Last updated: 3 November 2026
Neutra CO₂ ("we", "us", "our") is the data controller for personal data collected through this platform. Contact: info@neutraco2.com.
We collect the following personal data: account information (name, email, studio name), project data (location, surface area, materials, fixtures, furniture specifications), calculation results and carbon footprint estimates, payment information (processed by Stripe — we do not store card details), and certificate data (Gold Standard credit details, certificate IDs).
We process your data to: provide the carbon footprint calculation service, generate certificates and Qualifying Explanatory Statements (QES), process payments for carbon credit purchases, communicate with you about your account and projects, and improve our service through anonymized usage analytics.
We process your data based on: contractual necessity (to provide the service you signed up for), legitimate interest (to improve our service and prevent fraud), and consent (for marketing communications, which you can withdraw at any time).
We do not sell your personal data. We share data only with: Supabase (database and authentication hosting, EU servers), Stripe (payment processing), Vercel (website hosting), and Gold Standard (only the minimum data required for carbon credit retirement). All third-party processors are GDPR compliant.
Account data is retained for as long as your account is active. Project data and calculations are retained for the duration of your account plus 5 years (to satisfy QES availability requirements). Certificate data is retained for a minimum of 5 years from the date of issuance. You may request deletion of your account and associated data at any time.
Under GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent. To exercise any of these rights, contact info@neutraco2.com.
We implement appropriate technical and organizational measures to protect your data, including: encryption in transit (TLS/SSL), encryption at rest (database encryption), access controls and authentication, and regular security reviews.
Your data may be processed outside the EU/EEA by our service providers (Vercel, Stripe). These transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions.
We use essential cookies only for authentication and session management. We do not use tracking cookies or third-party advertising cookies. See our Cookie Policy for details.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the platform.
For questions about this policy or to exercise your rights, contact: info@neutraco2.com. You also have the right to lodge a complaint with your local data protection authority.