Privacy Policy

This policy describes how CarbonBright Inc. ("CarbonBright," "we," "us," or "our") collects, uses, protects, and discloses information when you use our Service, and explains your privacy rights. We use Personal Data to provide and improve the Service. We process Customer Data to provide, maintain, secure, support, and improve the Service, to comply with applicable law, or to perform our contractual obligations.

Definitions

• Account — a unique account created for you to access the Service.
• Application — the CarbonBright LCA Platform software.
• Company — CarbonBright Inc., 251 Little Falls Dr, Wilmington, DE 19808-1674.
• Cookies — small files placed on your device containing details of your browsing history.
• Country — Delaware, United States.
• Customer Data — data, files, documents, product information, supplier information, bill of materials data, environmental data, business information, content, or other information submitted, uploaded, imported, transmitted, or otherwise provided to the Service.
• Device — any device that can access the Service, such as a computer, cellphone, or tablet.
• Personal Data — information relating to an identified or identifiable individual.
• Service — the Application or the Website.
• Service Provider — a natural or legal person who processes data on the Company's behalf.
• Usage Data — data collected automatically from use of the Service.
• Website — CarbonBright, accessible at https://carbonbright.co.
• You — the individual or legal entity accessing or using the Service.

Collecting and Using Personal Data

Personal Data. While using our Service, we may ask you to provide personally identifiable information, including email address, first and last name, phone number, and address (state, province, ZIP/postal code, city).

Usage Data. Usage Data is collected automatically, including your device's IP address, browser type and version, the pages you visit, the time and date of your visit, time spent on those pages, unique device identifiers, and other diagnostic data. When you access the Service by or through a mobile device, we may also collect device type, unique ID, IP address, operating system, and browser type.

Tracking Technologies and Cookies

We use cookies and similar tracking technologies, such as beacons, tags, and scripts, to track activity on our Service and store certain information. Cookies are either Persistent (remain on your device even when offline) or Session (deleted once you close your browser). We use:

• Necessary / Essential Cookies (Session) — required to provide services available through the Website and to enable core features.
• Cookies Policy / Notice Acceptance Cookies (Persistent) — identify users who have accepted the use of cookies.
• Functionality Cookies (Persistent) — remember choices you make, such as login details or language preference.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent, though some parts of the Service may not function properly if you do.

Use of Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including to monitor usage and maintain Account access.
• To manage your Account and your registration as a user of the Service.
• For the performance of a contract, including purchases or other agreements with us.
• To contact you by email, telephone, SMS, or other electronic means regarding updates or security-related communications.
• To provide you with news, offers, and general information about goods, services, and events similar to those you've already purchased or enquired about, unless you have opted out.
• To manage your requests to us.
• For business transfers, to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of assets.
• For other purposes, such as data analysis, identifying usage trends, and evaluating and improving our Service, products, and marketing.

Customer Data

Customers may submit, upload, import, transmit, or otherwise provide Customer Data to the Service. As between CarbonBright and the customer, the customer retains all right, title, and interest in and to its Customer Data — CarbonBright does not claim ownership of Customer Data.

CarbonBright accesses, uses, processes, and stores Customer Data only as necessary to provide, maintain, secure, support, and improve the Service, comply with applicable law, perform contractual obligations, or as authorized by the customer. CarbonBright does not sell Customer Data, and will not disclose or share it with third parties except as necessary to provide the Service, with authorized Service Providers subject to confidentiality and data protection obligations, as required by law, in connection with a permitted business transaction, or with the customer's consent.

Sharing of Personal Data and Customer Data

We do not sell your Personal Data or Customer Data. We may share Personal Data in the following situations:

• With Service Providers, to provide, operate, secure, support, analyze, and improve the Service.
• For business transfers, in connection with a merger, asset sale, financing, acquisition, or restructuring, with notice where required.
• With Affiliates, in which case we require those Affiliates to honor this Privacy Policy.
• With business partners, limited to contact or business information reasonably necessary to offer, support, or improve products, services, or promotions, where permitted by law.
• With other users, if you share Personal Data in public areas of the Service — this information may be viewed by all users.
• With your consent, for any other purpose.

Retention of Personal Data and Customer Data

We retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, including to comply with our legal obligations, resolve disputes, and enforce our agreements. We retain Customer Data for as long as necessary to provide the Service, perform our contractual obligations, comply with applicable law, or as otherwise specified in an agreement with the customer.

Transfer of Personal Data and Customer Data

Your information may be processed at the Company's operating offices and in other locations where the parties involved in processing are based, which may be outside your jurisdiction. We take steps reasonably necessary to ensure your data is treated securely, and will not transfer your data to an organization or country without adequate controls in place.

Delete Your Personal Data

You have the right to delete or request that we assist in deleting the Personal Data we have collected about you, subject to applicable legal and contractual obligations. You may update, amend, or delete your information at any time from your Account settings, or by contacting us directly to request access to, correction of, or deletion of your Personal Data.

Disclosure of Personal Data and Customer Data

We may disclose Personal Data and, where applicable, Customer Data in connection with a merger, acquisition, financing, restructuring, or asset sale (with notice where required); if required to do so by law or in response to valid requests by public authorities; or where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or property, prevent or investigate wrongdoing, protect the personal safety of users or the public, or protect against legal liability.

Security of Personal Data and Customer Data

We maintain reasonable administrative, technical, and organizational safeguards designed to protect information submitted to the Service from unauthorized access, disclosure, alteration, loss, misuse, or destruction, including access controls, authentication controls, encryption where appropriate, monitoring, and secure infrastructure practices. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Our Service does not address anyone under the age of 13, and we do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and are aware your child has provided us with Personal Data, please contact us — if we become aware we have collected such data without verified parental consent, we take steps to remove it from our servers.

Links to Other Websites

Our Service may contain links to third-party websites that are not operated by us. We strongly advise you to review the privacy policy of every site you visit — we have no control over, and assume no responsibility for, the content or privacy practices of any third-party sites.

Relationship to Customer Agreements

Where a customer has entered into a Master Services Agreement, Order Form, Data Processing Addendum, or other written agreement with CarbonBright governing use of the Service, that agreement governs the contractual obligations between CarbonBright and the customer. To the extent there is a conflict between this Privacy Policy and such an agreement, the agreement will control with respect to that customer, unless otherwise required by applicable law.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page and updating the "Last updated" date above, and, where required by law, will let you know via email or a prominent notice prior to the change becoming effective.

Contact Us

If you have questions about this Privacy Policy, you can contact us at contact@carbonbright.co.