Privacy Policy

Privacy Policy

Last updated: 12 November 2026

1. About this policy

This Privacy Policy explains how Mission Sustainability, Gandhinagar, Gujarat, India (“Mission Sustainability”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you visit or use the Made for Planet Carbon website, tools, reports and related services (together, the “Service”).

By accessing or using the Service, you acknowledge that you have read and understood this policy. If you do not agree with it, please do not use the Service. Where you use the Service on behalf of a company or other organisation, you confirm that you are authorised to provide the information you submit on its behalf.

This policy applies only to the Service. It does not apply to websites, products or services of third parties, even if they are linked from the Service.

2. Information we collect

We collect only the information reasonably needed to provide, secure and improve the Service. This falls into the following categories:

  • Account information. If you sign in using a third-party account such as Google, we receive basic profile information from that provider, limited to your name, email address and profile picture. We do not receive or store your password for that account.
  • Waitlist information. If you join our waitlist, we collect your company name, company website and work email address.
  • Business and product information. Information you choose to enter or upload, such as company details, product descriptions, materials, weights, energy use, production volumes and links to product pages. This information generally relates to your business rather than to you as an individual.
  • Usage information. Information about how the Service is used, such as pages viewed, time spent, features used, clicks, steps completed, downloads and errors. We do not record the content you type into fields as part of usage information.
  • Device and connection information. Limited technical information sent automatically by your browser, such as browser type, device type, approximate location derived from your connection and the date and time of access.
  • Communications. Information you provide when you contact us, including the content of your messages.

We do not intentionally collect sensitive personal data, such as financial account details, government identifiers, health information or biometric data. Please do not submit such information through the Service.

3. How we use information

We use the information described above to:

  • provide, operate and maintain the Service, including calculating and presenting carbon footprint estimates and reports;
  • create and manage accounts and keep your saved information available to you;
  • contact you about the waitlist, the launch of the Service and changes to it;
  • respond to your enquiries and provide support;
  • understand how the Service is used so that we can improve its content, design and features;
  • detect, prevent and address fraud, misuse, security incidents and technical problems;
  • comply with applicable law, enforce our terms and protect our rights, property and safety and those of our users and others.

We do not sell personal data. We do not use personal data for third-party advertising, and we do not use automated decision-making that produces legal or similarly significant effects on you.

4. Grounds for processing

We process personal data on the basis of your consent (for example, when you join the waitlist or choose to sign in), to take steps at your request and to provide the Service you ask for, to comply with legal obligations, and for our legitimate interests in operating, securing and improving the Service, where those interests are not overridden by your rights. Where processing relies on consent, you may withdraw it at any time; withdrawal does not affect processing carried out before it.

5. Information received from Google

Where you sign in with Google, we use the information received only to identify you and to keep your information under your account. We do not access your email, contacts, files or any other data in your Google account. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. How we share information

We do not share your company's figures or your personal data with anyone for their own purposes without your permission. We share information only in the following limited circumstances:

  • Service providers. With carefully selected providers who help us run the Service, such as hosting, storage and technology providers. They may process information only on our instructions, for the purpose of providing their services to us, and subject to confidentiality and security obligations.
  • At your direction. When you choose to share a report or other output with a third party, such as a buyer, that third party receives the information you choose to share.
  • Legal requirements. Where we believe in good faith that disclosure is required by law, regulation, legal process or a lawful request from a public authority.
  • Protection of rights. Where reasonably necessary to protect the rights, property or safety of Mission Sustainability, our users or the public, or to investigate or prevent fraud or misuse.
  • Business transfers. In connection with a merger, acquisition, reorganisation, financing or sale of all or part of our business, subject to the recipient being bound by obligations consistent with this policy.

We may also share information that has been aggregated or de-identified so that it no longer identifies you or your company.

7. Where information is processed

We are based in India. Our service providers may store or process information in India or in other countries. Where information is transferred outside the country in which it was collected, we take reasonable steps to ensure it receives a level of protection consistent with this policy and applicable law.

8. Cookies and browser storage

We use cookies and similar browser storage that are necessary for the Service to work, for example to keep you signed in, to remember your progress and to remember your preferences. We may also use browser storage to recognise a returning visitor where you have agreed to this. We do not use advertising cookies or third-party tracking cookies.

You can clear or block cookies and browser storage through your browser settings. If you do so, some parts of the Service may not work as intended, and information kept only in your browser will be lost.

9. How long we keep information

We keep personal data only for as long as it is reasonably needed for the purposes described in this policy, including to provide the Service, to compare use of the Service over time, to resolve disputes, to enforce our agreements and to meet legal, accounting or reporting obligations. Waitlist information is kept until the Service launches and for a reasonable period afterwards, or until you ask to be removed. When information is no longer needed, we delete it or de-identify it.

10. Security

We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss, misuse and alteration. Access to personal data is limited to people who need it to operate the Service. However, no method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your sign-in credentials confidential and for the security of your own devices.

If we become aware of a personal data breach that is likely to affect you, we will notify you and the relevant authorities where required by applicable law.

11. Your rights and choices

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may have the right to:

  • access a summary of the personal data we hold about you;
  • correct, complete or update inaccurate or incomplete personal data;
  • request erasure of your personal data;
  • withdraw consent you have given;
  • nominate another person to exercise your rights in the event of your death or incapacity;
  • raise a grievance with us, and, if it is not resolved, with the relevant data protection authority.

To exercise any of these rights, email us from the address associated with your account or waitlist entry. We may need to verify your identity before acting on a request. We will respond within the time required by applicable law. Some information may be retained where we are legally required or permitted to keep it.

You may unsubscribe from non-essential messages at any time using the link in the message or by contacting us.

12. Children

The Service is intended for businesses and is not directed at anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Information you provide about others

If you provide information about other people, such as colleagues or suppliers, you confirm that you have the right to do so and that they have been informed, where required, of how their information will be used.

14. Accuracy of information

You are responsible for the accuracy and lawfulness of the information you submit. Results produced by the Service depend on the information provided and on published reference data, and are provided for information purposes. They do not constitute legal, regulatory, financial or professional advice.

The Service may contain links to third-party websites, data sources and services. We are not responsible for the content or privacy practices of those third parties. We encourage you to read their privacy policies.

16. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last changed. Where changes are material, we will take reasonable steps to let you know, for example by a notice on the Service or by email. Your continued use of the Service after an update takes effect means you accept the updated policy.

17. Governing law

This policy is governed by the laws of India. Subject to any rights you have under the mandatory laws of your place of residence, the courts at Gandhinagar, Gujarat, India have exclusive jurisdiction over any matter arising out of or in connection with this policy.

18. Contact and grievances

For questions, requests or complaints about this policy or our handling of personal data, contact:

Grievance Officer, Mission Sustainability
Gandhinagar, Gujarat, India
Email: hello@missionsustainability.org

We will acknowledge your message and aim to resolve it promptly and within the time required by applicable law.