Privacy Policy

Last updated: February 07, 2026

1. Introduction

At CiptaESG, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ESG assessment platform. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

We collect information that you provide directly to us, including:

Personal Information

  • Name and email address
  • Company name and industry
  • Job title and contact information
  • Account credentials

Business Information

  • Company size and number of employees
  • ESG assessment responses
  • Carbon footprint calculation data
  • Risk assessment information

Automatically Collected Data

  • IP address and browser type
  • Device information
  • Usage patterns and preferences
  • Cookies and similar technologies

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and maintain our ESG assessment services
  • To generate personalized sustainability reports and recommendations
  • To calculate carbon footprints and track emissions
  • To improve and optimize our platform
  • To communicate with you about updates, features, and support
  • To ensure the security and integrity of our services
  • To comply with legal obligations

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encrypted data transmission (SSL/TLS)

Secure data storage

Regular security audits

Access controls and authentication

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With your consent or at your direction
  • To comply with legal obligations or respond to lawful requests
  • To protect our rights, privacy, safety, or property
  • With service providers who assist in our operations (under confidentiality agreements)

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time.

7. Your Rights

Under applicable data protection laws, you have the following rights:

Right to Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate personal data

Right to Erasure

Request deletion of your data

Right to Portability

Receive your data in a portable format

8. Cookies

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies help us understand how you use our services and allow us to remember your preferences. You can control cookie settings through your browser preferences, though some features may not function properly if cookies are disabled.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.