Privacy Policy

01

Information We Collect

We collect information to provide and improve our services, ensure security, and comply with legal obligations.

• Personal Information: Name, email address, company, job title, contact details, and account credentials.
• Business & Operational Data: Data you submit for emissions calculations, climate risk modeling, and sustainability reporting.
• Usage Data: Device information, IP address, browser type, access times, and usage statistics.
• Cookies & Tracking Technologies: Information collected via cookies and similar technologies (see Section 7).

02

How We Collect Information

• Directly from You: When you register, use the Platform, fill out forms, or communicate with us.
• Automatically: Through cookies, analytics tools, and log files as you use the Platform.
• From Third Parties: When you connect third-party services or integrations to the Platform.

03

How We Use Your Information

We use your information to:

• Provide, operate, and improve the Platform and our services.
• Authenticate users and secure accounts.
• Process and analyze data for emissions calculations and climate risk modeling.
• Deliver AI-enhanced sustainability reports and recommendations.
• Communicate with you about your account, updates, and support.
• Comply with legal obligations and enforce our agreements.
• Conduct research, benchmarking, and analytics using de-identified, aggregated data.

04

How We Share Your Information

We do not sell your personal information. We may share your information as follows:

• With Service Providers: Trusted vendors who support our operations (e.g., hosting, analytics, customer support) under confidentiality agreements.
• With Third-Party Integrations: When you choose to connect third-party services to the Platform.
• For Legal Compliance: If required by law, regulation, legal process, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you as required by law.
• With Your Consent: If you direct us to share your information or as otherwise disclosed at the time of collection.

05

Data Security

We implement industry-leading security measures to protect your information, including:

• Encryption of data in transit and at rest.
• Access controls and authentication.
• Regular security assessments and audits.
• Secure data storage and backup practices.

Despite our efforts, no system is 100% secure. We encourage you to use strong passwords and safeguard your credentials.

06

Data Retention & Deletion

We retain your information as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your personal data by contacting us. We will securely delete or anonymize your data, except where retention is required by law.

07

Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and improve our services. You can manage cookie preferences through your browser settings. For more information, see our Cookie Policy.

08

International Data Transfers

If you use our Platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries. We comply with applicable laws regarding international data transfers and use standard contractual clauses where required.

09

Your Rights

Depending on your location and applicable law, you may have the right to:

• Access, correct, or update your personal information.
• Request deletion of your data.
• Object to or restrict certain processing activities.
• Withdraw consent at any time (where processing is based on consent).
• Receive a copy of your data in a portable format.

To exercise your rights, contact us at [email protected].

10

Children's Privacy

The Platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us to request deletion.

11

Data Breach Notification

We have protocols in place to detect, respond to, and notify affected users and authorities of data breaches as required by law, including the 72-hour notification window under GDPR.

12

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated to users, and the "Effective Date" will be updated. Continued use of the Platform after changes constitutes acceptance.