Privacy Policy — CarbonTiers

1. Introduction

CarbonTiers ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use the CarbonTiers platform at carbontiers.com.

2. Information We Collect

2.1 Information You Provide

Account data: name, email address, and password when you register.
Payment data: handled exclusively by Paddle; we never store your full card details.
Calculation inputs: activity data, emission factors, and sector-specific values you enter.
Communications: messages you send to our support team.

2.2 Information Collected Automatically

Log data: IP address, browser type, pages visited, timestamps.
Usage data: features accessed, calculation modules used, session duration.
Cookies: see our Cookie Policy for details.

3. How We Use Your Information

We use your information to:

Provide, operate, and improve the CarbonTiers platform.
Process payments and manage your subscription via Paddle.
Send transactional emails (account confirmation, password reset, invoices).
Respond to your support requests and enquiries.
Monitor and improve platform security and performance.
Comply with legal obligations.

We do not sell your personal information to third parties.

4. Legal Basis for Processing (GDPR)

Where GDPR applies, our legal bases for processing are:

Contract performance: to deliver the Service you signed up for.
Legitimate interests: security, fraud prevention, product improvement.
Legal obligation: compliance with applicable laws (e.g., tax, accounting).
Consent: for optional communications such as product newsletters.

5. Data Sharing and Third Parties

We share data only with:

Paddle — payment processing and tax remittance. Paddle acts as our Merchant of Record and has its own Privacy Policy.
Cloud infrastructure providers — hosting and database services, bound by data processing agreements.
Analytics providers — aggregated, anonymised usage analytics only.
Legal authorities — when required by law or to protect our legal rights.

6. Data Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password.

7. Data Retention

We retain your account data for as long as your account is active and for a reasonable period thereafter for backup, archival, and legal purposes. Calculation data is retained for the duration of your subscription and deleted within 90 days of account closure upon request.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access — request a copy of your personal data.
Correction — request correction of inaccurate data.
Erasure — request deletion of your personal data ("right to be forgotten").
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Restriction — request restriction of processing in certain circumstances.

To exercise any of these rights, email us at info@carbontiers.com. We will respond within 30 days.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your own. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your information in accordance with applicable data protection laws.

10. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the current version.

12. Contact

For privacy enquiries, please contact our Data Protection point of contact at info@carbontiers.com.