Carboniq — Privacy Policy

1. Introduction

Carboniq ("we", "our", "us") is a Shopify application that helps e-commerce merchants calculate, display, and offset the carbon footprint of their products. This Privacy Policy explains how we collect, use, and protect information when you use our application.

2. Information We Collect

2.1 Store Information

When you install Carboniq, we access the following data through Shopify's API:

• Store name and domain
• Product catalog data (titles, types, tags, weights)
• Shopify session tokens for authentication

2.2 Calculated Data

We generate and store the following data:

• Carbon footprint scores for each product (in kgCO₂e)
• Carbon grade classifications (A through E)
• Aggregated store-level carbon statistics
• Carbon offset transaction records
• Impact certificates

2.3 Customer Data

Carboniq does not collect personal data from your customers. The carbon badge displayed on your storefront operates without tracking or collecting visitor information.

3. How We Use Your Information

We use the collected information solely to:

• Calculate carbon footprint scores for your products using ADEME emission factors
• Display carbon badges on your storefront
• Process carbon offset transactions
• Generate impact certificates and sustainability reports
• Provide analytics and recommendations to reduce your carbon footprint
• Check compliance with EU Green Claims regulations

4. Data Storage and Security

Your data is stored securely in our PostgreSQL database hosted on Supabase. We implement the following security measures:

• All data is encrypted in transit (TLS/HTTPS)
• Multi-tenant isolation: each store's data is strictly separated
• HMAC signature verification on all webhook endpoints
• Session-based authentication for all admin routes
• No cross-tenant data access is possible

5. Data Sharing

We do not sell, rent, or share your data with third parties. Your data is used exclusively to provide the Carboniq service. The only external data source we use is the ADEME emission factor database for carbon calculations.

6. Data Retention

We retain your data for as long as the Carboniq app is installed on your store. When you uninstall the app:

• All session data is deleted immediately
• Product carbon scores and store data are permanently removed
• Offset records and certificates are anonymized for legal compliance

7. Your Rights

You have the right to:

• Access your data at any time through the Carboniq dashboard
• Export your carbon data and reports
• Delete your data by uninstalling the application
• Request a full data export or deletion by contacting us

8. GDPR Compliance

Carboniq complies with the General Data Protection Regulation (GDPR). We process data based on the contractual necessity of providing our service. We handle Shopify's mandatory compliance webhooks including:

• Customer data requests
• Customer data erasure (redaction)
• Shop data erasure

9. Cookies

Carboniq does not use cookies on your storefront. Within the Shopify admin, we use only the session cookies required by Shopify's embedded app framework.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of significant changes through the Carboniq dashboard. Continued use of the application after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

• Email: carboncommerce@outlook.com