CarbonSuite Privacy Policy

Last modified: October 2, 2025

INTRODUCTION

CarbonSuite Inc. (“CarbonSuite”, “we” or “our”) respect your privacy and are committed to protecting it by complying with this policy.

This policy describes:

The types of information we may collect or that users (including organizations and individuals) (“you” or “your”) may provide in connection with the CarbonSuite’s websites, applications, products and services (the “C-Suite”).

Our practices for collecting, using, maintaining, protecting, and disclosing that information.

We will only use personal information in accordance with this policy unless otherwise required by applicable law. We take steps to ensure that the personal information that we collect is adequate, relevant, not excessive, and used for limited purposes.

This policy applies only to information we collect in the course of providing the C-Suite to you and in email and other electronic communications sent through or in connection with the C-Suite.

This policy DOES NOT apply to information that:

we collect offline or on any other apps or websites, including websites you may access through the C-Suite; and

you provide to or is collected by any third party (see Third-Party Information Collection).

These third parties may have their own privacy policies, which we encourage you to read before providing information on or through them.

Please read this policy carefully to understand our policies and practices for collecting, processing, and storing your information. If you do not agree with our policies and practices, do not download, register with, or use [any of] the C-Suite. By downloading, registering with, or using the C-Suite, you indicate that you understand, accept, and consent to the practices described in this policy. This policy may change from time to time (see Changes to Our Privacy Policy). In all cases, your continued use of the C-Suite after we make changes indicates that you accept and consent to those changes, and have obtained any necessary consents required with respect to personal information collected by us in connection with the C-Suite, so please check the policy periodically for updates. With respect to your use of the CarbonSuite application, we will notify you in advance of any material changes to this policy.

INFORMATION WE COLLECT ABOUT YOU

The types of information that we collect include:

Personal information that we can reasonably use to directly or indirectly identify an individual, such as:

an individual’s first name and last name, including those for the Company’s employees, vendors, and Client Organization employees, customers or other personnel;
residential addresses of Client Organization employees;
usernames or other similar identifiers;
email addresses and internet protocol (IP) addresses;
details related to energy consumption, commuting patterns, vehicle information of Client Organization employees and any other data required to calculate employees’ environmental impact
other data of sensitive and/or confidential nature, such as the Hash version of passwords and SMTP credentials.

Business-related information, namely information that related to your business duties, including, but not limited to:

business address;
business email address;
business telephone number;
customer names of user organizations that are not individuals;
vendors of user organizations that are not individuals;
subsidiary names of user organizations duties;
activity data (e.g., an energy bill) of user organizations; and
financial transaction details that do not contain personal information.
employee or other personnel positions at user organization;
names of products and services bought and sold by user organization

Non-personal information that does not directly or indirectly reveal your identity or directly relate to an identified individual, including, but not limited to, financial account names, financial transaction details (including dates, amounts, category (as defined by user organization) and accounts), assets of user organization, departments of user organization, physical location(s) of user organization, and projects and files of user organizations uploaded for reports and other topics. We may derive non-personal statistical or aggregated data from personal information. For example, we may aggregate personal information to calculate the percentage of users accessing a specific app feature.

Technical information, including, but not limited to, your login information, SMTP credentials, device type, time zone setting, and usage details.

HOW WE COLLECT INFORMATION ABOUT YOU

We collect information about you through:

Direct interactions with you when you provide it to us, for example, by filling in forms, user submissions or corresponding with us, including, but not limited to, through live chat or other communication with CarbonSuite personnel or automated/AI agents.

Automated technologies or interactions, when you use the C-Suite, for example, usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.

Third parties or publicly available sources, for example, CarbonSuite’s business partners.

Information You Provide to Us

When you download, register with, or use the C-Suite, we may ask you to provide:

Information by filling in forms and surveys in the C-Suite. This includes information you provide when registering to use the C-Suite, managing your C-Suite account, configuring the settings of your applications, products and services, providing necessary consents to access data in connection with the C-Suite, and requesting further applications, products and services. We may also ask you for information when you report a problem with the C-Suite.

Records and copies of your correspondence, including email addresses and phone numbers, if you contact us.

Details of transactions you carry out in connection with the C-Suite. You will be required to provide financial information for CarbonSuite to collect the necessary data to provide its services.

Details of non-financial transactions you carry out in connection with the C-Suite. You will be required to provide non-financial information, such as emissions data, energy consumption, water consumption, waste generation, and other information related to your Environmental, Social, and Governance reporting.

