Privacy Policy
Last updated: January 27, 2026
This Privacy Policy explains how the Ecosystem Modeling and Data Consortium ("EMDC", "we", "us", "our") collects, uses, and protects personal data when you use our website, API, and related services (the "Platform"). The Platform is operated in accordance with applicable laws following the Colorado State University compliance with the European Union's General Data Protection Regulation, or GDPR, which became effective on May 25, 2018, and the California Consumer Protection Act, or CCPA, which became effective January 1, 2020. For a statement on these issues, see the Colorado State University GDPR site.
Who We Are and When This Policy Applies
The Platform is operated by the Ecosystem Modeling and Data Consortium at Colorado State University, which acts as the data controller for personal data processed through the Platform.
This Privacy Policy applies to visitors to the Platform, users who register for an account, and users who access our API. It does not apply to third-party websites or services linked from the Platform.
Personal Data We Collect and How We Use It
Account registration
When you create an account, we collect limited personal data necessary to manage access to the Platform. This includes your first and last name, email address, organization affiliation, country, and, where required, your organization's address.
We use this information to create and manage user accounts, communicate with registered users, verify organizational affiliation where applicable, provide access to downloads and platform features, maintain security, and comply with legal obligations.
API model runs
When users run models via our API, they may upload their own files. These files are processed solely to perform the requested model run. Uploaded data is cached temporarily to support execution and is automatically deleted once processing is complete. We do not store, retain, reuse, or analyze uploaded files beyond what is technically necessary to deliver the service.
Datasets
The Platform provides access to datasets that are available in the public domain. Viewing or accessing these datasets does not require registration. Registration is required only to download our curated or hosted versions of these datasets. Accessing public-domain datasets does not involve the collection of personal data beyond what is technically necessary to deliver the content.
Legal Basis, Sharing, and International Transfers
Where required by law, we process personal data based on contractual necessity (to provide the services you request), our legitimate interests (such as maintaining platform security and integrity), and consent where applicable.
We do not sell personal data. Personal data may be shared only with service providers acting on our instructions (such as hosting or infrastructure providers), professional advisors, or public authorities where required by law. All such recipients are required to protect personal data and process it in accordance with applicable legal requirements.
If personal data is transferred outside your country or region, we ensure appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.
Data Retention and Security
Account registration data is retained for as long as an account remains active or as required by law. Files submitted through the API are cached temporarily for processing and are automatically deleted after the model run is completed.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. However, no system can be guaranteed to be completely secure.
Children, Accessibility, and Fair Treatment
The Platform is not intended for children under the age of 13, or under 16 where required by law. We do not knowingly collect personal data from children.
We are committed to providing accessible digital services and to processing personal data in a fair and non-discriminatory manner. If you experience accessibility issues related to privacy or data protection, please contact us.
Changes and Contact
We may update this Privacy Policy from time to time. The "Last updated" date will reflect the most recent revision. Material changes will be communicated where required by law.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us.