Privacy policy

• Account details: your email address, display name and organization name. If you sign in with Google, we receive your name and email from Google, nothing else.
• Documents you upload: bills and spreadsheets, stored in a private bucket that only your account can read.
• Emissions data: the activity lines, inventories, audits, reduction plans, materiality assessments and GRI drafts you create.
• Wallet details: if you link a wallet, its address and Hedera account id, after you sign a message proving you control it.
• Usage records: a log of AI requests per account, used only to enforce hourly limits, and standard request logs kept by our hosting provider.

• To read your bills with AI, calculate emissions, audit inventories, issue certificates and run the marketplace you use.
• To prevent abuse, such as limiting AI requests and granting test HBAR once per account.

We do not sell your data, show advertising, or use your data to train AI models.

GreenTrace exists to make climate claims verifiable, so some records are public and permanent once created:

• Certificates: the certificate page, its organization name, reporting period, emissions totals and the activity lines behind it can be viewed by anyone with the link. The metadata is stored on IPFS and the certificate is an NFT on Hedera.
• Hedera records: the audit topic stores hashes of AI results, audits and certificates, plus purchase and retirement records with the Hedera account ids involved. Hashes do not reveal the content of your documents.
• Payments and retirements: transactions you sign from your wallet are public on Hedera, as on any public ledger.

Records on Hedera and IPFS cannot be deleted. Bill contents are never written to the ledger or to IPFS.

• Supabase (database, authentication and file storage, hosted in Singapore).
• Vercel (application hosting).
• OpenAI (reading documents and generating AI reviews, plans, ratings and drafts). Documents are sent only to be read, under OpenAI's API data terms, which do not use API data for training.
• Pinata (pinning public certificate metadata to IPFS).
• Hedera (the public ledger described above).
• Google, only if you choose to sign in with Google.

GreenTrace stores your sign-in session and your light or dark theme choice in your browser's local storage. It uses no advertising or analytics cookies.

We keep your account data while your account exists. You can delete draft inventories in the app at any time. To delete your account and the private data behind it, email shoph2e@gmail.com; we will do so within 30 days, except for public records on Hedera and IPFS, which cannot be removed.

You can ask for a copy of your data, its correction or its deletion by emailing shoph2e@gmail.com. GreenTrace is not intended for children under 16.

If this policy changes, the date at the top of this page will change too.