CBAM Compliance OS — Privacy Policy
Last updated: 2026-07-30
Privacy review pending
This product's privacy policy is currently under review. Full details will be published before launch.
Contact
For privacy questions, email privacy@erosdowgroup.com.
Data practices
| Collects personal data | Yes |
| Uses analytics | No |
| Uses crash reporting | No |
| Serves ads | No |
| Uses cookies | Essential authentication session cookies only in the invitation-only workspace. |
| Uses third-party SDKs | Yes |
| Requires account | A readiness request can be submitted without an account; the customer workspace requires an invitation-only account. |
| Stores data remotely | Yes |
| Tracks users | No |
| Collects children's data | No |
| Processes payments | No payment processing is active in the launch candidate. Pilot fees require a separately approved agreement and billing method. |
Third-party services
- Supabase — authentication, organisation-scoped database records, and private evidence storage in the staging implementation
- Production web hosting provider — pending approval before customer activation
What data is collected
A readiness request contains company and business-contact details plus high-level trade-flow information. An activated workspace may contain business-user accounts, company details, product and commodity records, supplier contacts, movement data, evidence documents, review notes, findings, reports, support records and service-security logs.
How data is used
Data is used to assess pilot fit, provide and secure the readiness workflow, organise evidence, identify missing operational information, prepare manually reviewed reports, administer approved pilot accounts and respond to support. Customer data is not sold or used to train AI models.
Data retention
The proposed pilot default is retention while the account is active followed by deletion within 30 days of an authorised written cancellation request, unless legal or contractual requirements apply. The final schedule, backup treatment and processor terms remain subject to approval.
Your choices
Authorised users may request access, correction, export or deletion through the privacy contact or the contact in their pilot agreement. Identity and authority will be checked before confidential business data is disclosed or removed.