Privacy Policy

Last updated: 29 April 2026

1. Who We Are

Tao Climate operates a suite of climate intelligence products - including Fly (fly.taoclimate.com), EarthOS, AirOS, FuelOS, Scope, and Supplier - all served from our platform at taoclimateos.polsia.app. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR).

For any privacy matter, contact us at support@taoclimate.com.

2. Data We Collect

• Flight data - when you use the Fly calculator, we store the flight number, route (origin and destination airports), cabin class, and calculated CO2 emissions. This data is stored in our database and associated with your account if you are signed in, or anonymously if not.
• Email address (magic link authentication) - if you choose to sign in to Fly, we collect your email address to send you a one-time magic login link. We store this email to identify your account and associate your flight history with you. We do not send marketing emails without your explicit consent.
• Payment data via Stripe - if you purchase carbon removal through Fly, your payment is processed by Stripe, Inc. We receive a confirmation of payment and the amount, but we do not store your card number, CVC, or full payment details. Stripe processes payment data under its own Privacy Policy and is PCI DSS compliant.
• Usage data - pages visited, time on site, browser type, approximate location (country/region), referrer URL. Collected only with your consent via Google Analytics with IP anonymisation enabled.
• Necessary cookies - we store your cookie consent preference in a cookie (tao_cookie_consent). This is a strictly necessary cookie and does not require consent.
• Contact data - if you contact us directly, we store your email address and message content to respond to you.

3. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR) - processing your email address and flight/payment data is necessary to provide the Fly service and confirm carbon removal purchases.
• Consent (Art. 6(1)(a) GDPR) - analytics cookies are only set after you explicitly click "Accept".
• Legitimate interest (Art. 6(1)(f) GDPR) - storing your cookie consent preference and maintaining service security.

4. Cookies

See our Cookie Policy for a full list of cookies used and how to manage them.

5. Third Parties

• Stripe - payment processing for carbon removal purchases. Data is processed in the EU/US under Stripe's Data Processing Agreement. Stripe Privacy Policy.
• Google Analytics - loaded only with consent. Data is processed in the EU/US under Google's Data Processing Terms. IP addresses are anonymised. Google Privacy Policy.
• Google Fonts - font files are served via Google's CDN. Google may log your IP. Google Privacy Policy.

6. Data Retention

Flight history data is retained for the lifetime of your account, or until you request deletion. Payment confirmation records are retained for 7 years for legal and accounting purposes. Analytics data is retained for 14 months in Google Analytics. Cookie consent data is stored in your browser and expires after 365 days. Contact data is retained until your query is resolved.

7. Your Rights

Under GDPR you have the right to: access your data, rectify inaccurate data, erasure ("right to be forgotten"), restrict processing, data portability, and object to processing.

To exercise any of these rights - including requesting deletion of your flight data or account - contact us at support@taoclimate.com. We will respond within 30 days. Data deletion requests are handled by email for v1; include "Data Deletion Request" in the subject line.

8. Withdrawing Consent

You can change your cookie preference at any time via the "Cookie Settings" link in the footer of any page.

9. Contact

For privacy enquiries or data deletion requests, contact us at support@taoclimate.com.