Privacy Policy

Carbona AI Ltd.

 

Last updated: April 27, 2026 

​

Privacy Summary 

 

Carbona AI Ltd. (“Carbona,” “we,” “us,” or “our”) provides software tools for embodied carbon analysis, calculation, decision support, benchmarking, and reporting. 

 

This Privacy Policy explains how we collect, use, disclose, retain, and protect Personal Information when you visit our website, contact us, request a demo, participate in a pilot or early adopter program, or use our software platform, tools, modules, documentation, APIs, or related services. 

 

Carbona’s Platform is intended for professional and business use by adults. It is designed for Customers and professional users, including companies, consultants, contractors, builders, code consultants, public authorities, and project teams. 

 

Because the Platform may allow Customers and Authorized Users to upload, generate, and manage project-related information, this Privacy Policy also explains how Carbona handles Customer Project Data at a high level. 

 

Customer Project Data is generally business, commercial, technical, operational, or project information, not Personal Information. However, Customer Project Data may be confidential, commercially sensitive, or proprietary to Customers.

 

This Privacy Policy should be read together with Carbona’s Terms of Use and any applicable subscription agreement, pilot agreement, early adopter agreement, data processing agreement, confidentiality agreement, or other written agreement between Carbona and a Customer. If a Customer  agreement contains more terms about Customer Project Data, confidentiality, data rights, permitted use, retention, return, deletion, hosting, or security, that agreement will apply to the extent of any conflict. 

​

1. Definitions

 

Personal Information means information about an identifiable individual. This may include a person’s name, business email address, employer, job title, account profile information, login information, usage information, support communications, and other information that identifies or can reasonably be associated with an individual. Carbona treats business contact information as Personal Information where required by applicable law. 

 

Customer means an organization, company, public authority, or other legal entity that enters into an agreement with Carbona or is otherwise authorized by Carbona to access or use the Platform, including through a pilot, early adopter program, subscription, or other approved arrangement. 

​

Project means a building, development, design, construction, sustainability, embodied carbon, life-cycle assessment, benchmarking, reporting, or related professional matter for which the Platform is used. 

 

Customer Project Data means project-related, business, technical, commercial, life-cycle, embodied carbon, or other information uploaded, generated, processed, or stored through the Platform by or for a Customer.

 

This may include Project details, quantities, estimates, embodied carbon inputs and outputs, LCA data, uploaded files, assumptions, reports, testing data, comments, feedback, and Project-specific notes. Customer Project Data may contain Personal Information. 

 

Authorized Users means employees, contractors, consultants, representatives, customer administrators, or other individuals who are authorized by a Customer to access or use the Platform. 

​

Carbona Personnel means Carbona’s employees, founders, officers, contractors, developers, platform administrators, and other authorized representatives who require access to provide, support, secure, operate, improve, or develop the Platform. 

 

Platform means Carbona’s embodied carbon software, tools, modules, workflows, algorithms, models, interfaces, APIs, documentation, and related services. 

​

Service Providers means third parties that help Carbona operate, host, secure, support, maintain, improve, or provide the Platform or related business services. 

 

2. Information We Collect 

 

Carbona may collect information directly from you, automatically through the website or Platform, from Customers, and from Authorized Users. 

 

This may include account, business contact, Customer Project Data, technical, usage, website analytics, support, and communications information needed to operate, secure, support, and improve the Platform. 

 

3. How We Use Information 

 

Carbona uses Personal Information and other information collected through the website or Platform for reasonable business purposes, including, but not limited to: 

• provide, operate, secure, support, and improve the Platform; 

• manage accounts, Authorized Users, workspaces, Projects, permissions, billing, contracts, and Customer relationships; 

• communicate service, security, account, technical, and marketing information where permitted by law; 

• monitor usage, performance, and security, including detecting misuse, unauthorized access, fraud, or security incidents; 

• comply with legal obligations, enforce agreements, and protect Carbona, Customers, users, and systems. 

 

Carbona may also use anonymized, aggregated, or de-identified information that does not identify an individual or disclose a specific Customer’s confidential Project information for analytics, product improvement, research, benchmarking, and business purposes. 

 

4. Customer Project Data and Data Separation 

 

Carbona uses Customer Project Data to provide, support, secure, validate, improve, and develop the Platform, subject to the applicable Customer agreement. 

 

Customers retain ownership of Customer Project Data. 

 

Carbona does not sell Customer Project Data, use it for unrelated advertising, or intentionally make one Customer’s Customer Project Data available to another Customer. 

 

The Platform may be used by multiple Customers and Authorized Users. Carbona uses administrative, technical, and organizational measures designed to keep Customer accounts, workspaces, Projects, files, and data logically separated, including access controls such as authentication, permissions, role-based access, secure API controls, logging, and monitoring. 

 

Authorized Users are intended to access only the accounts, workspaces, Projects, files, data, and outputs they are authorized to access. Certain account, role, Project, file, comment, and activity information may be visible within the same Customer account, organization, Project, or workspace, depending on permissions and configuration. 

 

Customers are responsible for managing their Authorized Users, permission settings, and internal access controls. 

