Privacy Policy

1. Introduction

SustainPassport ("we," "us," "our") is an official Digital Product Passport (DPP) issuing agency operating within the European Union. We are committed to protecting and respecting your privacy. This policy explains how we collect, use, and disclose your personal and company data when you use our platform and services.

By accessing our platform, you agree to the terms outlined in this Privacy Policy and our Terms of Service.

2. Data We Collect

We collect data necessary to issue official DPPs and maintain platform functionality:

• Account Data: Name, email address, and encrypted passwords.
• Company Data: Company name, Tax ID/VAT number, country of operation, and product categories.
• Product Data: Materials, CO₂ footprint data, supplier information, and other ESPR compliance metrics you submit.
• Usage Data: IP address, browser type, and access logs for security and analytics.

3. How We Use Your Data

Your data is used strictly for:

• Generating and registering official GS1-compliant DPPs in the EU system.
• Providing platform analytics, compliance scores, and translation services.
• Fulfilling legal obligations as an authorized EU issuing agency.
• Communicating essential updates regarding your account or EU regulations.

We do not sell your personal or product data to third parties.

4. Data Accuracy & User Responsibility

Crucial Limitation: While our platform and automated engines assist in calculating compliance scores and footprints, the ultimate responsibility for the accuracy of all submitted data lies with you (the user/company). SustainPassport acts as an issuing agency based on the data provided by the user. We are not liable for penalties arising from false, misleading, or incorrect data submitted by the user to our platform.

5. Data Storage & Security (GDPR)

All data is hosted on secure servers located within the European Union, fully complying with GDPR regulations. We employ industry-standard encryption (AES-256) and security measures to prevent unauthorized access, alteration, or disclosure. For technical details, please refer to our Documentation.

6. Third-Party Services

We utilize trusted third-party services for authentication (Google, Apple) and payment processing (Stripe). These providers have their own privacy policies governing the use of your data.

7. No Warranties

The platform is provided on an "as is" and "as available" basis without warranties of any kind. While we strive for 99.9% uptime, we do not guarantee that the service will be uninterrupted, error-free, or completely immune to security breaches. Platform calculations (including AI tools) are for assistance only and do not constitute professional legal or environmental consulting.

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your GDPR rights (such as data deletion), please contact us at privacy@sustainpassport.com.