Privacy Policy
Last updated: March 24, 2026
1. Information We Collect
We collect information you provide directly (name, email, phone, payment details), usage data (pages visited, actions taken, device info), location data (for field reports and project mapping), and cookies/tracking technologies. For NGOs, we collect organizational documents and verification data.
2. How We Use Your Information
We use your information to: provide and improve our services, process donations and payments, manage your account and referral network, send notifications and updates, verify NGOs and field reports, generate environmental impact reports, improve AI analysis models, and comply with legal obligations.
3. Data Sharing
We share data with: payment processors (Stripe, ZarinPal, OxaPay) for transactions, verified NGOs for project management, blockchain networks for carbon credit and NFT verification, analytics providers for platform improvement, and law enforcement when legally required. We never sell your personal data to third parties.
4. Data Security
We implement industry-standard security measures including: TLS/SSL encryption for all data transmission, encrypted database storage, regular security audits, role-based access control, two-factor authentication support, and automated fraud detection. Despite these measures, no system is completely secure.
5. Your Rights (GDPR)
Under GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data ('right to be forgotten'), restrict processing, data portability, object to processing, and withdraw consent. Contact privacy@earth365.org to exercise these rights.
6. Cookies
We use essential cookies for platform functionality, preference cookies for your settings (language, theme), analytics cookies to understand usage patterns, and marketing cookies (with consent) for relevant communications. You can manage cookie preferences in your browser settings.
7. Data Retention
We retain account data for the duration of your account plus 2 years after deletion. Transaction records are kept for 7 years for legal compliance. Field report data and environmental records are retained indefinitely for scientific and transparency purposes. You can request data deletion at any time.
8. International Data Transfers
Your data may be transferred to and processed in countries outside your residence. We ensure adequate protection through: Standard Contractual Clauses, adequacy decisions, and binding corporate rules where applicable.
9. Children's Privacy
EARTH365 is not intended for children under 18. We do not knowingly collect data from children. If we discover we have collected data from a child, we will delete it promptly. Parents can contact us to request deletion of their child's data.
10. Contact Us
For privacy-related inquiries, contact our Data Protection Officer at privacy@earth365.org. You may also write to: EARTH365 Privacy Team, [Address]. For EU residents, you have the right to lodge a complaint with your local data protection authority.