Privacy Policy
Effective July 3, 2026
CBAM Defaults collects as little as possible. This policy explains what we collect, why, and who processes it.
What we collect
- Your email — if you sign up for regulatory-change alerts, or when you buy the export (so we can deliver it and support the purchase).
- Usage analytics — privacy-respecting, aggregate analytics about pages visited and features used, including a coarse country/region derived from your IP. We do not build advertising profiles.
- Payment details — handled entirely by our Merchant of Record; we never see or store your card details.
Who processes it
- Creem — payments and billing (Merchant of Record).
- Buttondown — the alert email list, if you subscribe.
- PostHog — product analytics.
- Vercel — hosting.
- Supabase — the CBAM dataset and purchase records (your purchase email + a download token).
How we use it
To operate and improve the site, deliver and support the export, send alerts you asked for, and keep the service secure. We do not sell your data or share it except with the processors above, as needed to run the service, or where required by law.
Retention
Alert subscribers are kept until you unsubscribe. Purchase records are kept as long as needed to honour your download window and for our accounting obligations. You can ask us to delete your data at any time.
Your choices
Every alert email has a one-click unsubscribe. To access or delete the data we hold about you, email hello@cbamdefaults.comand we'll take care of it.
Contact
Privacy questions: hello@cbamdefaults.com. Governed by the laws of the United Arab Emirates.