Privacy Policy for Carbon AI Hub

Carbon AI Hub (the website dashboard and the Carbon AI Hub by ScopeLocal browser extension) is a free service run by ScopeLocal, the data controller for the personal data described here.

ScopeLocal Ltd, registered in England and Wales, company number 16916914. Registered office: 1st Floor, 11 Freeport Office Village, Century Drive, Braintree, Essex, CM77 8YG.

Contact: info@scopelocal.co.uk

To use the dashboard you create an account with your email address (by email link or password). We use it to sign you in, keep your usage history in your account and send account emails such as sign-in links. We do not send marketing emails.

The extension only runs on a fixed list of supported AI chat websites. When you send a prompt there it sends to your account:

• estimated input and output token counts;
• the model name shown on the page, or the site name when no model is visible;
• the website domain (for example chatgpt.com).

Prompt and response text is read only on your device to count characters. It is never sent to us and never saved in extension storage. The extension stores your connection details (endpoint and API key) and site preferences locally in your browser. Requests are authenticated with an API key you create in Settings.

Energy, carbon and water estimates are calculated on our servers from the token counts and model tier, and stored with the time the event was received. These are indicative estimates, not measurements of any provider's actual usage.

If you connect an OpenAI or Anthropic organisation, you provide an admin API key. We store it encrypted and use it only to download usage reports (token totals per model per day). We do not read prompts, responses or files through these keys. Disconnecting an account deletes the stored key; usage already imported stays in your history.

We keep your account, usage history and API keys for as long as your account exists. We have no automatic deletion schedule at present. Deleted API keys and disconnected provider keys are removed immediately.

• In Settings you can delete extension API keys and tracked sites, and disconnect connected AI accounts.
• To delete your whole account and usage history, email info@scopelocal.co.uk. We will confirm and complete deletion within one month.
• Removing the extension from your browser deletes its locally stored connection details.

• Lovable — website hosting and our managed backend (database, authentication and server functions, built on Supabase).
• Lovable's email service — delivery of sign-in and account emails.
• OpenAI and Anthropic — only if you connect an account, to return your own usage reports.

Some of these providers may process data outside the UK under appropriate safeguards. We do not sell or share your data for advertising.

We process your data to provide the service you signed up for (contract) and to keep it secure and working (legitimate interests).

You can ask for access to, correction of, deletion of, or a copy of your personal data, and object to or ask us to restrict processing. Email info@scopelocal.co.uk. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

We will update this page and the date above if this policy changes.