Privacy Policy

Effective date: January 1, 2026

CarbonSync AB ("CarbonSync", "we", "us", or "our") is committed to protecting the privacy of the individuals who use our platform and visit our website. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Swedish data protection law.

1. Data Controller

The data controller responsible for your personal data is:

CarbonSync AB
Stureplan 4C
114 35 Stockholm, Sweden
Email: hello@carbonsync-io.com
Phone: +46 8 555 0638

2. What Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, job title, company name, and phone number provided when you register or contact us.
• Usage data: log data, IP address, browser type, pages visited, and interactions with the platform.
• Communications data: messages you send us via the contact form, email, or support channels.
• Billing data: payment information processed through our payment processor (we do not store card numbers directly).

3. How We Use Your Data

We use your personal data to:

• Provide and operate the CarbonSync platform and related services.
• Process transactions and manage your account.
• Send service-related communications, including updates, security alerts, and support messages.
• Respond to enquiries submitted via our contact form.
• Improve and develop our products through aggregated usage analysis.
• Comply with legal obligations.

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): to provide the service you have contracted for.
• Legitimate interests (Art. 6(1)(f)): for product improvement, fraud prevention, and security.
• Consent (Art. 6(1)(a)): for marketing communications and analytics cookies, where required.
• Legal obligation (Art. 6(1)(c)): to comply with applicable law.

5. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Account data is retained for the duration of your subscription plus five years. Usage logs are retained for 12 months.

6. Data Sharing

We do not sell your personal data. We share data with trusted third-party service providers (hosting, payment processing, analytics) under data processing agreements that require them to protect your data. We will disclose data to authorities where required by law.

7. International Transfers

All personal data is stored on servers located within the European Union (Frankfurt and Amsterdam). We do not transfer personal data to countries outside the EU or EEA without appropriate safeguards.

8. Your Rights

Under GDPR, you have the following rights:

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at hello@carbonsync-io.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. Our platform infrastructure is ISO 27001 certified.

10. Cookies

Our website uses cookies. For detailed information on the cookies we set and how to manage them, see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email of material changes. The updated policy will be posted on this page with a revised effective date.

12. Contact

For any questions or concerns about this Privacy Policy, contact our Data Protection contact at hello@carbonsync-io.com.