Privacy Policy

Last modified: November 2023

Introduction

Here at CarbonReach (referred to in this policy as “CarbonReach,” “Carbon Reach,” “Carbon Reach LLC,” “we,” “us,” or “our”), we believe privacy is important and remain committed to keeping your information secure. This Privacy Policy (“Policy”) explains our practices with respect to Personal Information and choices you can make about the way your information is collected and used as it relates to:

  • Individuals – referred to in this policy as “you” or “your”;
  • Our Platform – data products and services including without limitation, Portal and Campaigns, that we provide to our Customers (the “Platform”);
  • Our website, https://carbonreach.io (the “Site” or “Website”);
  • Our customers – entities that use our Platform (“Customers”); and
  • Our partners – third-party entities that collect information from individuals like you and supply that information to us in various data sets, allowing us to assist our Customers (the “Partners”).

For purposes of this Privacy Policy, we use the term Personal Information to mean information that identifies or that can be reasonably be linked to an actual natural person (one that is a real, named human being). Examples of Personal Information include, without limitation, your name, address, social security number, company name, telephone number, billing information and email address.

By visiting our Site, you agree that your information will be handled in accordance with this Policy.

What We Do

At CarbonReach we provide our customers the ability to get better insights from data we collect from our Partners and digital advertising platforms, by managing, visualizing and analyzing data through our Application Programming Interfaces (APIs), machine learning models, and interactive platforms.

Our Platform

Customers use our self-serve Platform console to purchase digital ads programmatically using Real Time Bidding (RTB) technology to launch advertisements and collect ad-impressions data and Software as a Service (SaaS) portal to query, analyze, and visualize mobility data from our Partners.

Information We Collect About You

When you visit our Website, we collect the information you may input when interacting with our website via submitting Data Subject Access and Deletion Request Forms, demo requests, or contact us through the website. e. In these instances, we may collect your first and last name, email address, company name, title, device ID, and any additional comments you provide. We also collect usage data such as IP Address, operating system, dates and times of access or browser type.

CarbonReach collects and processes information we receive from our Partners. Data received from our Partners include Personal Information to include Apple’s Identifier for Advertisers (IDFA) or a Google Advertising ID (Advertising ID/Ad ID). This information may also include IP Address, Device User Agent data (device type; browser family; browser version; operating system; device model number; carrier), and geographical indicators such as latitude and longitude.

We collect the following information through our campaigns advertisements and use it to provide aggregated campaign analytics to our Customers:
While providing advertising services to our Customers, CarbonReach collects information through campaign advertisements and measure the effectiveness of ads on behalf of Customers. In the process of providing targeted ads and delivering performance, we provide aggregated reports that may include domain type, browser, operating system, device language, internet service provider, IP address, and user behaviors including whether you viewed an ad, clicked on an ad, and how you interacted with our Customer’s web sites.

We collect the following information from you (or on your behalf) when you use our platform:
CarbonReach collects user data and usage data on our Customers to ensure we are providing optimal service. User data includes your name and email address provided by you or your Company to CarbonReach to create an account to access our Platform. Usage data is collected when you’re accessing or using our Platform and includes information such as login/logout time, usage time, and number of queries.

Security, Data Retention, and Data Sharing

Security

CarbonReach takes security of data very seriously. We have implemented industry standard security measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure and employ a variety of appropriate technical and organizational security measures designed to ensure the security of our Products. All information you provide to us is stored on our secure servers behind firewalls. We take commercially reasonable measures to protect your data.

Given the nature of technology, no electronic transmission over the internet or information storage technology can guarantee your information will be 100% secure. To best protect your personal information, access and use of our services is at your own risk and you should only access the Site or Platform in a secure environment.

Data Retention

CarbonReach retains your data for as long as necessary to comply with our legal and contractual obligations, enforce our agreements, and enable us to investigate events and resolve disputes. We retain web log data for up to one year. Aggregated data which cannot identify a device or browser (or individual) is used for the purposes of reporting and analysis, is maintained for as long as commercially necessary. Further, we may retain such data for a longer period to the extent it is required for a legal or significant operational purpose, such as for compliance, recordkeeping, auditing, safety and security, and error or bug prevention.

