Privacy Policy

Introduction

PLANET SUSTECH PRIVATE LIMITED ("Planet Sustech", "we", "our", or "us") respects your privacy and is committed to protecting personal information entrusted to us.

This Privacy Policy explains how Planet Sustech collects, uses, processes, stores, shares, and protects information collected through:

• our publicly available websites, including https://planetsustech.com;
• the Karbon Platform and related applications;
• implementation, support, maintenance, and professional services;
• communications with our employees, representatives, and support teams;
• third-party business interactions and publicly available sources.

The Karbon Platform may be provided as:

• a cloud-hosted Software-as-a-Service (SaaS) solution operated by Planet Sustech; or
• an On-Premise deployment installed within infrastructure controlled by the Client.

This Privacy Policy applies to both deployment models.

By accessing or using our websites, Platform, products, or services, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with this Privacy Policy, please discontinue use of our websites, products, and services.

For questions regarding this Privacy Policy or our privacy practices, please contact:

Email: info@planetsustech.com

1. Scope of this Privacy Policy

This Privacy Policy applies to information collected from:

• visitors to Planet Sustech websites;
• customers and prospective customers;
• authorized users of the Karbon Platform;
• individuals who communicate with Planet Sustech;
• business partners, vendors, and service providers.

This Privacy Policy primarily governs the processing of Personal Information by Planet Sustech.

Client Data uploaded by organizations using the Karbon Platform remains owned and controlled by the respective Client and is processed by Planet Sustech only for providing the contracted Services.

2. Information We Collect

2.1 Personal Information

Planet Sustech may collect personal information relating to individuals who interact with our websites, products, or services.

Depending on the nature of the interaction, this may include:

Identity and Contact Information

• Full name;
• Business email address;
• Phone number;
• Organization name;
• Job title or designation;
• Country or location information.

Account and Authentication Information

• Username;
• User identification details;
• Authentication identifiers;
• Access roles and permissions;
• Security-related information required for account management.

Planet Sustech does not store plain-text passwords. Authentication credentials are protected using appropriate security mechanisms.

Communication Information

This may include:

• emails;
• support requests;
• service communications;
• meeting records;
• feedback and inquiries.

Technical Information

This may include:

• IP address;
• browser type;
• operating system;
• device information;
• access timestamps;
• log information;
• application usage information.

Commercial Information

This may include:

• billing information;
• purchase orders;
• contract details;
• subscription information;
• invoicing details.

Planet Sustech does not store payment card information unless expressly required and communicated.

2.2 Client Data

Organizations using the Karbon Platform may upload or process business information through the Platform.

Such information may include:

• ESG data;
• sustainability metrics;
• environmental information;
• carbon emission data;
• reports and dashboards;
• supplier information;
• operational data;
• documents and attachments;
• audit-related information;
• other business information uploaded by or on behalf of the Client.

Such information ("Client Data") remains owned by the Client.

Planet Sustech does not use Client Data for independent commercial purposes or claim ownership over such information.

3. How We Collect Information

Planet Sustech collects information through various methods, including:

3.1 Direct Collection

We collect information when you:

• create or manage an account through your organization;
• request demonstrations or information;
• enter into commercial discussions;
• contact our support teams;
• communicate with our representatives;
• subscribe to communications.

3.2 Platform Usage

When authorized Users access the Karbon Platform, we may collect technical information necessary for:

• authentication;
• security monitoring;
• troubleshooting;
• service improvement;
• usage analytics.

3.3 Third-Party Sources

We may receive information from:

• business partners;
• customer organizations;
• service providers;
• publicly available business sources;
• professional networking platforms.

Such information will be processed in accordance with applicable privacy laws.

4. How We Use Information

Planet Sustech uses information for legitimate business purposes, including:

4.1 Providing Services

To:

• provide access to the Karbon Platform;
• manage user accounts;
• deliver implementation and support services;
• maintain and improve Platform functionality.

4.2 Authentication and Security

To:

• verify user identity;
• prevent unauthorized access;
• detect security threats;
• maintain system integrity.

4.3 Customer Support

To:

• respond to inquiries;
• troubleshoot issues;
• provide technical assistance;
• communicate service updates.