 

5. Carbona Personnel and Service Provider Access 

 

Carbona Personnel may access Personal Information and Customer Project Data only where reasonably necessary to provide, support, secure, troubleshoot, improve, or develop the Platform; assist with onboarding; investigate misuse or security issues; comply with legal obligations; enforce agreements; or protect Carbona, Customers, users, and

systems. 

 

Carbona may share information with Service Providers, professional advisors, legal or regulatory authorities, or parties involved in a business transaction where reasonably necessary and subject to appropriate safeguards. 

 

Carbona Personnel and Service Providers with access to confidential information are expected to handle it in accordance with confidentiality obligations and applicable policies or agreements. 

 

6. AI, Automation, and Third-Party Model Providers 

 

Carbona may use AI, automation, cloud services, or third-party model providers to provide, support, validate, improve, or develop the Platform. 

 

Where these Service Providers process Personal Information or Customer Project Data, they may do so only as reasonably necessary to provide the Platform and related services, subject to Carbona’s agreements with Customers and Service Providers. 

 

Carbona does not permit third-party AI service providers to use Customer Project Data to train general-purpose models unless expressly agreed with the applicable Customer. Where practical, Carbona uses aggregated, anonymized, or de-identified information for product improvement, validation, benchmarking, analytics, or development. 

 

7. Cookies and Analytics 

 

Carbona may use cookies and similar technologies on its website and Platform to operate the website and Platform, maintain sessions and user preferences, support account security, understand website traffic, improve website and Platform performance, detect errors or security issues, and measure interest in Carbona’s services. 

 

You may be able to disable cookies through your browser settings. Some website or Platform features may not function properly if cookies are disabled. 

 

Carbona does not use Customer Project Data for advertising. 

 

8. Data Hosting, Security, and Retention 

 

Carbona may store and process information in Canada, the United States, or other jurisdictions where Carbona or its Service Providers operate. Where agreed in writing, Carbona may provide an option to host Customer Project Data in Canada. 

 

Information stored or processed outside Canada may be subject to the laws of that jurisdiction and accessible to courts, law enforcement, regulators, or government authorities as permitted by law. 

 

Carbona uses reasonable safeguards as needed to protect Personal Information and Customer Project Data, including access controls, encryption where appropriate, monitoring, secure hosting, backups, and confidentiality obligations. 

 

No system can be guaranteed completely secure. Customers and Authorized Users are responsible for protecting login credentials and managing access to their accounts and workspaces. 

 

Carbona retains information for as long as reasonably necessary to provide the Platform, comply with agreements and legal obligations, maintain security, resolve disputes, and preserve business records. When information is no longer reasonably required, Carbona will delete, anonymize, or securely retain it until deletion is practical, subject to applicable law and Customer agreements. 

 

9. Customer Responsibilities 

 

Customers are responsible for ensuring that they have the right to upload and use Customer Project Data, managing Authorized Users and permissions, avoiding the upload of unnecessary Personal Information, and notifying Carbona of suspected unauthorized access or misuse. 

 

Additional Customer responsibilities may be set out in Carbona’s Terms of Use or the applicable Customer agreement. 

 

10. Privacy Rights 

 

Carbona is based in Canada and handles Personal Information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) where applicable, and provincial private-sector privacy laws where they apply. 

 

Subject to applicable law, individuals may have the right to access, correct, delete, or ask about their Personal

Information; withdraw consent where permitted; and make a privacy complaint. 

 

To make a privacy request, contact us using the details in the “Contact Us” section below. We may need to verify your identity before responding to a request. If your Personal Information is controlled by one of our Customers, we may direct you to contact that Customer or may coordinate with that Customer to respond. 

 

11. Marketing, Children, and Third-Party Links 

 

Carbona may send marketing communications about its products, services, early access opportunities, webinars, newsletters, or related updates where permitted by law. You may unsubscribe from marketing communications at any time, although Carbona may still send transactional, administrative, account, security, legal, and service-related communications. 

 

Carbona’s website and Platform are intended for professional and business use by adults. Carbona does not knowingly collect Personal Information from children or minors. 

 

Carbona’s website or Platform may contain links to third-party websites, tools, resources, or integrations. This Privacy Policy does not apply to third-party services, and Carbona is not responsible for their privacy practices, content, or security. 

 

12. Customer Agreements and Changes to This Policy 

 

Customer Project Data may be subject to confidentiality obligations under a separate agreement between Carbona and the Customer. 

 

Where a Customer agreement includes terms relating to data ownership, permitted use, confidentiality, return, deletion, platform improvement, intellectual property, security, data hosting, or retention, those terms will apply in addition to this Privacy Policy. 

 

Nothing in this Privacy Policy transfers ownership of Customer Project Data to Carbona. 

 

Carbona may update this Privacy Policy from time to time. The updated version will be posted on Carbona’s website with a revised “Last updated” date. If we make material changes, we may provide additional notice where required by law or where we consider it appropriate. 

 

13. Contact Us 

 

If you have questions about this Privacy Policy, Carbona’s privacy practices, or if you wish to make a privacy request, please contact: info@carbona-ai.com