Privacy Policy

CGPT Consulting Sdn Bhd Privacy Policy

1. Introduction

At Carbon GPT, we prioritize your privacy and the protection of your personal data. This Privacy Policy outlines how we handle the data we collect from you as part of our Greenhouse Gas (GHG) reporting and accounting services, ESG reporting services, and any of our consultation and training services. Our commitment to privacy aligns with our core values and ensures compliance with applicable laws, including PDPA in Malaysia and GDPR.

2. Scope of the Policy

This Privacy Policy applies to all users of Carbon GPT’s services, including but not limited to GHG reporting, ESG reporting, consultation, and training services. It also covers interactions through our website, associated applications, social media platforms, and third-party platforms.

3. Information We Collect

We collect a variety of data to provide and improve our services, including:

  • Personal Information: Such as your name, email address, phone number, and payment details, which you provide voluntarily.

  • Company Data: Including Organization Boundary, Emission Sources, Emission Activities, and other sustainability-related metrics necessary for generating reports.

  • Automatically Collected Information: Such as IP addresses, browser types, and site usage data, collected through cookies and similar technologies.

  • AI Conversations: Any interaction between you and our AI systems.

4. How We Use Your Information

We use the data we collect for the following purposes:

  • To fulfill our contractual obligations and provide our services.

  • To perform data validation and environmental impact measurement using aggregated and anonymized data.

  • To improve our services, including analyzing user behavior and preferences.

  • To communicate with you regarding updates, inquiries, and marketing communications.

  • To comply with legal obligations, including sharing aggregated, anonymized data with government regulatory bodies or financial institutions.

5. AI Conversations and Data Usage

Any conversation between you and our AI systems will be stored and managed solely by Carbon GPT. These conversations will not be shared with or used by the AI model providers (e.g., OpenAI, Llama, Groq, Mistral) to train their data. Carbon GPT uses different AI models for different use cases, but all data remains within our control and will be managed according to this Privacy Policy.

6. Security Measures

We are committed to ensuring the security of your data. Carbon GPT complies with ISO 27001 standards, implementing advanced security protocols to protect your data from unauthorized access, alteration, or destruction.

7. Retention of Your Information

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy. However, company data related to GHG and ESG reporting will be retained indefinitely unless you request its deletion.

8. Children’s Privacy

Our products and services are not marketed or sold to children. We do not knowingly collect data from children under 13, and if such data is inadvertently collected, we will delete it promptly.

9. Your Rights

We respect your rights under PDPA in Malaysia and GDPR, providing you with the ability to:

  • Access: Request a copy of the personal data we hold about you.

  • Correction: Request corrections to inaccurate or incomplete data.

  • Deletion: Request deletion of your data, subject to certain legal exceptions.

  • Objection: Object to the processing of your data in specific circumstances.

  • Data Portability: Request the transfer of your data to another organization in a machine-readable format.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your own, such as Singapore and Malaysia. We ensure that such transfers comply with applicable data protection laws and that your data remains protected.

11. Business Data Rights and Usage

Unless otherwise agreed, you grant Carbon GPT a simple, transferable, sublicensable right to use the data you provide for the following purposes:

  • Contractual Obligations: To fulfill our contractual obligations to you.

  • Data Validation and Measurement: To perform data validation and environmental impact measurement, provided the data is anonymized and aggregated.

  • Service Improvement: To improve our services.

  • Regulatory Compliance: To share data with government regulatory bodies or financial institutions, in an aggregated, anonymized form.

12. Contract Activation

A contract between Carbon GPT and the user is considered entered into once Carbon GPT activates the user’s account following account creation, or when the user accepts a specific written offer by Carbon GPT to conclude a contract.

13. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our services or legal requirements. Significant updates will be communicated to you, and you will have the opportunity to opt in or out of new uses of your data.

14. Contact Us

For any questions or concerns about this Privacy Policy, please contact us at privacy@carbongpt.ai.