Privacy Policy
Last updated: November 29, 2025
1. Introduction
CO2Reports ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
We collect the following types of information:
- Account Information: Email address, password (hashed), and account creation date
- Organization Data: Organization name, industry, country, and subscription information
- Facility Data: Facility names, locations, and countries
- Emissions Data: Data entries for electricity, fuel, materials, and waste consumption
- Usage Data: Information about how you interact with the Service
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process your transactions and manage your subscription
- Calculate CO₂ emissions based on your data entries
- Generate and deliver reports
- Send you service-related communications
- Respond to your inquiries and provide customer support
- Detect and prevent fraud or abuse
4. Data Storage and Security
Your data is stored securely using Supabase, a cloud database service with industry-standard security measures. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With service providers who assist us in operating the Service (e.g., Supabase for database hosting, Dodo Payments for payment processing)
- When required by law or to protect our rights
- In connection with a business transfer (merger, acquisition, etc.)
- With your explicit consent
6. Your Rights
You have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Object to processing of your data
- Export your data in a portable format
- Cancel your subscription at any time
To exercise these rights, please contact us at support@co2reports.com or through your account settings.
7. Cookies and Tracking
We use cookies and similar tracking technologies to maintain your session, remember your preferences, and improve the Service. You can control cookie preferences through your browser settings, though this may affect Service functionality.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or regulatory purposes.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after such modifications constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at support@co2reports.com.