1. Information We Collect

1.1 Personal and Authentication Information

We may collect the following personal information to provide secure access to our services:

• Identity Data: Name, email address, and profile picture provided via Google OAuth or Clerk.com.

• Contact Details: Phone number and mailing address.

• Professional Data: Job title and company affiliation.

1.2 Company and Financial Information

To perform accurate carbon footprint analysis, we collect information related to your business operations:

• Company Profile: Name, registration number, size (turnover and staff count), and industry.

• Xero Data: If you choose to connect your Xero account, we collect "read-only" data including bank transactions, invoices, supplier names, and account codes.

• Carbon Metrics: Data relating to your energy usage, travel, and procurement spend for the purpose of emissions calculation.

2. How We Use Your Information

We use the information collected for the following purposes:

• Service Provision: To calculate your carbon footprint and generate branded sustainability reports.

• Personalization: To tailor your dashboard experience and carbon reduction recommendations.

• Communication: To respond to inquiries and send newsletters or updates (only with explicit consent).

• Verification: To fulfill contractual obligations and provide data for the Certified Carbon Registry.

3. API Disclosures & Data Integration

3.1 Google API Disclosure (Limited Use)

Certified Carbon’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google account information solely for authentication and do not share this data with third parties for advertising or marketing purposes.

3.2 Xero Integration

When you connect to Xero, we access your financial data through a secure API. We do not modify, delete, or add data to your Xero account. We only "read" the transactions necessary to assign carbon emission factors based on your spend. Your raw financial data is never shared publicly.

4. Sharing Your Information

• Certified Carbon Registry: By providing company information, you agree to allow us to publish your carbon certification status and high-level footprint data on our public registry.

• Service Providers: We share data with trusted partners who assist in our operations, including Clerk (Authentication), Stripe (Payments), and Replit (Hosting).

• Legal Requirements: We may disclose information to comply with legal obligations or government requests.

5. Data Security and Retention

• Security: We take appropriate technical measures to protect your data from unauthorized access. However, no internet transmission is 100% secure.

• Retention: We retain your synced Xero data only as long as your account is active.

• Deletion: You may disconnect your Xero account or delete your Certified Carbon account at any time. Upon deletion, your personal and financial data will be purged from our active databases within 30 days.

6. Your Rights

Under GDPR and UK data protection laws, you have the right to:

• Access and Correction: Request a copy of your data or correct inaccuracies.

• Deletion: Request the deletion of your data, subject to legal requirements.

• Data Portability: Request the transfer of your data to another provider.

• Withdraw Consent: Disconnect third-party integrations (Google/Xero) at any time.

7. About Us and Contact

Certified Carbon Ltd is a UK company (Registration No: 15248578) registered with the Information Commissioner's Office (Ref: ZB620033).

Contact Us:

Email: contact@certifiedcarbon.com

Address: 85 Great Portland Street, First Floor, London, W1W 7LT