Privacy Policy

1. Introduction

Carbon Emissions AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our carbon emissions calculation platform at www.carbonemissionsai.com.

2. Information We Collect

2.1 Personal Information

• Account Information: Email address, subscription status, Stripe customer ID
• Session Data: Session tokens, IP addresses, user agent information, last activity timestamps
• Payment Information: Processed securely through Stripe (we don't store payment details)

2.2 Carbon Calculation Data

• Station/facility information and operational data
• Energy consumption metrics (electricity, fuel usage)
• Business metrics (revenue, operational data)
• Transportation and logistics information
• Waste management data
• EV charging infrastructure data

2.3 Technical Information

• IP address and browser type
• Usage patterns and feature interactions
• Memory usage metrics (for performance optimization)
• Session cookie data for authentication

2.4 Analytics Data

• Page views and navigation paths
• Feature usage and interaction data
• Device and browser information
• Geographic location (country-level)

3. How We Use Your Information

• Provide carbon emissions calculations and UK SECR compliance reporting
• Manage user authentication and secure session access
• Process subscriptions and payments through Stripe
• Generate AI-powered narrative analysis and recommendations
• Export CSV reports of your emissions data
• Improve our platform performance and user experience
• Ensure platform security and prevent unauthorized access
• Communicate service updates and maintenance notifications
• Analyze usage patterns to enhance features and functionality
• Monitor platform performance and identify technical issues

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contractual Necessity: To provide the subscription service you requested
• Legitimate Interests: To improve our services, ensure security, and prevent fraud
• Consent: For optional analytics and marketing communications
• Legal Obligation: For financial and tax record keeping

5. Data Storage and Security

5.1 Data Storage

• User accounts and session data stored in secure databases
• Carbon calculation data stored temporarily for report generation
• Payment information handled exclusively by Stripe
• Session data automatically cleaned up after 24 hours of inactivity
• Analytics data stored in Google Analytics with data retention settings

5.2 Security Measures

• Encrypted database connections and HTTPS encryption
• Secure session management with token-based authentication
• Regular security updates and vulnerability monitoring
• Memory management and data cleanup protocols
• Strict Content Security Policies (CSP) and security headers
• Regular security audits and penetration testing

6. Cookies and Tracking Technologies

6.1 Essential Cookies

• Session Cookie: Required for user authentication and subscription access (24-hour duration)
• Stripe Cookies: Necessary for secure payment processing
• Security Cookies: For CSRF protection and platform security

6.2 Analytics Cookies (Google Analytics)

• _ga: Used to distinguish users (2-year expiration)
• _gid: Used to distinguish users (24-hour expiration)
• _gat: Used to throttle request rate (1-minute expiration)

We use Google Analytics to understand how users interact with our platform. Google Analytics collects data such as:

• Pages visited and time spent on each page
• Click patterns and feature usage
• Device and browser information
• Geographic location (anonymized)

Google Analytics data is anonymized and we do not use it for personalized advertising.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Stripe: For secure payment processing (View Stripe Privacy Policy)
• Google Analytics: For website analytics and performance monitoring (View Google Privacy Policy)
• Service Providers: Hosting platforms (like Render) and infrastructure services
• Legal Authorities: When required by law or to protect our legal rights
• Professional Advisors: Accountants, lawyers for compliance purposes

8. International Data Transfers

Your data may be processed on servers located outside your country of residence, including in the United States where Google Analytics processes data. We ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses for EU/EEA data transfers and reliance on adequacy decisions where applicable.

9. Data Retention

• Account Data: Retained while your account is active + 3 years after cancellation
• Session Data: Automatically cleared after 24 hours of inactivity
• Calculation Data: Available for export and retained for 7 years for audit purposes
• Payment Records: Retained as required by financial regulations (7 years)
• Support Communications: Retained for 3 years after resolution
• Analytics Data: Retained in Google Analytics for 26 months

10. Your Rights (GDPR/CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured format
• Objection: Object to certain types of processing
• Withdraw Consent: Withdraw consent for optional processing
• Opt-out of Analytics: Disable Google Analytics tracking

11. Google Analytics Specific Information

We use Google Analytics to understand how users interact with our website. You can opt-out of Google Analytics tracking in several ways:

• Use Google's opt-out browser add-on
• Disable cookies in your browser settings
• Use our cookie consent banner to reject non-essential cookies

Google Analytics data is aggregated and anonymized where possible. We do not use Google Analytics data for personalized advertising or cross-site tracking.

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us immediately at contact@carbontesseract.com.

13. Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred. We will notify you via email and/or prominent notice on our platform of any change in ownership or uses of your personal information.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes to our information practices. We will notify you of any material changes by email (sent to the email address specified in your account) or by means of a notice on our platform prior to the change becoming effective.

← Back to Carbon Emissions Calculator