Legal

Privacy policy

Last updated: 17 July 2026 · This policy explains what CO2 Dynamics collects, why, and the choices you have.

Who we are

CO2 Dynamics ("we", "us") is a carbon-removal intelligence and carbon-accounting platform operated by Finite Skills, available at co2dynamics.com. For privacy questions, contact admin@co2dynamics.com.

What we collect

  • Account data. When you create a workspace we store your organisation name, industry (optional), your name, email address, and a salted hash of your password. We never store passwords in plain text.
  • Workspace data. The facilities, activity data, emission factors, targets, and notes you enter. This data belongs to your organisation and is used only to provide the service (for example, computing CO2e and analytics).
  • Contact and form submissions. If you use a contact, project-submission, or forum-proposal form, we store what you send so we can respond.
  • Session cookie. Signing in sets one first-party session cookie (co2_session) — HttpOnly, Secure, SameSite. We do not use advertising or cross-site tracking cookies.
  • Server logs. Standard web-server logs (IP address, user agent, requested URL) are kept for security and reliability.

AI features

The AI advisor analyses your organisation's aggregated carbon analytics to generate summaries, suggestions, and answers. When the external AI provider is enabled, only the analytics needed for the request are sent to it; a rule-based engine that runs entirely on our servers is used otherwise. AI outputs are stored in your organisation's insight history so you have an audit trail.

Payments

Paid upgrades are processed by Razorpay. Your card details are entered on and handled by Razorpay — we never see or store them. We keep records of orders, payment identifiers, and subscription status.

What we don't do

  • We do not sell your data.
  • We do not share your workspace data with other customers — every query is scoped to your organisation.
  • We do not run third-party advertising or analytics trackers on this site.

Data retention and export

Your workspace data is retained while your account is active. You can export your complete inventory (CSV/JSON) at any time from the Reports section. To delete your account and its data, email admin@co2dynamics.com from your account address.

Security

Passwords are hashed with PBKDF2, sessions use secure cookies, workspace data is isolated per organisation, and changes are recorded in an audit log. Report vulnerabilities via our security.txt.

Your rights

You may request access to, correction of, or deletion of your personal data by contacting admin@co2dynamics.com. We operate from India and handle personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

Changes

We'll update this page when the policy changes and adjust the date above. Material changes will be flagged on the site.