Privacy Notice
Last updated: 2026-07-29
1. Who we are
Climate Accountability (the "Service") is operated by Coral Carbon ("we", "us", "our"). For personal data we collect about visitors and customers of the Service, Coral Carbon acts as the data controller.
2. What we collect and why
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Location input | ZIP / postal code, city, state / province you enter | To generate the report you requested | Performance of a contract |
| Account data (if you sign in as an admin) | Email address, Google profile identifier | To authenticate admin access | Legitimate interest in securing the Service |
| Purchase data | Order ID, report ID, purchase timestamp | To unlock and deliver the report you purchased | Performance of a contract |
| Technical / server logs | IP address, user-agent, request paths, error traces | Security, abuse prevention, debugging | Legitimate interest in operating a secure Service |
Payment card details, billing address, and tax information are collected and processed by Stripe, not by us. See "Data sharing" below.
3. Data sharing
We share personal data only with the following categories of recipients:
- Stripe — our payment processor. Stripe handles checkout, payment card processing, and payment records. See Stripe's Privacy Notice.
- Infrastructure and service providers — hosting, database, and error-monitoring providers that process data on our behalf under confidentiality obligations.
- Third-party public data APIs — to build a report, we send your location (ZIP / postal code or city / state / province) to public data services (for example postal-code geocoding, government representative directories, and news indexing). These services receive the location itself but not your identity.
- Authorities — where we are required to do so by law, or to protect our rights, safety, or property, or those of our users or the public.
- Professional advisers — legal, accounting, or tax advisers when necessary.
We do not sell your personal data.
4. Retention
Purchased reports and their associated location input are retained for at least 30 days from purchase so that you can revisit the report you paid for, and then may be deleted or anonymized. Admin account records are kept for as long as the account is active. Server logs are retained for a short operational window (typically 30–90 days) and then rotated. Payment records held by Stripe are retained by Stripe in accordance with their policies and applicable tax law.
5. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with your local data-protection authority. To exercise any of these rights, contact us through the Service.
6. International transfers
Our providers, including Stripe, may process personal data in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
7. Security
We use appropriate technical and organizational measures — including encryption in transit, access controls, and least-privilege server credentials — to protect personal data. No system is perfectly secure; if you believe your data may have been affected by a security incident, please contact us.
8. Cookies and analytics
The Service uses only strictly necessary cookies and local storage required to run the site (for example, to keep you signed in as an admin). We do not currently use advertising or third-party analytics cookies. Stripe's checkout may set its own cookies when you make a purchase; those are governed by Stripe's Privacy Notice linked above.
9. Children
The Service is not directed to children under 16 and we do not knowingly collect personal data from them.
10. Changes to this Notice
We may update this Privacy Notice from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.
11. Contact
To exercise your rights or ask questions about this Notice, contact Coral Carbon through the Service. See also our Terms & Conditions and Refund Policy.