Privacy Policy

Last updated: May 16, 2026

This Privacy Policy describes how CarbonReady ("we", "us", "our"), operated by Tribe Metrics LLC, collects, uses, and shares information when you use our website and services.

1. Information We Collect

• Account & purchase data: name, email, billing details (processed by Stripe; we do not store full card numbers).
• Survey responses: the business details you submit to generate your report (e.g., NAICS, state, revenue figures).
• Usage data: pages visited, IP address, browser type, and similar technical telemetry collected via cookies and Sentry error monitoring.

2. How We Use Information

• To generate, deliver, and improve your reports.
• To process payments and manage your account.
• To send transactional and product communications.
• To detect, prevent, and address fraud or abuse.
• To analyse and improve the Service.

3. How We Share Information

• Service providers: Stripe (payments), Supabase (database/hosting), Anthropic (AI report generation), Sentry (error monitoring), GoHighLevel (email delivery), Vercel (hosting). We use only the minimum data each provider needs.
• Legal compliance: when required by law, subpoena, or to protect the rights and safety of our users.
• Business transfer: in connection with a merger, acquisition, or sale of assets.

4. Data Retention

We retain account and report data for as long as your account is active, plus up to 7 years for tax and audit purposes. You may request deletion of survey responses and reports at any time.

5. Your Rights

Depending on where you live (e.g., California, EU, UK), you may have rights to access, correct, delete, or port your personal information, and to opt out of certain processing. Contact us to exercise these rights.

6. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children.

7. Cookies

We use first-party cookies for authentication and a minimal set of third-party cookies for error monitoring and analytics. You can control cookies via your browser settings.

8. International Transfers

We operate in the United States. If you access the Service from outside the US, you consent to your information being processed in the US.

9. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest), least-privilege access controls, and audit logging. No system is perfectly secure; we cannot guarantee against all risks.

10. Changes

We will post any changes to this Policy at this URL with an updated effective date.

11. Contact

Privacy questions: privacy@carbonready.com.