Privacy Policy

Commodity Plus operates a verified commodity trade infrastructure for African origins. This policy explains what personal information the platform collects, how that information is used, and what rights you have over it.

This is a placeholder.The final policy is being prepared with counsel and will replace this text before the platform reaches general availability. The sections below describe the platform's intended data practices in plain language so early users can review them.

Information we collect

When you create an account we record your email address, display name, and authentication metadata. When you act on behalf of an organisation we record your membership and role. Business profiles (supplier, buyer, processor) carry the operational information you choose to publish — commodity coverage, capacity, certifications, and contact details.

How we use information

• To authenticate you and authorise actions on the platform.
• To match supplier capabilities against buyer demand and surface relevant opportunities in your console.
• To send transactional messages tied to your activity.
• To detect and prevent abuse, fraud, and sanctions breaches.

Verification data

For verification flows (KYC, business registration, mine site chain-of-custody) we collect identity and corporate documents, which are stored encrypted at rest and accessible only to platform staff with a documented operational need.

Sharing

Operational counterparties (a buyer and supplier engaged in a request) see each other's business profile data. Platform staff with verification responsibilities see verification material. We do not sell personal data, and we do not share it with third parties for advertising.

Your rights

You can review and update profile data from your account settings. You can request export or deletion of personal data by emailing the address below. Deletion requests are honoured within 30 days unless a regulatory hold applies.

Contact

Email privacy@commodity.plus with any privacy-related question. Our Data Protection Officer reviews every request within five business days.