CARBONPULSE
Privacy Policy
This Policy explains how we collect, use, store, and protect personal data when you use the CarbonPulse application, in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations.
1. Who we are
Carbon Pulse Consulting LLC is the data controller for personal data processed through this app. For any privacy request, contact contact@carbonpulse.ae.
2. What we collect
- Account data: your email address and authentication credentials.
- Company data you enter: company name, tax registration number (TRN), sector, location, headcount, and similar business details.
- Activity & emissions data: the consumption figures and documents (e.g. invoices) you upload to build your inventory.
- Technical data: basic technical information needed to operate the service securely.
3. Why we use it (purpose & legal basis)
We process this data to provide the service you request — creating your GHG inventory, calculating emissions, and keeping your records — on the basis of performing our contract with you, your consent, and our legitimate interest in operating and securing the service. Where the law requires you to keep records (e.g. five-year retention under UAE GHG rules), we process data to help you meet that obligation.
4. Service providers (processors)
We use trusted providers to run the app: Supabase (database, authentication and file storage) and Netlify (application hosting). They process data on our instructions under their own security and privacy terms. We do not sell your personal data, and we do not allow advertising on the service.
5. International transfer of data
Your database and uploaded files are currently hosted on infrastructure located in India (Mumbai region), and application hosting is provided by a global content network that may process data outside the UAE. This means your personal data may be transferred to and stored in countries outside the UAE. Where we make such transfers, we take steps intended to ensure an adequate level of protection consistent with the PDPL. You may contact us for more information about these safeguards.
6. How long we keep it
We keep your data for as long as your account is active and as needed to provide the service. Because UAE GHG rules require companies to retain inventory records for five years, we retain the relevant inventory data and evidence for that period unless you ask us to delete it earlier and no legal obligation requires us to keep it.
7. Security
Access to your company's data is isolated at the database level so that each organisation can only see its own records, and evidence files are stored in a private store. We apply technical and organisational measures appropriate to the risk. No method of transmission or storage is completely secure, but we work to protect your information.
8. Your rights under the PDPL
Subject to the conditions in the law, you have the right to access your data; correct inaccurate data; request deletion; restrict or object to certain processing; request portability of your data; and withdraw consent. To exercise any of these, email contact@carbonpulse.ae. You may also lodge a complaint with the UAE Data Office.
9. Cookies & local storage
The app uses your browser's local storage to remember your session and language preference. It does not use third-party advertising or tracking cookies.
10. Children
The service is intended for businesses and is not directed at children. We do not knowingly collect personal data from children.
11. Changes
We may update this Policy from time to time. We will post the updated version here and revise the "last updated" date above.
12. Contact
Questions or requests: contact@carbonpulse.ae.