Privacy Policy

1. Scope of Application

This Policy applies to information we process when you visit or use the following services: the MeetCarbon official website (including product introductions, solutions, the resource center, careers, and contact forms), account registration and login, applications for free trials and scheduled demonstrations, MeetCarbon Cloud, MeetCarbon OS and its energy-carbon applications (such as zero-carbon buildings, energy management, carbon accounting, the carbon factor library, and public-institution energy-carbon supervision), online services related to carbon advisory and training, and other services that we expressly state are subject to this Policy.

Where a specific product has its own data-processing notice, contract, or supplemental agreement that differs from this Policy, that dedicated arrangement prevails for that product. Matters not covered by such arrangement remain subject to this Policy.

2. Information We Collect

We collect information only to the extent necessary to provide the services, with your consent, or as otherwise permitted by law. Depending on the business scenario, this may include:

• Account and contact information: name, job title, work email, mobile number, affiliated organization, and region, used for registration, login, business engagement, and customer support.
• Trial and inquiry information: need descriptions, industry or scenario preferences, and project scale that you submit through forms such as “Free Trial”, “Schedule a Demo”, and “Contact Us”.
• Organization and permission information: organizational structure, roles and permissions, and space profiles such as projects, buildings, or departments created by enterprise administrators, used for multi-tenant isolation and authorization.
• Energy-carbon business data (generally customer business data rather than personal sensitive information in itself): energy consumption and meter readings, device and measurement-point mappings, quotas and energy-efficiency indicators, carbon accounting results, environmental quality monitoring data, green-certificate and carbon-inclusive compliance data, and strategy and retrofit ledgers. Such data are uploaded, connected, or authorized for processing by you or your organization.
• Device and log information: browser type, operating system, IP address, access time, page path, crash logs, and basic device identifiers required for security and risk control, used to keep the services stable and secure.
• Cookies and similar technologies: used to maintain login sessions, remember preferences, and measure site traffic. You may manage cookies through your browser settings.
• Third-party authorization information: if you choose to log in or use single sign-on through a third-party account or enterprise identity source, we may obtain necessary identity identifiers and basic profile information within the scope of your authorization.

3. Purposes of Use

We process the information described above primarily to:

• Provide, maintain, and improve MeetCarbon Cloud, MeetCarbon OS, product modules, and website services, including account management, access control, and multi-tenant data isolation.
• Respond to trial, demonstration, consulting, recruitment, and business-cooperation requests, and provide pre-sales and after-sales support.
• Carry out data processing required for product functions such as energy monitoring, carbon accounting, energy-efficiency quotas, environmental management, intelligent-control coordination, and open integration.
• Send service notices, security alerts, and material version updates; and, where you have consented, send product news or event information. You may unsubscribe from marketing notices at any time.
• Perform security protection, anomaly detection, troubleshooting, audit trails, and risk control.
• Comply with laws, regulations, and regulatory requirements, or respond to lawful requests from competent authorities.
• After de-identification or anonymization, support product improvement, industry insight, and statistical research, without the purpose of identifying any particular individual.

4. Distinguishing Customer Business Data from Personal Information

MeetCarbon’s core products serve government and enterprise energy-carbon management. Energy consumption, carbon emissions, equipment, project profiles, and other business data that you or your organization enter, connect, or generate on the platform belong, in principle, to the relevant organizational customer. For MeetCarbon Cloud and other SaaS or platform services, we generally act as an entrusted processor (or in such other data-processing role as the contract provides), and process the data in accordance with your instructions and the contract.

If personal information is embedded in business data (for example, personal travel-related information needed for employee-commute accounting, or information about account operators), your organization is responsible for obtaining any necessary authorization or other lawful basis and for fulfilling notice obligations. We process such information only to the extent necessary to provide the services.

5. Sharing, Entrusted Processing, and Public Disclosure

We do not sell your personal information. We may share or entrust the processing of relevant information only in the following circumstances:

• We have obtained the explicit consent or authorization of you or your organization.
• To the extent necessary to provide the services, we entrust vendors such as cloud infrastructure, SMS or email, customer-support tools, and analytics providers, under data-processing agreements requiring them to process information only on our instructions and not for other purposes.
• Sharing with affiliates under common control, for unified customer support, security, and compliance management, subject to protections no less protective than this Policy.
• In a merger, acquisition, or asset transfer, if personal information is transferred, we will require the transferee to remain bound by this Policy, or obtain authorization and consent again.
• Disclosure required by laws and regulations, litigation, arbitration, or mandatory requests of competent government authorities.
• Disclosure reasonably necessary to protect the material lawful rights and interests of MeetCarbon, our users, or the public.

6. Cross-Border Transfers

In principle, we store and process personal information and customer business data generated in providing China-region services within the territory of the People's Republic of China. If a cross-border transfer is genuinely required because of cross-border collaboration, an overseas node, or a deployment method you actively choose, we will assess the transfer in accordance with law and adopt a security assessment, standard contract, or other statutory mechanism to safeguard the security and compliance of the transfer.

7. Retention Period

We retain information only for as long as necessary to fulfil the purposes described in this Policy, unless a longer period is required by law. Account information is generally retained while the account remains active. Trial-application information is archived or deleted according to our internal retention cycle after follow-up is complete. Log information is retained for a short period as needed for security operations. Retention and deletion of customer business data follow the service contract, tenant configuration, and your administrative actions. After the retention period expires, we will delete or anonymize the information.

8. Security Measures

We implement security measures commensurate with the relevant business risks, including without limitation:

• Encryption in transit and at rest, and secure custody of key credentials.
• Role-based access control, least-privilege principles, and operational audit.
• Multi-tenant data isolation, network segmentation, and security monitoring.
• Periodic security assessments, vulnerability management, and incident-response arrangements.
• Confidentiality and compliance training for personnel who handle personal information.
• Despite our efforts, the internet is not absolutely secure. If a personal-information security incident occurs or is likely to occur, we will notify you in a timely manner as required by law and take remedial measures.

9. Your Rights

To the extent permitted by applicable law, you may exercise the following rights in respect of personal information:

• Access and obtain a copy of your personal information.
• Correct or complete inaccurate or incomplete information.
• Delete personal information, or request that we cease processing, where the statutory conditions are met.
• Withdraw consent previously given (without affecting the lawfulness of processing based on consent before withdrawal).
• Close your account (after closure, we will delete or anonymize related personal information as required by law, except where retention is legally required).
• Obtain an explanation of the rules for processing personal information.
• Enterprise-customer administrators may manage users and business data of their organization within the scope of their permissions. If you are a member of an organization, some requests may need to be submitted through your organization administrator.

10. Protection of Minors

Our products and services are intended primarily for enterprises and public institutions, and for adults with full civil capacity. If you are under 14 years of age, please do not provide personal information to us. If we discover that we have collected a child’s personal information in error, we will delete it as soon as practicable.

11. Updates to This Policy

We may revise this Policy from time to time. Updates will be posted on this page, and material changes will be notified by website announcement, in-product notice, or email. If a change materially alters the purposes, methods, or types of processing, we will obtain consent again as required by law, or continue processing on another lawful basis.

12. Contact Us

If you have any questions, complaints, or rights requests regarding this Policy or our processing of personal information, please contact us by the following means. We will handle your request as soon as practicable after verifying your identity:

• Privacy inquiries: privacy@meetcarbon.com
• Business and general contact: contact@meetcarbon.com
• Website contact page: /about/contact