Privacy Policy

Effective Date: [Date]  |  Last Updated: [Date]

1. Who We Are

GHGCalculate (ghgcalculate.com) is operated by Jonas Dalgaard Nielsen, a private individual based in Ontario, Canada. GHGCalculate is not an incorporated company — it is a platform made available by a private individual to help organizations and individuals estimate their greenhouse gas emissions. Jonas Dalgaard Nielsen is the data controller responsible for personal information collected through the Platform.

Contact for privacy matters: contact@ghgcalculate.com

2. What Information We Collect

Information you provide directly:

• Account information: username, email address, company name, NAICS sector classification
• Emissions data: activity descriptions, quantities, units, and emission estimates you enter into the Platform
• Communications: any messages you send us by email

Information collected automatically:

• Session data: login timestamps and session duration (used for account security and the 12-hour session expiry)
• Last-seen timestamps: the time of your most recent Platform activity (used for aggregate analytics visible to the platform operator only)
• Server logs: IP address, browser type, pages visited — retained briefly for security and diagnostic purposes

We do not collect payment card data, government identification, or sensitive personal information as defined under PIPEDA.

3. How We Use Your Information

We use your information to provide and operate the Platform, manage your account, send transactional emails (verification, password resets), and respond to inquiries. We do not use your emissions data for purposes other than providing the Platform to you, and we do not use your personal information for automated decision-making or profiling.

4. Data Sharing and Third Parties

We do not sell your personal information. We share data only with:

• Hosting infrastructure: Hetzner Online GmbH (EU), subject to appropriate data transfer safeguards
• Email delivery: Zoho Mail — only your email address is shared for transactional emails
• Legal requirements: where required by law, court order, or to protect safety

5. Data Retention

Account information and emissions data are retained for the life of your account, plus 30 days after deletion. Email verification and password reset tokens expire within 30–60 minutes and are then deleted. Server logs are retained for up to 30 days. Sessions expire after 12 hours of inactivity.

6. Your Rights Under PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access, correct, or request deletion of your personal information. To exercise any of these rights, contact us at contact@ghgcalculate.com. We will respond within 30 days.

7. Cookies and Sessions

The Platform uses a single strictly necessary session cookie to keep you logged in. It expires after 12 hours of inactivity, does not track you across other websites, and is not used for advertising. We do not use analytics cookies or third-party tracking technologies.

8. Security

We implement reasonable security measures including password hashing (PBKDF2/SHA-256), HTTPS for all connections, email verification for new accounts, and 12-hour session expiry. No method of transmission or storage is 100% secure. In the event of a data breach, we will notify affected users and, where required, the Office of the Privacy Commissioner of Canada.

9. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy periodically. For material changes, we will notify you by email. Continued use of the Platform after any update constitutes acceptance of the revised Policy.

11. Contact and Complaints

For privacy questions: contact@ghgcalculate.com

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada: priv.gc.ca  |  1-800-282-1376