Privacy policy

This site offers account signup, a free demo and paid plans with a workspace for your ledger files. The policy is short because the data we hold is short.

Who we are

CarbonAccounting.ai is operated by CarbonAccounting. Contact: [email protected].

What we collect, and why

Accounts. If you create an account we store: your email address, its confirmation state and timestamps, the page and button that opened the signup (source), UTM campaign parameters if you arrived from a tagged link, your IP address and browser user-agent (abuse prevention), and the 6-digit confirmation code until it is used or expires. Legal basis: your consent, which the confirmation code demonstrates. We use this list for exactly one thing: emailing you about your CarbonAccounting.ai account and the product. It is never sold, shared or rented.

The demo. Lines you paste into the Scope Classifier are sent to our server and to a model API to classify them, and the result is returned to you. Pasted lines are not stored in a database, not logged with your identity, and not used to train anything. Do not paste data that identifies people; the demo needs vendor, description and amount, nothing personal.

Server logs. Standard web-server logs (IP, URL, timestamp, user-agent) are kept briefly for security and debugging.

Advertising measurement. We advertise on Google and Microsoft Bing. When you arrive from one of our ads, we keep the ad click identifier (such as gclid or msclkid) and the campaign parameters in a first-party cookie for up to 90 days, and store them with your account or workspace order, so we know which ads lead to signups and purchases. Public pages of this site load the Google Ads tag and the Microsoft Advertising UET tag, which tell Google and Microsoft when a signup or purchase happens. We send no names, email addresses, ledger data or payment details to them, and we never load these tags inside your workspace, on supplier or sign-in links, or on the page you return to from checkout. You can block these cookies in your browser settings and the site keeps working.

Retention

Account and workspace data (your email address, workspace settings, uploaded ledger files and the inventories built from them) are kept for as long as your account exists, so your history and audit trail stay available between reporting periods. Ending a paid plan does not delete them; ask us and we delete them within 30 days. Invoices and payment records are kept for as long as tax and accounting law requires.

Your rights

Access, correction, deletion, and withdrawal of consent, at any time, by emailing [email protected] from the address in question. Deletion requests are honoured within 30 days; in practice it is usually the same week. You may also complain to your data-protection authority.

Processors

We use a transactional email provider to deliver confirmation codes, hosting infrastructure in the EU/US, a model API for demo classification, and Google Ads and Microsoft Advertising for ad measurement. Each processes data only on our instructions.

Changes

If this policy changes materially, the date above changes with it and confirmed account holders are notified by email.