Privacy Policy

Last Updated: January 15, 2025

1. Introduction

At Carbon Upscale, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our carbon footprint tracking and offsetting services, or engage with our platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Create an account using Magic.link authentication
• Complete our carbon footprint quiz
• Purchase carbon offset tokens
• Subscribe to our newsletter
• Submit a partnership inquiry
• Contact us through our website
• Use our dashboard and analytics features

This information may include:

• Email address (primary identifier for authentication)
• Location data (country, state/province, city)
• Carbon footprint quiz responses including energy usage, transportation habits, dietary preferences, waste management practices, and purchasing behaviors
• Business information (for partnership inquiries)
• Payment information (processed securely through Stripe)
• Blockchain wallet addresses (for carbon token transactions)
• Dashboard preferences and settings
• Communication preferences

2.2 Automatically Collected Information

We automatically collect certain information when you visit, use, or navigate our website:

• Usage data (page views, time spent on pages, click-through rates)
• Device information (browser type, device type, operating system)
• Location information (general geographic location based on IP address)
• Performance data (page load times, errors, user interactions)
• Marketing attribution data (how you found our website)
• Session recordings and analytics data

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Necessary Cookies: Essential for website functionality, authentication, and security
• Analytics Cookies: Google Analytics, Vercel Analytics for usage patterns and performance monitoring
• Marketing Cookies: Conversion tracking, remarketing, and advertising effectiveness
• Functional Cookies: User preferences, dashboard settings, and personalization

3. How We Use Your Information

We use the information we collect to:

• Calculate and track your carbon footprint using our proprietary algorithms
• Provide personalized recommendations for reducing emissions
• Process and manage carbon offset token purchases through blockchain technology
• Authenticate your account and provide secure access
• Maintain your dashboard with historical data and progress tracking
• Send you relevant updates, achievement notifications, and newsletters (with consent)
• Respond to your inquiries and provide customer support
• Improve our services, develop new features, and enhance user experience
• Analyze usage patterns and measure the effectiveness of our platform
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations and resolve disputes
• Conduct research and analytics for environmental impact measurement

4. Third-Party Services and Data Sharing

4.1 Service Providers We Use

We share your information with trusted third-party service providers who help us operate our platform:

• Supabase: Database hosting and management (your data is stored securely in their infrastructure)
• Magic.link: Authentication services (email-based passwordless login)
• Stripe: Payment processing (we do not store credit card information)
• Google Analytics: Website analytics and user behavior tracking
• Vercel: Hosting, analytics, and performance monitoring
• Base Network: Blockchain infrastructure for carbon offset token transactions
• Alchemy: Blockchain API services

4.2 When We Share Information

We may share your information in the following circumstances:

• With service providers who need access to provide their services
• Carbon offset project partners (anonymized and aggregated data only)
• Legal authorities when required by law or to protect our rights
• In connection with a business transaction (merger, acquisition, etc.)
• With your explicit consent for specific purposes

We do not sell your personal information to third parties.

5. Data Storage and Security

We implement comprehensive security measures to protect your information:

• Data encryption in transit and at rest
• Secure database hosting with Supabase (SOC 2 Type II compliant)
• Regular security audits and monitoring
• Access controls and authentication requirements
• Secure payment processing through PCI-compliant Stripe
• Blockchain technology for immutable transaction records

However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

6. Blockchain Technology and Privacy

For carbon offset verification and token transactions, we utilize blockchain technology on the Base network:

• Blockchain transactions are public and immutable by nature
• We do not store personally identifiable information on the blockchain
• Only wallet addresses and transaction amounts are recorded on-chain
• Carbon credit transactions and project verification data are anonymized
• You can view your transaction history through blockchain explorers

7. Your Privacy Rights

Depending on your location (GDPR, CCPA, etc.), you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Restriction: Request restriction of certain processing activities
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain types of processing
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Cookie Management: Control cookie preferences through our cookie banner or browser settings

To exercise these rights, please contact us at privacy@carbonupscale.com. We will respond within the timeframes required by applicable law.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct

9. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account information: Until you delete your account or request deletion
• Carbon footprint data: 7 years for historical tracking and environmental impact analysis
• Transaction records: As required by financial and legal regulations
• Analytics data: Aggregated and anonymized data may be retained indefinitely
• Legal obligations: As required by applicable laws and regulations

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to remove such information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information we have collected
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by:

• Posting the new policy on this page with an updated "Last Updated" date
• Sending an email notification to registered users (for significant changes)
• Displaying a notice on our website

13. Contact Information

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

14. Effective Date

This Privacy Policy is effective as of January 15, 2025, and applies to all information collected by Carbon Upscale from that date forward.