Effective date: July 1, 2026 | Last updated: July 1, 2026
This Privacy Policy explains how personal data is collected and used through the carbonapps.co website (the “Website”). Our monday.com Marketplace applications are covered by a separate privacy policy provided with those applications; this policy concerns the Website only.
CarbonApps LLC y Carbon Web Print LLC (doing business as CarbonWeb) act as joint controllers for the personal data collected through the Website. In this policy, “we,” “us,” and “our” refer to both entities.
Contact:
You may exercise your rights, or raise any question about this policy, by contacting either entity.
Privacy contact. Privacy questions are handled by our internal privacy lead at support@carbonapps.co.
Our establishment. Carbon Web Print LLC and CarbonApps LLC are each established in the European Union.
This policy applies to personal data we collect when you visit carbonapps.co, submit a form or a support request (including through the support portal and form we operate through our support-desk provider), or otherwise interact with the Website.
It does not cover:
When you complete a contact form or request a demo or meeting, we collect the information you provide — typically your name, email address, company, and the content of your message or request.
We use this information to:
When you contact our technical support through our support portal or support form (which we link to from the Website), we collect your name, email address, and the details of your request, along with any information you choose to share so we can diagnose and resolve the issue. We use this only to respond to and resolve your support request (performance of, or steps taken at your request under, our agreement — Art. 6(1)(b); and our legitimate interest in providing support — Art. 6(1)(f)). The support portal and form are operated for us by our support-desk provider.
When you browse the Website, we and our analytics providers collect standard technical data — IP address, device and browser type, pages viewed, and referring page — and, where you consent, on-page interaction data such as clicks, scrolling, and session recordings used to produce aggregated heatmaps. We collect this through cookies and similar technologies, only with your consent where required (see Section 4). We also keep limited server logs to operate and secure the Website (legitimate interests in security and proper functioning — Art. 6(1)(f)).
We do not ask for, and you should not submit through the Website, any sensitive or special-category data (Article 9 GDPR), such as health information.
The Website uses cookies and similar technologies:
Where you decline analytics cookies, the Website remains fully usable. You can also control cookies through your browser settings.
We use a small number of service providers that process personal data on our behalf as our processors (Art. 28 GDPR), strictly on our instructions and only as needed to run the Website and respond to you. They do not use your personal data for their own purposes. The categories are:
We do not sell or share your personal data for cross-context behavioral advertising, and we do not disclose it except to these providers, to professional advisers, or where required by law.
We are established in the European Union, and the movement of personal data between our EU operations and the United States systems of the same companies is internal to our organization — it is not a disclosure to another organization and is not a restricted transfer under Chapter V GDPR.
Where personal data is disclosed to a service provider in a third country, the transfer is protected by an appropriate safeguard — the EU Standard Contractual Clauses adopted by the European Commission (with the UK International Data Transfer Addendum and equivalent Swiss safeguards where relevant), or an adequacy decision where one applies to that provider. The Standard Contractual Clauses remain our standing safeguard for transfers to the United States, whether or not any adequacy framework is in force. A copy of the safeguard relied upon for your data is available on request at support@carbonapps.co.
We keep contact-form and demo-request data for as long as needed to handle your inquiry and our relationship with you, and for up to 24 months after our last contact, unless you ask us to delete it sooner or a longer period is required by law. Analytics data is retained for up to 14 months. Server logs are kept for a short period for security and troubleshooting. Support requests are kept for up to 3 years after the last interaction on the request, then deleted. Marketing-suppression records (to honor an opt-out) are kept for as long as needed to respect your choice.
You have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict (Art. 18), and port (Art. 20) your personal data, and to object to processing based on our legitimate interests (Art. 21) — for direct marketing, your right to object is absolute and we will stop on request. Where we rely on consent (such as analytics cookies), you may withdraw it at any time without affecting prior processing.
To exercise these rights, contact support@carbonapps.co or contact@carbonweb.co; either entity will accept and process your request. We respond without undue delay and within one month, extendable by up to two further months for complex or numerous requests (Art. 12(3)). You may also lodge a complaint with your local supervisory authority — in the EU/EEA, a directory is at the European Data Protection Board; in the UK, the Information Commissioner’s Office (ico.org.uk). Our lead supervisory authority is the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
California (CCPA/CPRA) and other US state privacy laws. You have the right to know what personal information we collect, to delete it, to correct it, and to non-discrimination for exercising your rights. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. Submit a request at support@carbonapps.co; we will respond within 45 days.
CarbonApps LLC and Carbon Web Print LLC are joint controllers for the personal data collected through the Website (Art. 26 GDPR) and have agreed their respective responsibilities, including for handling your requests. You may exercise your rights against either controller; CarbonApps LLC is the contact point. The essence of the arrangement is reflected in this policy, and the full arrangement is available on request at support@carbonapps.co.
The Website is a business-to-business site and is not directed to children, and we do not knowingly collect personal data from children.
We may update this policy from time to time. The “Last updated” date above will reflect any change, and the current version is always available on the Website. Material changes will be highlighted on the Website.
CarbonApps LLC (designated contact point) — support@carbonapps.co Carbon Web Print LLC (joint controller) — contact@carbonweb.co 4135 Erie St, Willoughby, OH 44094, United States
