Privacy Policy

What we collect

• Contact details you submit — name, email, organisation, and the message you send us.
• Transaction details — purchase requests, registry account identifiers, and records of credits purchased and retired.
• Technical data — basic request logs needed to operate and secure the service.

Why we collect it

To respond to enquiries, to execute and verify transactions, to issue certificates, and to meet record-keeping obligations that apply to carbon market transactions.

What we do not do

We do not sell personal data. We do not use your data to build advertising profiles.

Storage and processors

Data is stored with infrastructure providers used to operate the platform, including our database, email, and payment processors. Each processor receives only the data required to perform its function.

Where your data is processed

The platform runs on infrastructure hosted outside India, and some of our processors store or process data outside India. Where that happens we rely on contractual protections with each processor. If you need to know the specific location for a given category of data, ask us and we will tell you.

How long we keep it

• Enquiries that do not become transactions — [24 months] from last contact, then deleted.
• Transaction and certificate records — retained for the period required by applicable tax, accounting, and carbon-market record-keeping rules. These cannot be deleted on request while that obligation runs.
• Technical logs — [90 days], unless retained longer for a specific security investigation.

Cookies and analytics

We use only what is needed to operate and secure the site. We do not use advertising or cross-site tracking cookies. If we add analytics we will update this page before doing so.

Your rights

Subject to the retention rules above, you may ask us to:

• give you access to the personal data we hold about you;
• correct or complete data that is wrong or out of date;
• delete data we no longer have a lawful reason to keep;
• withdraw a consent you previously gave — this does not affect processing already carried out;
• nominate someone to exercise these rights on your behalf if you are unable to.

We will respond within [30 days]. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

If something goes wrong

If a personal data breach occurs, we will notify the Data Protection Board and affected individuals as required, without undue delay, and tell you what happened and what we are doing about it.

Children

The platform is not directed at children and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Grievance contact

Questions, requests, or complaints about how we handle personal data go to our grievance officer: [name and email to be inserted]. General privacy questions: contact PRAN.