Privacy Policy

At EmissionsTracker Platform we take your privacy seriously. This Privacy Policy describes how we collect, use, disclose and protect your personal information when you use our platform and services.

1. Overview

EmissionsTracker Platform (“we”, “our”, or “the Service”) is operated by Sustainable Transport Advisory Pty Ltd. This policy applies to all users of our website, applications and services. We are committed to protecting your personal data in line with the Australian Privacy Principles and, where applicable, the GDPR and CCPA.

By using EmissionsTracker Platform you consent to the data practices described in this policy. If you do not agree with it, please do not access the Service.

2. Data collection

We collect information you provide directly to us, including:

• Account information: name, email address, phone number and password when you register.
• Organisation data: organisation name, industry, ABN, address and other details provided during onboarding.
• Emissions data: activity data, emission entries, calculated footprints, reports and analytics you create in the platform.
• Communication data: information you provide when contacting our support team.
• Usage data: log data, device information, IP address, browser type and pages visited.

3. Cookies & tracking

We use cookies and similar technologies to run the platform. These include:

• Essential cookies: required for authentication, security and core functionality.
• Analytics cookies: help us understand how the platform is used (page views, session duration).
• Preference cookies: remember settings such as theme, language and layout.

You can manage cookie preferences through your browser. Disabling some cookies may affect functionality.

4. Billing information

When you subscribe to a paid plan we may collect billing information including:

• Billing name and address
• Invoices and payment history
• Subscription and licence details, and renewal dates

Billing records are stored securely and retained as required by financial regulation. Payment card details are never stored on our servers — they are handled entirely by our payment processor.

5. Stripe payments

We use Stripe to process subscription payments. Stripe is PCI DSS compliant and handles all sensitive payment data.

When you make a payment:

• Card details are transmitted directly to Stripe over encrypted channels.
• We receive only a tokenised reference — we never see or store your full card number.
• Stripe may use your data under its own Privacy Policy.

6. User accounts

Your account information is used to:

• Provide access to the platform and its features
• Send transactional email (verification, password reset, billing notifications)
• Personalise your experience and support
• Communicate important service updates

You may update your account details at any time in your profile settings, and request account deletion by contacting support.

7. Organisation data

Each organisation on EmissionsTracker Platform has an owner who manages membership and data access. We process organisation data to:

• Enable collaboration between team members in the same organisation
• Produce aggregated emissions analytics and reporting
• Manage subscription billing and licence counts at organisation level
• Enforce role-based access controls

Owners can manage sharing settings and remove members at any time.

8. Analytics

We use analytics to understand platform usage and improve the Service. This covers feature usage and user flows, performance metrics and error rates, and aggregate statistics. We do not profile individual users for advertising, and we do not sell or share your personal data with third parties for marketing purposes.

9. Data security

• Encryption: data in transit is encrypted with TLS. Sensitive data at rest is encrypted.
• Access control: role-based access controls and audit logging.
• Authentication: JWT-based authentication with token rotation and one-time-code verification.
• Monitoring: continuous monitoring and incident response.

10. GDPR compliance

For users in the European Economic Area we comply with the General Data Protection Regulation:

• Lawful basis: we process data on the basis of contractual necessity, consent or legitimate interest.
• Data minimisation: we collect only what is needed to provide the Service.
• Right to portability: you may request an export of your data in a machine-readable format.
• Right to erasure: you may request deletion of your personal data.
• Privacy enquiries: contact us at [email protected].

11. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. On account deletion:

• Account data is deleted within 30 days
• Emissions data is anonymised or deleted according to your instruction, subject to any legal hold
• Billing records are retained as required by law (typically 7 years)
• Backup copies are purged within 90 days

12. Your rights

You have the right to access your personal data, correct inaccurate data, request deletion, object to or restrict processing, receive your data in a structured format, and withdraw consent at any time.

To exercise any of these rights, contact us at [email protected].

13. Children’s privacy

EmissionsTracker Platform is not intended for use by children under 16. We do not knowingly collect personal data from children. If we become aware that we have, we will delete it promptly.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy, emailing registered users for significant changes, and updating the effective date above. Continued use of the Service after changes are posted constitutes acceptance.

15. Contact information

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Support: [email protected]
• Contact page: emissionstracker.com.au/contact-us