Privacy Policy

1. Introduction

Iora Technologies, Inc. ("Iora," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Climate Intelligence platform and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and organization details when you create an account.
• Operational Data: Emissions data, facility information, supply chain data, and other environmental metrics you upload or connect to the Service.
• Communication Data: Information you provide when contacting support or submitting inquiries.

2.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, actions taken, time spent, and interaction patterns within the Service.
• Device Data: Browser type, operating system, device type, screen resolution, and IP address.
• Log Data: Server logs including access times, pages visited, and error reports.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To process and analyze your emissions and climate risk data
• To generate reports, dashboards, and analytics for your account
• To send administrative notifications (service updates, security alerts)
• To respond to inquiries and provide customer support
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms

4. How We Share Your Information

We do not sell your personal data. We may share information in the following circumstances:

• Service Providers: With third-party vendors who assist in operating the Service (hosting, analytics, payment processing), bound by contractual obligations to protect your data.
• Legal Requirements: When required by law, subpoena, or other legal process, or to protect our rights, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
• With Your Consent: When you have given explicit permission to share with specific third parties.

5. Data Security

We implement industry-standard security measures to protect your data, including AES-256 encryption at rest, TLS 1.3 encryption in transit, role-based access controls, regular security audits, and automated vulnerability scanning. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. We will also retain data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request a copy of your data in a portable format.
• Objection: Object to processing of your personal data.
• Restriction: Request restriction of processing in certain circumstances.

To exercise these rights, contact us at aakashr@lysandragroup.com. We will respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission where required by applicable law.

9. Cookies and Tracking

We use essential cookies to operate the Service and analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings. We do not use advertising cookies or cross-site tracking.

10. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or our data practices, contact: