Privacy Policy

How Apostra collects, uses, discloses, and otherwise processes personal information.

Last Updated July 13, 2026

Terms of Service

This Privacy Policy describes how Scope3 PBC, and our subsidiaries and affiliates (collectively, “Scope3,” “we, or “us”) collect, use, disclose, and otherwise process information about you. This Privacy Policy applies to information we collect when you access or use our websites and other online products and services that link to this Privacy Policy (collectively, our “Services”) and when you otherwise interact with us, such as at events, through our customer support channels, or on social media. We may provide different or additional notices of our privacy practices for certain offerings, in which case those notices will supplement or replace the disclosures in this Privacy Policy.

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy. If we make material changes, we will provide you with additional notice (such as by adding a statement to the Services or sending you a notification). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

Please note that we process personal information collected through our measurement, analytics, reporting, verification, media optimization, and content classification services as a data processor. For information about how we collect and process personal information collected through our services, please consult your agreement (including relevant data protection terms) for such information.

Collection of Information

The information we collect about you depends on how you interact with us. In this section, we describe the categories of information we collect and the sources of this information.

Information You Provide to Us

We collect information you provide directly to us. For example, we collect information directly from you when you create an account, make a purchase, fill out a form, sign up for marketing communications from us, request customer support, or otherwise communicate with us. The types of information that we collect directly from you include your name, email address, company name, job title, city, state, and country, and any other information you choose to provide. If you make a purchase via bank transfer, we collect directly from you your date of birth, passport or national ID card, bank card statement, and other information linking you to an address. If you make a purchase from us via credit card, we work with a third-party payment processor to process your payment information.

Information We Collect Automatically

We automatically collect information about your interactions with us or our Services, including:

  • Device, Usage, and Activity Information: We collect information about how you access our Services, including data about the device and network you use (such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, and browser type). We also collect information about your activity on our Services, including the route by which you access our Services, access dates and times, and browsing behavior (such as pages viewed and links clicked).
  • Information Collected by Cookies and Similar Tracking Technologies: We use tracking technologies, such as cookies and pixels, to collect information about your interactions with the Services and our marketing communications. These technologies help us improve our Services and marketing communications, personalize your experience, and analyze your interactions with us, including to see which areas and features of our Services are popular and count visits. For more information about the cookies and similar tracking technologies we use, and the choices available to you, see the Your Choices sections below.

Information We Collect from Other Sources

We obtain information from other sources. For example, we may collect information from our payment card processor.

Information We Derive

We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address.

Use of Information

We use the information we collect to evaluate, provide, maintain, and improve the Services and our products. We also use the information we collect to:

  • Process and fulfill your orders;
  • Develop new products and services;
  • Personalize your experience with us;
  • Send you technical notices, security alerts, support messages, and other transactional or relationship messages;
  • Send you marketing communications (see the Your Choices section below for information about how to opt out of these communications at any time);
  • Monitor and analyze trends, usage, and activities in connection with our products and services, analyze and track data; determine the popularity of certain content; and better understand your activity;
  • Detect, investigate, respond to, prosecute, and help protect against security incidents and other malicious, deceptive, fraudulent, or illegal activity, and help protect the rights and property of Scope3 and others; and
  • Comply with our legal and financial obligations.

We generally do not collect information that is considered “sensitive” under U.S. state privacy laws and we do not use or disclose sensitive personal information for the purpose of inferring characteristics about you. We also do not engage in “sales” or “sharing” of personal information or process personal information for “targeted advertising” purposes as those terms are defined by U.S. State privacy laws. We do not use personal information to develop, improve, or train generalized AI and/or ML models.

Disclosure of Information

We disclose information about you in the following scenarios:

  • Vendors and Service Providers. We make personal information available to our vendors, service providers, contractors and consultants who perform services on our behalf, such as companies that assist us with web hosting, payment processing, fraud prevention, access control, logging, customer service, analytics, and marketing.
  • Law Enforcement Authorities and Individuals Involved in Legal Proceedings. We disclose personal information in response to a request for information if we believe that disclosure is in accordance with, or required by, any applicable law, regulation, or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.
  • To Protect the Rights of Scope3 and Others. We may disclose personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Scope3, our users, the public, or others.
  • Professional Advisors. We disclose personal information to our legal, financial, insurance, and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
  • Corporate Transactions. We disclose personal information in connection with, or during negotiations of, certain corporate transactions, including a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
  • Corporate Affiliates. Personal information is disclosed between and among Scope3 and our parents, affiliates, subsidiaries, and other companies under common control and ownership.
  • With Your Consent or at Your Direction. We make personal information available to third parties when we have your consent or you intentionally direct us to do so.

We also disclose aggregated or de-identified information that cannot reasonably be used to identify you. We maintain and use this information only in a de-identified fashion and will not attempt to re-identify such information, except as permitted by law.

Data Retention

We store personal information associated with your account for as long as your account remains active. We store other personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Privacy Policy.

Your Choices

Account Information

You can access, correct, and delete certain information stored within your Scope3 account at any time by logging in and navigating to the settings menu.

Cookies and Similar Tracking Technologies

Scope3 uses cookies and similar tracking technologies, as described above. You can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect some of the functionality of our Services, such as the ability to review reports without logging in.

Communications Preferences

You may opt out of receiving promotional emails from Scope3 by following the instructions in those communications. If you opt out, we may still send you non-promotional emails, such as those about your account or orders.

Your Rights

Depending on where you reside, you may have the right to (1) access your personal data, including in a portable format, (2) request deletion or erasure of your personal data, (3) request correction of inaccurate personal data, (4) object to certain processing of your personal data, or (5) request we restrict certain processing. You have the right not to be discriminated against for exercising any of your privacy rights.

To exercise your rights, contact us by email at privacy@scope3.com or write to us at 228 Park Ave S, PMB 24984, New York, NY 10003. If you have a concern about our processing of personal data, we encourage you to contact us in the first instance.

Appeals If we deny your rights request, you may appeal our decision by contacting us. If you have concerns about the result of an appeal, or if we are unable to resolve you concerns about our processing of your personal data, you may contact the attorney general in the state where you reside or, if you are in Europe, lodge a complaint with the Data Protection Authority where you reside.

Authorized Agents Depending on where you reside, you may designate an authorized agent to submit an access, deletion, or correction request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may contact the individual who is the subject of the request to verify their own identity or confirm the authorized agent has permission to submit the request. If you are an authorized agent seeking to make an access, correction, or deletion request on behalf of a consumer, please contact us via email at privacy@scope3.com or write to us at 228 Park Ave S, PMB 24984, New York, NY 10003

Security

We maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and security of the information we process, including user data, such as encryption in transit and at rest and access controls limiting who may access such data.

Additional Information for Individuals in Europe

If you are located in Europe, this section applies to you.

International Transfers

Scope3 is based in the United States, and we and our service providers process and store personal information on servers located in the United States and other countries. Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (by putting in place appropriate safeguards, such as contractual clauses) or ensure that we can rely on an appropriate derogation under data protection laws. Where relevant, you may request access to any safeguard which we use to transfer your personal information outside of the European Economic Area, the United Kingdom, or Switzerland (although we may need to redact data transfer agreements for confidentiality reasons).

When we process your personal data as described in this Privacy Policy, we do so in reliance on the following lawful bases:

  • To perform our responsibilities under our contract with you (e.g., processing payments for and providing the products and services you requested);
  • When we have a legitimate interest in processing your personal information to operate our business or protect our interests (e.g., to provide, maintain, and improve our products and services, conduct data analytics, and communicate with you);
  • To comply with our legal obligations (e.g., to maintain a record of your consents and track those who have opted out of marketing communications); or
  • When we have your consent to do so (e.g., when you opt in to receive marketing communications from us). When consent is the legal basis for our processing of your personal information, you may withdraw such consent at any time.

Contact Us

If you have questions about this Privacy Policy, please contact us via email at privacy@scope3.com or mail at 228 Park Ave S, PMB 24984, New York, NY 10003.