Greenpixie Logo

Privacy Policy

Effective Date: April 2, 2026 

Last Updated: April 2, 2026 

This policy explains how Greenpixie Ltd ("Greenpixie", "we", "us") collects, uses, and protects personal data when you visit our website, use our free tools (including the AI Sustainability Calculator), or create an account on our platform.

We are the data controller for personal data collected through these services. We are registered in England and Wales.

If you have questions about this policy or how we handle your data, contact us at: [email protected]

1. What data we collect and why

1.1 Website visitors (greenpixie.com)

IP address We collect this for security, rate limiting, and service delivery by our hosting provider (Vercel). Legal basis: Legitimate interests.

Pages visited, time on site, referrer, user journey data We collect this for analytics to understand how the site is used and improve it. Legal basis: Consent (via cookie banner).

Session recordings, heatmaps, feature usage, and behavioural analytics We collect this for understanding usability, user behaviour, and product engagement (via PostHog). Legal basis: Consent (via cookie banner).

Contact form submissions (name, email, message) We collect this to respond to your enquiry. Legal basis: Legitimate interests / pre-contract.

Marketing email address We collect this to send product updates or communications you have requested. Legal basis: Consent.

1.2 Free tool users (including the AI Sustainability Calculator)

We offer free tools that allow you to explore sustainability data and estimates for your cloud infrastructure. Some tools are available without an account; others require you to log in.

IP address We collect this for rate limiting to prevent abuse. Legal basis: Legitimate interests.

Tool inputs and outputs (e.g. cloud usage data, infrastructure parameters, generated estimates) We collect this for generating your results, improving our products, understanding customer needs, and informing our commercial and product development. Legal basis: Legitimate interests.

Important clarifications:

Tool inputs are retained for all users, whether logged in or not. We use this data to improve our products, understand customer needs, and support our sales and marketing activities.

We may aggregate and anonymise tool input data to produce benchmarks, industry models, and research insights (for example, typical energy consumption patterns by cloud provider, region, or workload type). Aggregated outputs do not identify individual users or organisations.

Data is retained until deletion is requested or until the data is no longer needed for the stated purposes.

We do not ask you to enter personal data into our tools. If you choose to include personally identifiable information in your inputs, we ask that you avoid doing so.

1.3 Authenticated users (Greenpixie platform accounts)

Account creation and authentication is handled by Clerk, a third-party identity provider. Your Greenpixie account may be used to access free tools, and in the future may provide access to additional Greenpixie products and services.

First name, last name, email address We collect this for creating and managing your account. Legal basis: Contract.

Company name We collect this for associating your account with your organisation. Legal basis: Contract / legitimate interests.

Password This is used to authenticate your account. It is stored and managed by Clerk and is not accessible to Greenpixie. Legal basis: Contract.

Authentication metadata (login timestamps, session tokens) We collect this for security and session management. Legal basis: Contract / legitimate interests.

IP address (during authentication) We collect this for fraud prevention and security. Legal basis: Legitimate interests.

Clerk acts as a data processor on our behalf. Your account data is stored within Clerk's infrastructure. For details of how Clerk handles personal data, see Clerk's Privacy Policy.

2. Cookies and tracking technologies

We use cookies and similar technologies on our website. When you first visit, a banner will ask for your consent before any non-essential cookies are set.

Strictly necessary cookies These include session security, rate limiting, and Clerk authentication. No consent is required.

Analytics and behavioural tracking cookies These include PostHog (page views, session recordings, heatmaps, feature usage, user journeys, behavioural analytics). Consent is required via the cookie banner.

Marketing cookies None currently in use.

You can withdraw consent at any time by clicking "Cookie settings" in the footer of our website, or by clearing your cookies in your browser.

We aim to comply with the UK Privacy and Electronic Communications Regulations (PECR).

3. Third-party services and linked platforms

3.1 Sub-processors

We rely on the following sub-processors to deliver our services:

Vercel Role: Website hosting. Data shared: IP address, request logs. Location: USA (SCCs).

Clerk Role: User authentication. Data shared: Name, email, company name, session metadata. Location: USA (SCCs).

PostHog Role: Product and behavioural analytics. Data shared: IP address, session data, behavioural events, feature usage. Location: EU / USA (SCCs).

Mailchimp (Intuit) Role: Email marketing and communications. Data shared: Name, email address. Location: USA (SCCs).

Salesforce Role: Customer relationship management. Data shared: Name, email address, company name. Location: USA (SCCs).

Monday.com Role: Support ticket management. Data shared: Name, email address, support request content. Location: USA (SCCs).

Where data is transferred outside the UK or EU, we rely on appropriate safeguards, primarily Standard Contractual Clauses (SCCs) approved by the ICO or European Commission.

3.2 GreenOps Academy

Our website links to the GreenOps Academy, an online learning platform hosted on LearnWorlds. The GreenOps Academy is a separate service with its own registration process. When you create an account on the GreenOps Academy, your data is handled by LearnWorlds under their own privacy policy.

We may receive lead data (such as name and email address) from the GreenOps Academy and unify it with data held in our marketing and CRM tools (Mailchimp and Salesforce) to support communications and commercial development.

4. Data retention

Website analytics (PostHog): 12 months.

Tool inputs (all users, logged in or logged out): Retained until deletion is requested or until the data is no longer needed for the stated purposes.

Account data (name, email, company name via Clerk): Duration of account, plus 30 days after deletion.

Contact form and email enquiries: 2 years.

Server and access logs (Vercel): Per Vercel's default retention (typically 30 days).

IP addresses for rate limiting: 30 days.

Marketing and CRM data (Mailchimp, Salesforce): Retained until you unsubscribe or request deletion, or until the data is no longer needed.

We will review and delete data that is no longer necessary for the purpose for which it was collected.

5. Your rights

Under UK GDPR (and EU GDPR where applicable), you have the right to:

Access the personal data we hold about you.

Rectify inaccurate personal data.

Erase your personal data (subject to certain conditions).

Restrict processing in certain circumstances.

Object to processing based on legitimate interests.

Data portability for data you provided under consent or contract.

To exercise any of these rights, email [email protected]. We will respond within one calendar month.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with the relevant supervisory authority in your EU member state.

6. Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or misuse. These include access controls, encryption in transit and at rest, and regular security reviews.

Greenpixie Ltd holds ISO 27001:2022 certification (certificate number IS 826851). The scope of certification covers our products for cloud sustainability.

7. Children

Our services are not directed at children under 16. We do not knowingly collect personal data from anyone under 16.

8. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Material changes will be communicated by email to registered users or by a prominent notice on the website.

9. Contact

Greenpixie Ltd City Tower, 4th Floor East, 40 Basinghall Street, London, EC2V 5DE

[email protected]

ICO registration number: ZB183025