Privacy Policy

Last Updated: November 15, 2025

At Env, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our website, applications, and sustainability management services. Please read this policy carefully.

Table of Contents

1. Information We Collect

We collect information to provide, improve, and secure our sustainability tracking platform and related services.

1.1 Information You Provide

  • Account Details: Name, email address, phone number, and organization name when you register.
  • Environmental Data: Sustainability metrics, carbon footprint data, energy consumption logs, and supply chain information you voluntarily upload or integrate via our API.
  • Communication: Messages, support requests, and feedback you send to us.

1.2 Information Automatically Collected

  • Usage Data: IP address, browser type, device information, pages visited, and time spent on our platform.
  • Log Data: Server logs, access times, and request URLs for security and performance optimization.

2. How We Use Your Information

We use the collected information to:

  • Provide, operate, and maintain our environmental monitoring and reporting services.
  • Generate ESG reports, compliance documentation, and sustainability dashboards.
  • Improve our AI-driven analytics and recommendations.
  • Send administrative communications, updates, and security alerts.
  • Respond to your inquiries and provide customer support.
  • Ensure platform security, prevent fraud, and comply with applicable laws.

3. Information Sharing & Disclosure

Env does not sell your personal data. We may share information only in the following circumstances:

  • Service Providers: With trusted third parties who assist in operating our platform (e.g., cloud hosting, payment processing, analytics).
  • Legal Requirements: When required by law, subpoena, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to users.
  • Consent: With your explicit permission for specific purposes.

Note: Environmental impact data is anonymized and aggregated for industry benchmarking unless you opt-in to share identifiable metrics.

4. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

  • End-to-end encryption (TLS 1.3) for data in transit.
  • AES-256 encryption for data at rest.
  • Regular security audits, penetration testing, and access controls.
  • Employee training on data privacy and secure handling procedures.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

5. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

  • Access & Portability: Request a copy of your data in a machine-readable format.
  • Correction: Update or rectify inaccurate information.
  • Deletion: Request removal of your personal data, subject to legal retention requirements.
  • Opt-Out: Unsubscribe from marketing communications at any time.
  • Restriction/Objection: Limit processing or object to certain data uses.

To exercise these rights, contact our Data Protection Officer at privacy@env.com. We will respond within 30 days.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and secure our platform. These include:

  • Essential Cookies: Required for authentication and security.
  • Analytics Cookies: Help us understand how users interact with our platform.
  • Preference Cookies: Remember your dashboard settings and language preferences.

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

7. Third-Party Services & Links

Our platform may integrate with third-party APIs (e.g., weather data, supply chain registries, ESG databases) or contain links to external websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their respective privacy policies before sharing information.

8. Children's Privacy

Env's services are intended for businesses and professionals. We do not knowingly collect personal information from individuals under the age of 16. If we discover such data, we will take immediate steps to delete it. If you believe a minor has provided information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via email or in-app notification at least 30 days before the new policy takes effect. Your continued use of our services constitutes acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please reach out:

Env Inc.
Privacy & Compliance Department
Email: privacy@env.com
Address: 123 Sustainability Blvd, Suite 400, San Francisco, CA 94107
Data Protection Officer: dpo@env.com