Privacy Policy

This Privacy Policy ("Privacy Policy") explains how Carbon Manufacturing Systems Corporation. ("Carbon," "we," "us," or "our") collects, uses, and discloses Personal Information through its online platform, services, and website (collectively, the "Platform").

By accessing or using the Platform, you acknowledge and agree to the data practices described in this Privacy Policy and consent to the collection, use, processing, and disclosure of your Personal Information as described herein. If you do not agree with this Privacy Policy, please do not access or use the Platform.

Any capitalized terms used but not defined in this Privacy Policy shall have the meanings given to them in our Terms of Service.

As explained further in this section, you will have the opportunity to provide us with certain personal information. In addition, we may collect certain information automatically through your use of the Platform. We will use this information to provide you and your Organizations with the functionality of our Platform, to improve our Platform, and to provide you with information about our Platform. The rest of this section provides a more detailed explanation of the personal information we collect and how we use that information.

1. Voluntarily Provided Information
   1. Account Creation: To create an account on the Platform, your Organization will be required to provide certain information, including your name, email address, company, company address, location, and, optionally, a profile photo. We use this information to:
      • Enable your access to and use of the Platform
      • Perform our contractual obligations
      • Communicate with you regarding your account and any Organizations you are associated with

      We may also use your email address to send you product updates, newsletters, or promotional communications related to Carbon's services. By providing your email, you consent to receiving these communications, although you may opt out at any time.

   2. Work Activity: You may choose to log work- related activities into the Platform and, depending on your permissions, modify or manage entries made by other userswithin your Organization (collectively, "User Content"). Additionally, if you or your Organization choose to integrateThird-Party Applications ("Third Party Apps") with the Platform, you may also log or sync User Content from those services into the Platform.
   3. Customer Support Communications: If you contact us for support, report a bug, or submit feedback, we may collect and store the information you provide, including messages, attachments, and metadata. We use this information to troubleshoot issues, respond to your inquiries, and improve the functionality of our Platform. We may also use anonymized or aggregated feedback for internal training or marketing purposes.
2. Automatically Collected Information
   1. Browser & Device Information: When you use the Platform, our servers automatically collect technical information from your browser or device. This may include:
      • IP address
      • Geolocation data
      • Device type and identifiers
      • Cookie data
      • Time spent on Platform
      • Pages or features accessed

      We use this data to troubleshoot issues, enhance performance, and optimize user experience -- for example, by understanding which features are most frequently used, we can better tailor improvements.

   2. Emails: If you open an email from us, we may receive an automatic confirmation. We use this data to understand engagement and improve our communications.
   3. Cookies and Analytics: We use cookies and other tracking technologies (such as web beacons, pixels, and analytics tools) to recognize your browser or device, remember your preferences, and track usage trends. Some cookies are essential for the operation of the Platform, while others help us improve functionality and performance. You can control cookie preferences through your browser settings, though disabling cookies may impact your ability to use certain features.

      We may also use third-party analytics services to gather information about how users interact with the Platform across different devices and sessions. These services may collect device identifiers, IP addresses, and usage patterns.

   4. Information from Other Sources: We may supplement the information we collect directly from you with information obtained from third-party sources, such as public databases or trusted service providers (e.g., to verify contact details or business credentials). We will only obtain this information to the extent permitted by applicable law.

We may disclose your personal information to the categories of third parties identified in this section.

1. Personnel and Third Party Service Providers: We may share your Personal Information with our employees, contractors, and trusted third-party service providers who assist us in operating the Platform and delivering services to you. For example, we useAmazon Web Services (AWS) to store files and images uploaded to the Platform.

   These service providers are authorized to access your information only as needed to perform their services and are contractually obligated to maintain its confidentiality and security.

