Privacy Policy

Last Updated: January 18, 2026

EnCarbonSys ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the EnCBAM service.

1. Information We Collect

We collect information that you provide directly to us when you create an account, including:

Account Information: Name, email address, password, and company details.
Operational Data: Installation details, production volumes, and emissions data required for CBAM reporting.
Usage Data: Information about how you interact with our portal (collected only with consent).

2. How We Use Your Information

We use the collected data to:

Provide and maintain the EnCBAM reporting service.
Process and generate regulatory CBAM reports.
Improve and personalize your user experience.
Communicate with you regarding updates or support.

3. Data Retention

In accordance with CBAM regulations, we retain your operational data for a period of 5 years from the end of the year to which the reporting period relates. Personal account data is retained as long as your account is active or as needed to provide you services.

4. Sub-processors

We use the following sub-processors to host our infrastructure and provide services:

Supabase: Database and Authentication services.
Vercel / DigitalOcean: Frontend and Edge API hosting.
Google Analytics: Usage monitoring (anonymized, requires consent).

5. Data Security

We implement industry-standard security measures, including encryption at rest and in transit, to protect your data. Access to operational data is restricted to authorized users via Row-Level Security (RLS) policies.

6. Your Rights (GDPR)

Under GDPR, you have the following rights:

Access & Portability: Request a copy of your data in a machine-readable format.
Correction: Update inaccurate information in your profile.
Erasure ("Right to be Forgotten"): Request deletion of your account and personal data (subject to regulatory retention requirements).
Withdraw Consent: Revoke consent for analytics cookies at any time via the cookie settings.

7. Data Protection Officer (DPO)

For any privacy-related inquiries or to exercise your rights, please contact our DPO at: dpo@encarbonsys.com.