Personal information of members, vendors, customers, and other entities affiliated with user organizations to whom such user organizations send invitations to contribute information to the C-Suite.

Your search queries on the C-Suite.

Automatic Information Collection and Tracking Technologies

As you download, access, and use the C-Suite or its products and services, it may automatically collect:

Usage details. When you access and use the C-Suite, we may automatically collect certain details of your access to and use of the C-Suite, including location data, logs, and other communication data and the resources that you access and use on or through the C-Suite.

Device information. We may collect information about your device and internet connection, including the device’s unique device identifier, IP address, operating system, browser type, mobile network information, and the device’s telephone number.

Stored information and files. The C-Suite may access metadata and other information associated with other files stored on your device. This may include, for example, date/time, location, and device information.

Location information. The C-Suite may collect real-time information about the location of your device.

The technologies we use for this automatic data collection may include:

C-Suite Software. Data and analytics reports.

Cookies. A cookie is a small file placed on your device. It may be possible to refuse to accept cookies by activating the appropriate setting on your device. However, if you select this setting you may be unable to access certain parts of the C-Suite. Unless you have adjusted your setting so that it will refuse cookies, CarbonSuite’s system will issue cookies when you direct your browser to the C-Suite.

Flash Cookies. Certain features of the C-Suite may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on the C-Suite. Flash cookies are not managed by the same browser settings that are used for browser cookies. For information about managing your privacy and security settings for Flash cookies, see Choices About How We Use and Disclose Your Information.

Web beacons. Pages of the C-Suite may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit the CarbonSuite, for example, to count users who have visited those pages and for other related product and services statistics (for example, recording the popularity of certain product and services and verifying system and server integrity).]

The information we collect automatically is statistical data and may include personal information. We may maintain it or associate it with personal information we collect in other ways, that you provide to us, or receive from third parties. This usage information helps us to improve the C-Suite and to deliver a more personalized service, including by helping us to:

Estimate usage patterns.

Store information about your preferences and customize the C-Suite according to your individual interests and broader patterns of interest.

If you do not want us to collect this information do not download, access or use the C-Suite. For more information, see Choices About How We Use and Disclose Your Information.

Third-Party Information Collection

When you use the C-Suite or its content, certain third parties collect information about you or your device. These third parties include:

Oracle

Amazon

Google

Microsoft

Atlassian

Hubspot

These third parties may use cookies alone or in conjunction with other tracking technologies to collect information about you when you use the C-Suite. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites, apps and other online services. They may use this information to provide you with behavioural advertising or other targeted content.

You can opt-out of several third-party ad servers’ and networks’ cookies simultaneously. If you live in Canada, you can use an opt-out tool created by the Digital Advertising Alliance of Canada. You can also access these websites to learn more about online behavioural advertising and how to stop websites from placing cookies on your device. Opting out of a network does not mean you will no longer receive online advertising. It does mean that the network from which you opted out will no longer deliver ads tailored to your web preferences and usage patterns.

We do not control these third parties’ tracking technologies or how they use them. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For more information about how you can opt out of receiving targeted advertising from many providers, see Choices About How We Use and Disclose Your Information.

HOW WE USE YOUR INFORMATION

We use information that we collect about you or that you provide to us, including any personal information:

To provide you with the C-Suite and its offerings.

To provide you with information, products or services that you request from us, or that may be of interest.

To fulfill the purposes for which you provided it or that were described when it was collected or any other purpose for which you provide it.

To carry out our obligations and enforce our rights in any contracts with you, including for billing and collection or to comply with legal requirements.

To notify you when updates to the C-Suite are available, and of changes to any products or services we offer or provide though it.

To improve the C-Suite, products or services, or customer relationships and experiences.

For any other purpose with your consent.

Usage information that we collect helps us to improve the C-Suite and to deliver a better and more personalized experience, including by enabling us to:

Estimate usage patterns; and

Store information about your preferences, allowing us to customize the C-Suite according to your individual interests and broader patterns of interest.

We may use location information we collect to determine environmental impact, for example, the carbon footprint of any travel associated with you.

For more information, see Choices About How We Use and Disclose Your Information.

DISCLOSURE OF YOUR INFORMATION

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this privacy policy:

To our affiliates.

According to applicable law, to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of CarbonSuite Inc.’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by CarbonSuite Inc. about our customers and users is among the assets transferred.

To contractors, service providers, and other third parties we use to support our business, such as analytics and search engine providers that help us optimize and improve our services. We contractually require these third parties to keep personal information confidential, use it only for the purposes for which we disclose it to them, and to process personal information following the same standards set out in this policy.

