Privacy Policy

This Privacy Policy explains how Enzera OÜ (registration number 17534711, registered at Harju maakond, Tallinn, Kesklinna linnaosa, Järvevana tee 9, 11314, Estonia) collects, uses, stores, and protects your personal information when you use enzera.io and app.enzera.io.

Enzera OÜ is the data controller for the personal data described in this policy. This Privacy Policy may be updated from time to time to reflect changes in our services or legal requirements. The current version is always available at this URL.

Information You Provide

When you join the beta waiting list, we collect:

• Email address (required) - to contact you about beta access and updates
• Name (optional) - to personalize communications
• Role (optional) - to understand user types (importer, supplier, consultant, verifier)
• Consent confirmation - your agreement to receive communications

Information Collected Automatically

When you use our calculators or visit our website, we may collect:

• IP address - for analytics and security
• Browser type and version - to ensure compatibility
• Device information - to optimize the user experience
• Usage data - which pages you visit and how you interact with calculators
• Local browser storage (beta access token and usage counters) - We use browser local storage to store strictly functional access tokens and anonymous usage counters. These are used to enable beta features (such as PDF export) and to limit free calculator usage. This data does not contain personal information, is not used for tracking or analytics, and is never shared with third parties.

Information We Do NOT Collect

Our free calculators are stateless. We do NOT store:

• Calculation inputs (product types, quantities, countries)
• Calculation results (emissions, costs, comparisons)
• Any business-sensitive data you enter into calculators

All calculator data exists only in your browser session and is never sent to our servers.

We use the information we collect to:

• Provide beta access - notify you when Enzera CBAM Connect launches
• Send updates - share CBAM regulation changes and product announcements
• Improve our services - understand user needs and feature requests
• Ensure security - protect against fraud and abuse
• Comply with legal obligations - respond to legal requests if required

We will NOT:

• Sell your personal information to third parties
• Share your email with marketing partners
• Use your data for purposes other than those stated above
• Send spam or irrelevant communications

Under the EU General Data Protection Regulation (GDPR), we process your personal data based on:

• Consent (Article 6(1)(a)) - You explicitly consent to receive beta invitations and updates when you join the waiting list
• Legitimate interests (Article 6(1)(f)) - We have a legitimate interest in improving our services and communicating with users about CBAM-related topics

Where We Store Data

Your data is stored securely using Supabase (a cloud database service) with servers located in the European Union, ensuring GDPR compliance.

How We Protect Data

• Industry-standard encryption (SSL/TLS) for data transmission
• Encrypted database storage
• Access controls limiting who can view your data
• Regular security audits and updates

Data Retention

We retain your information:

• Beta waiting list data: Until you unsubscribe or 3 years after collection
• Analytics data: Aggregated and anonymized after 12 months

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to access - Request a copy of the personal data we hold about you
• Right to rectification - Request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") - Request deletion of your data
• Right to restrict processing - Request that we limit how we use your data
• Right to data portability - Receive your data in a machine-readable format
• Right to object - Object to processing based on legitimate interests
• Right to withdraw consent - Unsubscribe from emails at any time

To unsubscribe from email communications, visit our unsubscribe page. Note that unsubscribing from emails will not revoke your access to calculators and PDF export features.

To exercise any other rights, contact us at info@enzera.io.

We do not use tracking or advertising cookies. We may use browser local storage for strictly necessary technical functionality, which does not require consent.

We use minimal tracking technologies:

• Local Storage (strictly functional) - Beta access tokens and anonymous usage counters for feature gating. Contains no personal information.
• Analytics - Cloudflare Analytics (privacy-respecting, no personal data collected)

We do NOT use:

• Third-party advertising cookies
• Cross-site tracking
• Social media tracking pixels

We use the following third-party services:

• Supabase - Database hosting (EU servers, GDPR compliant)
• Vercel - Website hosting (GDPR compliant)
• Cloudflare - DNS and analytics (GDPR compliant)
• SendGrid - Email delivery (GDPR compliant)

These services have their own privacy policies and security measures. We carefully select only GDPR-compliant partners.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Our primary data storage is within the European Union. If data is transferred outside the EEA, we ensure adequate safeguards are in place (such as Standard Contractual Clauses or Privacy Shield certification) to protect your information.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated via email to beta waiting list members.

We encourage you to review this policy periodically.

To exercise your GDPR rights, ask questions about this Privacy Policy, or raise a data concern, contact us:

We aim to respond to all data rights requests within 30 days as required under GDPR Article 12.

If you are located in the EEA and believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection authority.

As Enzera OÜ is registered in Estonia, our lead supervisory authority is:

You may also contact the data protection authority in the EU member state where you reside or work.