4.4 Platform Improvement

To:

• analyze performance;
• improve features;
• enhance user experience;
• develop new functionality.

4.5 Business Communications

To provide:

• service notifications;
• operational updates;
• product announcements;
• marketing communications where permitted.

Users may opt out of marketing communications at any time.

5. Legal Basis for Processing

Depending on applicable laws, Planet Sustech processes Personal Information based on:

5.1 Contractual Necessity

Processing required to:

• provide the Karbon Platform;
• perform contractual obligations;
• provide agreed services.

5.2 Legitimate Interests

Processing necessary for:

• improving services;
• maintaining security;
• preventing fraud;
• managing customer relationships.

5.3 Consent

Where required by applicable law, Planet Sustech will obtain consent before processing Personal Information.

Individuals may withdraw consent where legally applicable.

5.4 Legal Obligations

Processing necessary to comply with:

• applicable laws;
• regulatory requirements;
• lawful requests from authorities.

6. Cloud and On-Premise Deployment Data Processing

6.1 Cloud Deployment

For Cloud deployments, Planet Sustech may host and process Client Data through:

• Planet Sustech-controlled environments; or
• approved third-party infrastructure providers.

Planet Sustech is responsible for managing the application environment and implementing appropriate security controls within its area of responsibility.

6.2 On-Premise Deployment

For On-Premise deployments:

• Client Data remains within infrastructure controlled by the Client unless otherwise agreed;
• Planet Sustech does not routinely access Client Data;
• Planet Sustech may access the environment only when authorized by the Client for implementation, maintenance, troubleshooting, updates, or support.

The Client remains responsible for:

• infrastructure security;
• operating system security;
• network controls;
• backups;
• disaster recovery;
• access management within its environment.

6.3 Role of Client Organizations

Clients are responsible for ensuring that they have appropriate rights and permissions to provide information to the Platform and for complying with applicable privacy obligations relating to their Users and data subjects.

7. Information Sharing and Disclosure

7.1 What We Do Not Do

Planet Sustech:

• does not sell Personal Information;
• does not rent Personal Information to third parties;
• does not share Personal Information for third-party marketing without appropriate authorization.

7.2 Service Providers

Planet Sustech may share information with trusted service providers that assist with:

• hosting;
• infrastructure;
• analytics;
• customer support;
• communications;
• security services.

Such providers are required to maintain appropriate confidentiality and security obligations.

7.3 Legal Requirements

Planet Sustech may disclose information where required:

• by applicable law;
• by court order;
• by regulatory authorities;
• to protect rights, safety, or security.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of the transaction, subject to appropriate confidentiality and privacy protections.

8. Cookies and Similar Technologies

Planet Sustech uses cookies and similar technologies on its websites and applications to improve functionality and user experience.

Cookies may be used to:

• remember user preferences;
• maintain secure sessions;
• analyze website traffic;
• understand usage patterns;
• improve services.

You may manage cookie preferences through your browser settings.

Disabling cookies may affect certain website or Platform functionality.

9. Data Retention

Planet Sustech retains Personal Information only for as long as necessary to:

• provide the Platform and related services;
• fulfill contractual obligations;
• maintain business records;
• resolve disputes;
• enforce agreements;
• comply with applicable legal, regulatory, tax, or accounting requirements.

Retention periods may vary depending on the nature of the information and the purpose for which it was collected.

9.1 Client Data Retention

Client Data uploaded to the Karbon Platform remains subject to the instructions and agreements between Planet Sustech and the Client.

For Cloud deployments:

• Client Data retention, backup, and deletion practices are governed by the applicable Services Agreement;
• upon termination of services, Client Data will be handled according to the applicable agreement and applicable law.

For On-Premise deployments:

• Client Data generally remains under the control of the Client;
• the Client is responsible for retention, backup, archival, and deletion policies unless otherwise agreed with Planet Sustech.

10. Security

Planet Sustech is committed to protecting Personal Information and Client Data through appropriate technical and organizational safeguards.

These measures may include:

• access controls;
• authentication mechanisms;
• encryption practices where appropriate;
• monitoring and logging;
• secure software development practices;
• vulnerability management processes;
• employee confidentiality obligations.