To fulfill the purpose for which you provide it.

For any other purpose we disclose when you provide the information.

With your consent.

To comply with any court order, law, or legal process, including to respond to any government or regulatory request, according to applicable law.

To enforce our rights arising from any contracts between you and us, including the C-Suite, terms of sale (per the End User Licence Agreement), and for billing and collection.

If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of CarbonSuite Inc., our customers, or others. This includes exchanging information with other companies and organizations for fraud prevention and credit risk reduction.

TRANSFERRING YOUR PERSONAL INFORMATION

We may transfer personal information that we collect or that you provide us to contractors, service providers, and other third parties we use to support the C-Suite (such as analytics providers that assist us with improvements and optimization of the C-Suite) and who are contractually obligated to keep personal information confidential, to use it only for the purposes for which we disclose it to them, and to process the personal information with the same standards set out in this policy.

We may process, store, and transfer your personal information in and to other countries with different privacy laws that may or may not be as comprehensive as Canadian law. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of that country may be able to obtain access to your personal information. Whenever we engage a service provider, we require that its privacy and security standards comply with this policy and applicable Canadian laws.

By submitting your personal information or engaging with the C-Suite, you consent to this transfer, storage, or processing.

CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION

We strive to provide you with choices regarding the personal information that you provide to us. We have created mechanisms to provide you with the following control over your information:

Account Information. You can manage the information you provide to us through your account in connection with the C-Suite. You may add, delete or update information at any time.

Cookie Preferences. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, some parts of the C-Suite may not be accessible or may not function properly. For more information about tracking technologies, see Automatic Information Collection and Tracking Technologies.

DATA SECURITY

The security of your personal information is very important to us. We use physical, electronic, and administrative measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. We store all information you provide to us behind firewalls on our secure servers. Any sensitive information will be encrypted at rest.

The safety and security of your information also depends on you. Where we have given you (or you have chosen) a password for access to certain parts of the C-Suite, you are responsible for keeping it confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the Internet and mobile platforms is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted through the C-Suite. Any transmission of personal information is at your own risk. We are not responsible for circumvention of the C-Suite privacy settings or security measures.

DATA RETENTION

Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Under some circumstances we may anonymize or aggregate your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes. By law you have the right to request access to and to correct the personal information that we hold about you.

You can review and change your personal information by logging into your account on the C-Suite and visiting your account profile page.

If you want to review, verify, correct, or withdraw consent to the use of your personal information you may also send us an email at [●] to request access to, correct, or delete any personal information that you have provided to us. [We cannot delete your personal information except by also deleting your user account.] We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. [We may charge you a fee to access your personal information, however, we will notify you of any fee in advance.]

We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal information that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, erased, or made your personal information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

We will provide access to your personal information, subject to exceptions set out in applicable privacy legislation. Examples of such exceptions may include:

Information protected by solicitor-client privilege.

Information that is part of a formal dispute resolution process.

Information that is about another individual that would reveal their personal information or confidential commercial information.

Information that is prohibitively expensive to provide.

If you are concerned about our response or would like to correct the information provided, you may contact our Data Privacy Officer at Poyan.jadidian@carbon-suite.com or info@carbon-suite.com.

WITHDRAWING YOUR CONSENT

Where you have provided your consent to the collection, use, and transfer of your personal information, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us at info@carbon-suite.com. Please note that if you withdraw your consent, we may not be able to provide you with a particular product or service. We will explain the impact to you at the time to help you make your decision.

CHANGES TO OUR PRIVACY POLICY

We may update our privacy policy from time to time. It is our policy to post any changes we make to our privacy policy on this page with a notice that we have updated the privacy policy. If we make material changes to how we treat our users’ personal information, we will post the new privacy policy on this page with a notice that the privacy policy has been updated and notify you to the primary email address specified in your account.

We include the date the privacy policy was last revised at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting this privacy policy to check for any changes.

CONTACT INFORMATION AND CHALLENGING COMPLIANCE

We welcome your questions, comments, and requests regarding this privacy policy and our privacy practices. Please contact us at:

CarbonSuite Inc.

Data Privacy Officer: Poyan Jadidian, Poyan.jadidian@carbon-suite.com OR info@carbon-suite.com

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information and our compliance with this policy and with applicable privacy laws. To discuss our compliance with this policy, please contact our Data Privacy Officer using the contact information listed above.