Privacy Policy

1. Information We Collect

We collect information to provide, improve, and secure our Services. The types of data we collect include:

1.1 Personal Information You Provide

• Account details: name, email address, phone number, and organization name
• Billing & payment information: processed securely by our third-party payment providers
• Support communications: messages, tickets, or feedback you send to us

1.2 Usage & Technical Data

• Device & browser information, IP address, and operating system
• Log data: pages visited, features used, session duration, and referral URLs
• Cookies & similar technologies: used for authentication, preferences, and analytics

1.3 Environmental & Operational Data

If you use our platform to track sustainability metrics, you may upload or integrate organizational data such as energy consumption, emissions reports, or supply chain information. This data remains yours and is processed solely to deliver platform functionality and insights.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create, maintain, and secure your account
• To deliver, operate, and improve our Services and sustainability tools
• To process payments and issue invoices
• To communicate with you regarding updates, support, and policy changes
• To comply with legal obligations and enforce our terms of service
• To analyze usage trends and enhance user experience (anonymized where possible)

3. How We Share & Disclose Data

We do not sell your personal information. We may share data only in the following circumstances:

• Service Providers: Trusted third parties who assist with hosting, analytics, payment processing, and customer support, bound by strict data protection agreements
• Legal Requirements: When required by law, regulation, or to protect the rights, safety, or property of Env, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice and continued privacy protections
• With Your Consent: When you explicitly authorize sharing for a specific purpose

4. Data Security & Retention

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, regular security audits, and employee training. While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure.

We retain your data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law or for legitimate business purposes (e.g., tax, accounting, or dispute resolution).

5. Your Rights & Choices

Depending on your location, you may have certain rights regarding your personal data, including:

• Access, update, or correct your information
• Request deletion or restriction of processing
• Portability of your data in a structured, machine-readable format
• Opt-out of marketing communications at any time
• Manage cookie preferences through your browser settings

6. Children’s Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a minor, we will take prompt steps to delete it. Parents or guardians who believe this has occurred should contact us immediately.

7. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via email, platform notification, or by posting the updated policy on our website with a revised "Last Updated" date. Your continued use of our Services after such changes constitutes acceptance of the updated policy.

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to our Data Protection Officer or privacy team: