CARBON27

Privacy Policy

Effective Date: February 27, 2026 · Version 1.0

At Carbon27, we believe transparency is foundational to trust. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have over it.

By accessing or using Carbon27 at carbon27.ai, you acknowledge that you have read and understood this policy. If you do not agree, please discontinue use of the platform.

1. Who We Are

Carbon27 is a digital sustainability platform accessible at carbon27.ai. We help individuals and organisations understand and reduce their carbon footprint through the Carbon Portrait personal assessment, the Organisational Impact calculator, streak tracking, badges, and educational tools.

For all privacy-related questions, contact us at developer@carbon27.ai.

2. Data We Collect

Data you provide directly:

When you use Carbon27, you may submit the following:

  • Your email address and account credentials upon registration
  • Your responses to the Carbon Portrait assessment, including lifestyle, travel, diet, and energy habits
  • Company or organisation data entered into the Organisational Impact calculator
  • Streak activity, habit logs, and any other data you voluntarily enter into the platform

Data collected automatically via Google Analytics:

We use Google Analytics 4 to understand how users interact with carbon27.ai. This may include pages visited, features used, session duration, interaction patterns, device and browser type, and approximate location at country or region level only. We do not collect your precise GPS or physical location. Google Analytics collects pseudonymous usage data that cannot directly identify individual users.

Data we do not collect:

We do not collect payment information, government-issued identification, or any sensitive personal data beyond what is strictly necessary to operate Carbon27.

3. How We Use Your Data

We use your data solely to operate and improve Carbon27. Specifically to:

  • Calculate your personal carbon score and generate your Carbon Portrait
  • Process your Organisational Impact report where applicable
  • Track your streak activity, badge progress, and assessment history
  • Maintain and secure your account
  • Improve platform features, performance, and user experience
  • Send you optional product updates or sustainability tips if you have explicitly opted in

We use your data only for the operation, improvement, and delivery of Carbon27 services.

4. Legal Basis for Processing

We process your personal data on the following grounds:

  • Contractual necessity applies when we deliver the platform services you have agreed to use.
  • Legitimate interests apply when we maintain, secure, and improve the platform for all users.
  • Consent applies to optional communications such as email updates. You may withdraw your consent at any time by contacting developer@carbon27.ai.

5. Data Sharing & Third Parties

We do not sell, rent, lease, or trade your personal data to any third party under any circumstances.

To operate Carbon27, we work with a limited number of trusted third-party service providers for infrastructure hosting, user authentication, database management, email delivery, and analytics (Google Analytics 4). These providers are bound by data processing agreements and are authorised to process your data only as necessary to perform their services on our behalf.

Where we share aggregated, anonymised statistics, such as collective community impact figures, the data is presented in a form that cannot identify any individual user. These providers process data only as necessary to provide their services to Carbon27 and are required to maintain appropriate data protection safeguards. Some infrastructure providers may process data in different jurisdictions depending on their server locations.

6. Data Retention

We retain your personal data for as long as your account is active on Carbon27. If you request account deletion, we will permanently remove your identifiable data from our active systems within a reasonable timeframe, subject to any legal or technical obligations that require us to retain certain records.

Anonymised, non-identifiable data may be retained beyond account deletion for aggregate analytics and platform improvement purposes only.

7. Data Security

We apply appropriate technical and organisational measures to protect your data, including encrypted data transmission, secure storage, and access controls. While no digital system can guarantee complete security, we are committed to maintaining robust safeguards and responding promptly to any identified risks or incidents.

If you believe your Carbon27 account has been compromised, contact us immediately at developer@carbon27.ai.

8. Your Rights

Depending on your location and applicable laws, you may have the right to:

  • Access: request a copy of the personal data Carbon27 holds about you
  • Correction: request that inaccurate or incomplete data be updated
  • Deletion: request permanent deletion of your account and all associated data
  • Portability: request your data in a portable, machine-readable format where technically feasible
  • Objection: object to certain types of processing where permitted by law
  • Withdrawal of consent: withdraw consent for optional communications at any time

To exercise any of these rights, email developer@carbon27.ai. We will respond within a reasonable timeframe in accordance with applicable laws.

9. Data Deletion & Account Closure

You may request permanent deletion of your Carbon27 account and all associated data at any time by emailing developer@carbon27.ai. Upon confirmation, your Carbon Portrait responses, streak history, badge records, Organisational Impact data, and profile information will be permanently removed from our active systems.

Some anonymised, non-identifiable data may be retained for aggregate analytics purposes only and cannot be linked back to you.

10. Children's Privacy

Carbon27 is accessible to users aged 13 and above. Users between the ages of 13 and 18 must have the consent of a parent or legal guardian before using the platform.

We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided personal information without verifiable parental consent, we will delete it promptly. To report a concern, contact developer@carbon27.ai.

11. Cookies & Tracking

Carbon27 uses essential cookies to maintain your login session and remember your platform preferences. We use Google Analytics 4 for privacy-respecting usage analytics to understand how users interact with the platform and identify areas for improvement.

We do not use advertising cookies. We do not use third-party tracking pixels beyond Google Analytics. You may disable cookies through your browser settings, though some platform features may not function as expected as a result.

12. Third-Party Links

Carbon27 may contain links to external websites or services. We are not responsible for the privacy practices, content, or data handling of any third-party platforms. We encourage you to review the privacy policies of any external services you access via carbon27.ai.

13. Changes to This Policy

We may update this Privacy Policy periodically as the platform evolves or as applicable laws change. When we do, the revised policy will be published at carbon27.ai with an updated effective date.

For material changes, we will make reasonable efforts to notify active users via email or in-platform notification. Continued use of Carbon27 following any update constitutes your acceptance of the revised policy.

14. Contact & Data Enquiries

For questions, concerns, or requests relating to this Privacy Policy or your personal data:

Carbon27Email: developer@carbon27.aiWebsite: carbon27.ai

Track. Reduce. Sustain. Repeat.
© 2026 Carbon27. All rights reserved.