10.1 Cloud Deployment Security

For Cloud deployments, Planet Sustech implements reasonable technical and organizational security measures designed to protect the Platform environment managed by Planet Sustech.

These measures may include access controls, authentication mechanisms, monitoring, security updates, and other safeguards appropriate to the nature of the Services.

Planet Sustech continuously works to maintain the security and reliability of the Platform; however, no system or method of electronic storage or transmission can be guaranteed to be completely secure.

Security responsibilities for third-party infrastructure providers, internet connectivity, Client devices, User credentials, and Client-controlled systems remain with the respective parties responsible for those environments.

10.2 On-Premise Deployment Security

For On-Premise deployments, security responsibilities are shared between Planet Sustech and the Client based on the respective environments and responsibilities controlled by each party.

Planet Sustech is responsible for applying reasonable security practices in the development, maintenance, and delivery of the Karbon Platform software provided by Planet Sustech, including providing security updates, patches, and fixes where applicable.

The Client remains responsible for securing and maintaining the infrastructure environment in which the Platform is deployed, including:

• servers and hosting infrastructure;
• operating systems;
• databases;
• network security;
• firewall and access controls;
• user identity management and permissions;
• backups and disaster recovery;
• endpoint security; and
• compliance with the Client's internal security policies and applicable requirements.

Planet Sustech shall not be responsible for security incidents, data loss, or service interruptions arising from Client-controlled infrastructure, configurations, third-party components, or systems outside Planet Sustech's reasonable control.

11. Your Rights and Choices

Depending on applicable privacy laws, individuals may have rights relating to their Personal Information, including:

• requesting access to Personal Information;
• requesting correction of inaccurate information;
• requesting deletion of Personal Information;
• requesting restriction of processing;
• objecting to certain processing activities;
• withdrawing consent where processing is based on consent;
• requesting portability of information where applicable.

Requests may be submitted to:

Email: info@planetsustech.com

Planet Sustech may need to verify the identity of the requester before processing such requests.

Certain information may be retained where required by law, contractual obligations, legitimate business purposes, or security requirements.

11.1 Marketing Communications

You may opt out of receiving marketing communications from Planet Sustech at any time by contacting us or using available unsubscribe mechanisms.

Opting out of marketing communications does not affect service-related communications, including security alerts, account notifications, and operational updates.

12. Analytics and Profiling

Planet Sustech may analyze information relating to website and Platform usage to:

• understand usage patterns;
• improve Platform functionality;
• enhance customer experience;
• identify performance issues;
• develop new features and services.

Such analysis may involve aggregated or anonymized information.

Planet Sustech does not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals unless permitted by applicable law.

13. Third-Party Websites and Services

The Platform and Planet Sustech websites may contain links to third-party websites, applications, or services.

These third-party services operate independently from Planet Sustech and may have their own privacy policies and practices.

Planet Sustech is not responsible for the privacy practices, security, or content of third-party websites or services.

We encourage users to review the privacy policies of any third-party services they access.

14. Children's Privacy

The Karbon Platform and Planet Sustech services are intended for business and professional use.

Planet Sustech does not knowingly collect Personal Information from individuals under the age of 18.

If you believe that Personal Information of a child has been provided to Planet Sustech without appropriate authorization, please contact us at:

Email: info@planetsustech.com

Upon verification, Planet Sustech will take reasonable steps to delete such information where required by applicable law.

15. Changes to This Privacy Policy

Planet Sustech may update this Privacy Policy from time to time to reflect:

• changes in applicable laws;
• changes to our business practices;
• improvements to our services;
• changes in technology or security practices.

When material changes are made, Planet Sustech may notify Clients through appropriate channels or update the effective date displayed with this Privacy Policy.

Your continued use of the Platform, websites, or services after such changes become effective constitutes acceptance of the updated Privacy Policy.

16. Contact Information

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or Planet Sustech's privacy practices, please contact us

PLANET SUSTECH PRIVATE LIMITED

Email: info@planetsustech.com

Website: https://planetsustech.com

Corporate Address: 404, Janki Centre Premises CHS Ltd, Off Veera Desai Road, Andheri West, Mumbai, Maharashtra 400053, India.