Privacy Policy
CGPT Consulting Sdn Bhd Privacy Policy
1. Introduction
At Carbon GPT, we prioritize your privacy and the protection of your personal data. This Privacy Policy outlines how we handle the data we collect from you as part of our Greenhouse Gas (GHG) reporting and accounting services, ESG reporting services, and any of our consultation and training services. Our commitment to privacy aligns with our core values and ensures compliance with applicable laws, including PDPA in Malaysia and GDPR.
2. Scope of the Policy
This Privacy Policy applies to all users of Carbon GPT’s services, including but not limited to GHG reporting, ESG reporting, consultation, and training services. It also covers interactions through our website, associated applications, social media platforms, and third-party platforms.
3. Information We Collect
We collect a variety of data to provide and improve our services, including:
-
Personal Information: Such as your name, email address, phone number, and payment details, which you provide voluntarily.
-
Company Data: Including Organization Boundary, Emission Sources, Emission Activities, and other sustainability-related metrics necessary for generating reports.
-
Automatically Collected Information: Such as IP addresses, browser types, and site usage data, collected through cookies and similar technologies.
-
AI Conversations: Any interaction between you and our AI systems.
4. How We Use Your Information
We use the data we collect for the following purposes:
-
To fulfill our contractual obligations and provide our services.
-
To perform data validation and environmental impact measurement using aggregated and anonymized data.
-
To improve our services, including analyzing user behavior and preferences.
-
To communicate with you regarding updates, inquiries, and marketing communications.
-
To comply with legal obligations, including sharing aggregated, anonymized data with government regulatory bodies or financial institutions.
5. AI Conversations and Data Usage
Any conversation between you and our AI systems will be stored and managed solely by Carbon GPT. These conversations will not be shared with or used by the AI model providers (e.g., OpenAI, Llama, Groq, Mistral) to train their data. Carbon GPT uses different AI models for different use cases, but all data remains within our control and will be managed according to this Privacy Policy.
6. Security Measures
We are committed to ensuring the security of your data. Carbon GPT complies with ISO 27001 standards, implementing advanced security protocols to protect your data from unauthorized access, alteration, or destruction.
7. Retention of Your Information
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy. However, company data related to GHG and ESG reporting will be retained indefinitely unless you request its deletion.
8. Children’s Privacy
Our products and services are not marketed or sold to children. We do not knowingly collect data from children under 13, and if such data is inadvertently collected, we will delete it promptly.
9. Your Rights
We respect your rights under PDPA in Malaysia and GDPR, providing you with the ability to:
-
Access: Request a copy of the personal data we hold about you.
-
Correction: Request corrections to inaccurate or incomplete data.
-
Deletion: Request deletion of your data, subject to certain legal exceptions.
-
Objection: Object to the processing of your data in specific circumstances.
-
Data Portability: Request the transfer of your data to another organization in a machine-readable format.
10. International Data Transfers
Your data may be transferred to and processed in countries outside your own, such as Singapore and Malaysia. We ensure that such transfers comply with applicable data protection laws and that your data remains protected.
11. Business Data Rights and Usage
Unless otherwise agreed, you grant Carbon GPT a simple, transferable, sublicensable right to use the data you provide for the following purposes:
-
Contractual Obligations: To fulfill our contractual obligations to you.
-
Data Validation and Measurement: To perform data validation and environmental impact measurement, provided the data is anonymized and aggregated.
-
Service Improvement: To improve our services.
-
Regulatory Compliance: To share data with government regulatory bodies or financial institutions, in an aggregated, anonymized form.
12. Contract Activation
A contract between Carbon GPT and the user is considered entered into once Carbon GPT activates the user’s account following account creation, or when the user accepts a specific written offer by Carbon GPT to conclude a contract.
13. Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in our services or legal requirements. Significant updates will be communicated to you, and you will have the opportunity to opt in or out of new uses of your data.
14. Contact Us
For any questions or concerns about this Privacy Policy, please contact us at privacy@carbongpt.ai.