2. Organization Access: If you submit any Personal Information or User Content to areas of the Platform that are visible to members of your Organization, other authorized users within that Organization will have access to it. You should only share information that you are comfortable disclosing to other users affiliated with your Organization.
3. Third Party Applications: If you or your Organization integrate Third-Party Applications ("Third Party Apps") with the Platform, Carbon may allow the Third Party App to access or process your Personal Information and User Content to enable the integration. Such access is governed by the agreement between either (i) your Organization and the Third Party Provider, or (ii) you and the Third Party Provider. Carbon is not responsible for any use, access, or misuse of your data by Third Party Providers. It is your and your Organization's responsibility to evaluate the risks and permissions associated with any Third Party Apps used.
4. Business Transfers: If Carbon is involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of assets, or transition of service to another provider, your Personal Information may be transferred as part of that transaction. We will notify you, as required by law, if your information is subject to a new privacy policy as a result of any such business transaction.
5. Legal Compliance and Protection of Rights: We may access, preserve, or disclose your Personal Information if we have a good faith belief that doing so is necessary to:
   • Comply with a legal obligation, including subpoenas, court orders, or other valid governmental requests
   • Enforce our Terms of Service or investigate violations
   • Prevent, detect, or address fraud, security, or technical issues
   • Protect the rights, property, or safety of Carbon, our users, or the public, as required or permitted by law
6. International Transfers: We may store and process your Personal Information in countries outside your country of residence, including the United States, where data protection laws may differ. By using the Platform, you consent to such transfers, as permitted by applicable law.

We take the security of your Personal Information seriously and implement commercially reasonable physical, technical, and administrative safeguards to protect it from unauthorized access, use, or disclosure.

We also rely on the technical infrastructure and security practices of third-party service providers who host, store, or process data on our behalf. For example, we use Amazon Web Services (AWS) for secure data storage and transmission.

These safeguards include access controls, encryption in transit and at rest where appropriate, routine monitoring, and periodic security assessments.

However, no method of transmission over the internet or method of electronic storage is completely secure. Therefore, we cannot guarantee the absolute security of your Personal Information, and we make no warranties or guarantees regarding its protection.

You are responsible for maintaining the confidentiality of your account credentials and for any activity occurring under your account. Please notify us immediately if you suspect unauthorized use of your account or a potential breach.

Despite our efforts, we are not liable to you or any third party for any unauthorized access to, misuse of, or alteration of your Personal Information that occurs due to a breach of our safeguards or those of our third-party providers, unless otherwise required by applicable law.

In the event of a security breach that affects your Personal Information, we will take commercially reasonable steps to investigate, mitigate, and notify you of the breach as required by applicable laws.

Because we collect and process your Personal Information on behalf of your Organization under the terms of our agreements with them (the "Organization Agreements"), we act as a "processor" of that information. Your Organization acts as the "controller" and determines how and for what purposes your Personal Information is processed.

If you have questions about how your Personal Information is used—or would like to access, modify, or delete that information—you should contact your Organization directly. We will provide reasonable assistance to your Organization to help respond to any requests or concerns you raise, in accordance with the Organization Agreements and applicable data protection laws.

Subject to your right to request deletion of your Personal Information, we will retain it as long as necessary to:

• Provide you with access to the Platform
• Send you authorized marketing or product-related communications
• Comply with legal and regulatory obligations
• Enforce our agreements
• Protect our legal rights, or the rights of others

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or another jurisdiction that provides similar rights, you may have the right to:

• Access the Personal Information we process about you
• Request correction or deletion of your information
• Object to or restrict processing of your data
• Request data portability (where applicable)
• Withdraw consent, where processing is based on consent

To exercise these rights, please contact your Organization directly. For issues that fall under Carbon's control (like marketing preferences) or for questions about this policy, you can reach us at info@carbon.ms. We will act on all requests as required by data protection laws, though legal and security obligations may require us to retain some information.

The Platform does not track your activity across third-party websites or online services over time. As a result, we do not respond to "Do Not Track" (DNT) signals or similar mechanisms transmitted by web browsers or other devices.

To the extent we do receive any such signals, we do not take action in response, as cross-site tracking is not a feature of the Platform.

We may revise this Privacy Policy from time to time to reflect changes in our business operations, the functionality of the Platform, or applicable laws and regulations. Any such updates will be reflected by a revised "Effective Date" at the top of this Policy. We may also provide additional notice of material changes as required by applicable law.

You are responsible for reviewing this Policy periodically to stay informed of any updates. Your continued access to or use of the Platform following the posting of a revised Policy shall constitute your acknowledgment and acceptance of its terms.

If you have any questions or concerns regarding this Policy, please send us a detailed message to info@carbon.ms, and we will try to resolve your concerns.