Data Sharing

Customers may publish or otherwise make public anonymous, aggregate, or summary information regarding Platforms for various reasons including movement analytics, risk and security management, public health, law enforcement and national security. Customers may also resell your information to other third parties for the same purposes. In some circumstances, we may also disclose information we collect to third party vendors, service providers, and contractors or agents who perform functions on our behalf.

These also may be instances when we may need to disclose visitor information to protect the legal rights of CarbonReach or its employees, agents, or to protect the safety and security of our website; protect against fraud; or to comply with law or legal process. If we sell all or part of the business or make a sale or transaction of assets or are otherwise involved in a merger or business transfer, we may transfer visitor information to a third party as part of that transaction.

European Territory Individuals

CarbonReach provides specific additional rights for European Territory citizens who interact with us. In accordance with the European General Data Protection Regulation (“GDPR”), “European Territories” means the European Economic Area (EEA), the European Free Trade Area (EFTA), and Switzerland. Additionally, for purposes of this Privacy Policy, the term “European Territories” will continue to include the United Kingdom.

Such additional rights include:

  • The right to request information about whether and which personal data is processed by us, and the right to demand that personal data is rectified or amended.
  • The right to request that personal data should be deleted.
  • The right to demand that the processing of personal data should be restricted.
  • Withdraw your consent to the processing and use of your data completely or partially at any time with future application.
  • Have the right to obtain your personal data in a common, structured and mechanically readable format.
  • Contact our privacy representative if there are any questions, comments, complaints or requests in connection with our statement on data protection and the processing of your personal data.
  • The right to complain to the responsible supervisory authority if you believe that the processing of your personal data is in violation of the legislation.

State Privacy Rights

Various states in the United States have passed state specific privacy laws such as Connecticut, California, Virginia, Utah and Colorado. As a resident in one of these states, you may have additional rights under local law.

Such rights may include:

  • The right to request access to the information CarbonReach collects and retains about you.
  • The right to request CarbonReach corrects or amends your Personal Information in the event your information is inaccurate.
  • The right to request CarbonReach does not process or retain your Personal Information any further and that any information we have, is deleted.
  • The right to opt out at any time of targeted advertising, sharing or selling your Personal Information.

Children

None of our services are directed at children under 16. We do not knowingly collect personal data from anyone under 16 years of age. If we determine upon a reasonable review that a User is under 16, we will not use or maintain their personal data. If we become aware that we have unknowingly collected personal data from a child under the age of 16, we will make reasonable efforts to delete such information from our records.

Changes To This Policy

We reserve the right to modify this Privacy Policy at any time in accordance with applicable law. If we do so, we will post the revised Privacy Policy and update the “Last modified” date at the top of this page. Therefore, you should review this page periodically so that you are up to date on our most current policies and practices. If you do not agree with the revised Privacy Policy, you may cancel your User Account. If you do not cancel your User Account before the date the revised Privacy Policy becomes effective, your continued access to or use as any of the CarbonReach User Types (as defined above) will be subject to the revised Privacy Policy.

Consumer Choice

Site users may follow the Data Subject Access and Deletion Request Form here to submit a request for any data collected on them by CarbonReach and prevent further collection of Site Visitor or Usage Data by CarbonReach on the website, https://carbonreach.io.

Additionally, we implement contractual safeguards and terms that flow down from such first party data providers reflecting an individual’s affirmative action to opt into processing of their data. Meaning, the data providers we are in agreement to purchase data from have agreed to only provide user data of individuals who have opted into the collection and use of their data for processing purposes. In the event an individual retracts their consent to a first party data provider we are in agreement with, CarbonReach will receive notice of an individual’s retraction and remove information associated with the Device ID as provided by the first party data provider.

Individuals may also follow the Data Subject Access and Deletion Request Form here to prevent any further processing of Personal Information associated with their Device ID.

Further, CarbonReach remains committed to the additional rights provided under GDPR and certain US state privacy laws. As we do not collect Personal Information, we do not maintain a process for an individual to review or request changes to their Personal Information. However, we welcome any questions, comments or concerns regarding these rights by contacting us at privacy@carbonreach.io.

How To Contact Us

We regularly review our compliance with this Privacy Policy. Questions, comments, and requests regarding this Privacy Policy are welcomed and should be addressed to:

privacy@carbonreach.io
or by mail to
CarbonReach LLC., Attn: Privacy Team
6940 Columbia Gateway Dr. Suite 110
Columbia, MD 21046