Privacy Policy
Last updated · October 15, 2026
This policy covers the Atmovo web service at atmovo.com, operated by Climfy. It explains what we collect, how we use it, and the controls you have. It applies to Atmovo, including its current manually verified EU CBAM pilot; it does not describe the separate Climfy app.
1. Information we collect
1.1 Account information
- Email address for authentication, account communications, and support
- Name (optional)
- Company name, industry, and country
1.2 Company profile and regulatory analysis data
- Company details you provide, including legal name, identifiers, incorporation country, importer roles, CN codes, product origins, and dated import quantities
- Regulatory applicability assessments, evidence, and action plans generated for your company
- Pilot monitoring status, manually recorded source checks, regulatory changes, and in-app review records
- Generated results and any stored report files
- Credit balance and transaction history
1.3 Service usage data
- Page views, referral information, event timestamps, and selected product events such as profile creation or assessment completion
- Browser information (type, version, language settings)
- Device information (OS, screen resolution)
- Approximate geographic information in aggregated analytics; technical request information may also appear in hosting or service logs
1.4 Payment and billing information
Payment is securely processed by Paddle, our Merchant of Record. Paddle acts as the seller of record and handles all card data — Atmovo never receives or stores your credit card number. Paddle processes billing details for payment and invoicing. Atmovo stores payment references, purchase amounts, credit balances, and transaction records needed to operate the service.
2. How we use your information
We use the information we collect to:
- Provide and operate the regulatory intelligence service
- Analyze your company profile against relevant climate regulations and generate applicability assessments, evidence, and action plans
- Support manually recorded source checks, reassessments, and in-app review items in the current CBAM pilot
- Provide customer support over email
- Provide account-related communications and respond to your requests
- Monitor service quality and improve performance
- Ensure security, prevent fraud, protect accounts
- Understand aggregated service usage and selected product events
- Comply with legal obligations and regulations
3. Information sharing
Atmovo does not sell or share your personal information with third parties except in the following cases:
- Service providers needed to operate the service, as described below
- Legal compliance requirements
- With your explicit consent
4. Service providers and AI-assisted processing
- Supabase provides authentication and infrastructure used for account data and stored report files.
- Vercel hosts the website and provides Web Analytics.
- OpenAI processes the saved company and product facts, import-record context, rule criteria, assessment reasoning, missing-information fields, and evidence records needed to explain the current CBAM assessment.
- Anthropic remains in retained legacy intake and report-generation features, which can process intake text and report context when those features are used.
- Paddle processes payments and invoicing as our Merchant of Record.
- Resend delivers contact-form messages and configured operational email. Contact messages include the details you enter, such as your name, company, email, and message.
AI-assisted features send the context needed for the requested feature to its AI provider. Current CBAM explanations use OpenAI; retained legacy AI features use Anthropic. Avoid entering unnecessary personal information or information you are not authorized to share. Provider processing and retention depend on the applicable service terms and configuration. Providers may process information outside your country; contact us for information about processing locations and arrangements relevant to your request.
5. Data security
Atmovo protects user data through industry-standard security measures:
- SSL/TLS encryption for data transmission
- Secure cloud infrastructure (Supabase, Vercel)
- Authentication and ownership checks for protected account and company-data requests
- Authorized manual reviewers may access company facts and source information needed for the pilot review
No internet transmission is 100% secure. We encourage users to also keep their account information safe.
6. Data retention
We store account information, company profiles, saved assessments, results, and transaction records to operate the service and maintain your analysis history. To request account closure or deletion of personal information, contact us using the address below. We review requests and any applicable record-keeping requirements; closing an account or hiding a report does not automatically erase every stored record. Some records may need to be retained for billing, security, or legal obligations, and backup copies may remain until the relevant backup cycle ends.
7. Your rights
Depending on applicable law, you may request the following:
- Access and obtain a copy of your personal information
- Correct or update your personal information
- Request deletion of your personal information (account deletion)
- Data portability (transfer data to another service)
- Opt-out of marketing emails
To exercise these rights, contact us at contact@climfy.tech.
8. Cookies and tracking technologies
Login cookies maintain your authenticated session. The service also uses browser storage for interface preferences, such as the selected company.
- Supabase authentication cookies support account access
- Browser storage can remember interface choices
- Vercel Web Analytics records page views and selected product events for aggregated usage analysis without analytics cookies
You can manage cookies and browser storage through your browser settings. Blocking authentication cookies may prevent login. Product event properties use limited categories and counts rather than company names, email addresses, CN codes, or evidence text.
9. Children's privacy
Atmovo’s Service is not directed to children under 14, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can review the request and arrange appropriate removal.
10. Changes to this policy
Atmovo may update this Privacy Policy as needed. We will notify you of significant changes via email or in-service notifications. The latest version is always available on this page.
Questions about this policy? Contact us at contact@climfy.tech.