Privacy Policy

This Privacy Policy explains how CBAMCALC (the "Service") collects, uses, and protects personal data when you use https://cbamcalc.com.

1. Data Controller

The operator of CBAMCALC acts as the controller of personal data processed in connection with the Service.

Contact: support@cbamcalc.com

2. Categories of Personal Data

Depending on how you use the Service, the following categories of personal data may be processed:

Account and Identity Data

• email address;
• authentication identifiers;
• account status and preferences.

Technical and Usage Data

• IP address;
• browser and device data;
• session and log data;
• usage events;
• timestamps and access metadata.

Communication Data

• support emails and related correspondence;
• account notifications;
• service messages.

Billing-Related Data

Billing and purchase data may be processed by Paddle.com Market Ltd. acting as Merchant of Record. Depending on the transaction, this may include billing identity data, transaction identifiers, subscription status, country, tax information, and invoice-related details.

3. Purposes of Processing

Personal data is processed to:

• provide and operate the Service;
• create and maintain user accounts;
• authenticate users and secure access;
• communicate about support, updates, and operational matters;
• process subscriptions and billing through Paddle;
• improve performance, stability, and security;
• detect abuse, fraud, and misuse;
• comply with legal obligations.

4. Legal Bases under GDPR

Where the GDPR applies, processing is based on one or more of the following legal bases:

• Article 6(1)(b) GDPR - performance of a contract or steps taken prior to entering into a contract;
• Article 6(1)(c) GDPR - compliance with a legal obligation;
• Article 6(1)(f) GDPR - legitimate interests, such as service security, fraud prevention, system diagnostics, and product improvement;
• Article 6(1)(a) GDPR - consent, where required.

5. Processors and Third-Party Recipients

The Service uses external service providers that may process personal data on behalf of the Operator, including:

• Vercel - hosting and deployment;
• Railway - backend infrastructure;
• Supabase - authentication and database services;
• Resend - transactional email delivery;
• Google Workspace - operational email and communication;
• Paddle.com Market Ltd. - billing, invoicing, payment processing, and tax handling as Merchant of Record.

Some of these providers may act as independent controllers for specific data they process in their own role.

6. International Transfers

Some service providers may process data outside the European Economic Area. Where applicable, such transfers are made using appropriate safeguards, including contractual protections such as Standard Contractual Clauses, where required.

7. Data Retention

Retention periods may vary depending on the type of data and applicable legal obligations.

8. User Rights

To exercise your rights, contact: support@cbamcalc.com

9. Security

The Operator uses reasonable technical and organizational measures to protect personal data, including secure transmission, account controls, and infrastructure-level safeguards. No method of storage or transmission is completely secure, and absolute security cannot be guaranteed.

10. Cookies and Similar Technologies

The Service uses cookies and similar technologies for authentication, session continuity, performance, and analytics. For details, see the Cookie Policy.

11. Children's Data

The Service is not intended for children. The Operator does not knowingly collect personal data from children through the Service.

12. Changes to this Policy

This Privacy Policy may be updated from time to time. Material changes may be communicated via the website, dashboard, or email.

13. Contact

Questions regarding privacy may be sent to: support@cbamcalc.com