Water: “Can I set up a payment plan directly with the utility without PromisePay? I do not consent to unnecessary third-party sharing.”

Promise actually struggles with this. They’ve lost a handful of programs already who figured out that they could easily implement similar repayment programs in-house.

  1. File a complaint with the California Privacy Protection Agency or California Attorney General if your privacy request is ignored or if the opt-out/deletion process is unclear.

  2. Reach out to Mayor Matt Mahon and tell him your personal data isn’t government property to hand over to a private data company. Ask who is taking ownership of this partnership on the side of the city.

reddit.com
u/Acrobatic-Evening790 — 1 month ago

Heads up about Promise/Promise Pay handling your private data

​

Hey r/Mississippi, reposting this because I think my old post was removed with my old account because I made a separate post elsewhere with my business phone number, which apparently is a big no-no in Reddit.

Former employee of the company Promise Pay / Promise, who recently quit after becoming disillusioned with leadership and what the company is doing. Promise is a company that local utilities and governments partner with to let customers pay bills, apply for relief, etc. On paper it sounds helpful, but underneath, the business model centers on collecting, aggregating, and eventually monetizing personal data that governments have using AI tools. **Many of the execs and employees at Promise came straight from Palantir.**

You might have seen the recent news that the Mississippi Department of Human Services just partnered with Promise for SNAP outreach and administration. The official press release here if you want the glossy version:

https://www.promise-pay.com/resources/how-mississippi-deployed-h-r-1-work-requirements-in-8-weeks

I’m here to warn you that this isn’t just another payment portal or document upload portal. Promise now positions itself as a data infrastructure company for governments and utilities. They’re building a data moat behind the feel-good language of helping people so that they can sell your data.

Mississippi does not currently have a broad active consumer privacy law like California’s CCPA. A Mississippi consumer data privacy bill was introduced in 2026 but died in committee. That means residents should not assume they have general state-law deletion/access rights.This means Promise can outright lie to you about the state of your data on their platform and how they plan to use it.

**What you can actually do right now:**

Email MDHS (and copy your legislators) asking:

Exactly what data Promise receives and stores

Who at Promise has access

How long they keep your data

Ask for written confirmation your data won’t be used for anything except legitimate SNAP administration.

Contact your state reps and senators today. Tell them your personal data isn’t government property to hand over to a private data company. Ask who is taking ownership of this partnership on the side of the State of Mississippi Find yours here: https://www.legislature.ms.gov/ (I’m hesitant to post even the public contact info of local reps here as I don’t want to get auto-moderated)

You can write to Promise asking them to delete your data but unfortunately there is no legal requirement for them to comply.

u/Acrobatic-Evening790 — 1 month ago