Privacy Policy

Effective date: July 10, 2026

Climateshed Action (“we,” “us,” or “our”) operates the Climateshed Action web app (the “Service”). This Privacy Policy explains what personal data we collect, how we use it, how long we keep it, and your rights under applicable law including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

1. Information we collect

• Email address — used to create your account and send one-time login codes (OTP).
• Access grants and role — which jurisdictions your account may view, and your account role, used to enforce access.
• Authentication and operational logs — standard sign-in session records and server/CDN logs (such as IP address and request metadata) used to operate and secure the Service.

2. What we do not collect

• Your scenario inputs. The levers you move and the results you generate are computed entirely in your browser. They are not transmitted to or stored by us.
• Exported files. CSV and notebook (.mnote) exports are assembled in your browser and downloaded directly to your device.
• Payment card data. We do not collect or store card numbers.
• Advertising or cross-site tracking cookies. The Service does not use third-party advertising or analytics cookies.

3. How we use your data

• To authenticate you and provide access to entitled jurisdictions.
• To operate, secure, debug, and maintain the Service.
• To communicate with you about your account or a request you submit.

We do not sell your personal data, and we do not use your data to train AI models. The Service is a deterministic calculator and does not send your inputs to any AI provider.

4. Data retention

We retain your account record (email, role, and access grants) for as long as your account is active. Operational and CDN logs are retained on a rolling short-term basis for security and troubleshooting, then rotated out. To request deletion of your account and associated data, email us at feedback@climateshed.app and we will process your request within 30 days.

5. Your rights (CCPA / CPRA)

• Right to know — request a summary of the personal data we hold about you.
• Right to delete — request deletion of your personal data.
• Right to non-discrimination — we will not discriminate against you for exercising these rights.

To exercise these rights, contact us at feedback@climateshed.app.

6. Third-party services

We rely on the following providers to operate the Service:

• Supabase — authentication and database infrastructure. Your account data and access grants are stored in Supabase, protected by row-level security. See Supabase’s Privacy Policy.
• Cloudflare — hosting and content delivery for the web app. Requests are served through Cloudflare’s network in the United States. See Cloudflare’s Privacy Policy.

7. Data security

We use industry-standard practices including HTTPS encryption in transit, row-level security in the database, and token-based authentication. No system is completely secure, and we cannot guarantee the absolute security of your data.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy at this URL with a revised effective date. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact

For privacy questions or data requests, contact us at feedback@climateshed.app.