Data Ownership

Ownership - Who owns the data once it’s held with MyCarbon?

Data provided to myCarbon remains the property of the client. MyCarbon acts solely as a data processor and does not claim ownership of client data. Data is only used for the purpose of delivering the agreed services.

 

Visibility - How secure / locked down is the data held by MyCarbon?

Data is protected through a combination of encryption and access controls. User passwords are securely stored using industry-standard hashing, meaning they cannot be viewed or reversed. All data access is restricted to authenticated users, and users can only access their own data unless they explicitly grant access to MyCarbon administrators.

Access to underlying systems is limited to a small number of authorised personnel and is protected by secure credentials. All interactions with the platform are validated server-side to ensure only authorised requests are processed.

 

On-selling – Is data shared with or stored by other systems (e.g. ChatGPT)?

Client data is not sold or shared with third parties. It is only used within trusted services required to operate the platform.

For AI features, limited data is sent to Microsoft/OpenAI for processing. This is handled securely, not stored as part of the platform, and not used to train external models.

We also use minimal system logging for support.

 

Deletion - If we remove access, what happens to the data already in the system with MyCarbon?

Currently user data is deactivated when an account is removed. Upon request the data will be permanently deleted.