Privacy Policy

AKI Petroleum Group SARL ("AKI", "AKI Expert", "we", "our", "us") operates the AKI Expert platform (the "Platform"), a business-facilitation service that connects qualified project owners, investors, buyers, suppliers, financial institutions and consultants across Africa's mining, petroleum, energy and natural-resource sectors.

This Privacy Policy explains what personal and organisational information we collect, how we use and protect it, and the rights available to you under applicable laws, including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

AKI Petroleum Group SARL, Conakry, Republic of Guinea, acts as the data controller for information processed through the Platform. Privacy inquiries: compliance@akiexpert.com.

3.1 Personal Information

• Identity data: full name, professional title, nationality.
• Contact data: business email address, telephone number, postal address.
• Account data: username, password (hashed), authentication factors.
• Verification data: government-issued ID, proof of address, professional credentials.

3.2 Business & Organisational Information

• Company name, registration number, jurisdiction, ownership structure.
• Certificate of incorporation, licences, permits, tax registration.
• Financial standing information (proof of funds, bank references) where relevant.
• Mandate content, project descriptions, uploaded documentation.

3.3 Technical & Usage Information

• IP address, device identifiers, browser type, operating system.
• Log data, timestamps, pages visited, documents accessed.
• Cookies and similar technologies (see our Cookie Policy).

3.4 Marketing Preferences

Communication preferences and opt-in/opt-out records for insights, newsletters and event invitations.

We process personal data for the following purposes and legal bases (GDPR Art. 6):

• Contract performance: account creation, mandate qualification, matching, communication.
• Legal obligation: KYC/AML, sanctions screening, tax and record-keeping obligations.
• Legitimate interests: fraud prevention, platform security, service improvement, business analytics.
• Consent: optional marketing communications, non-essential cookies.

We do not sell personal data. We share information only with:

• Counterparties expressly approved by you under a mandate and NDA.
• Service providers under contract (hosting, email, analytics, KYC/AML providers, e-signature).
• Advisors: legal counsel, auditors, insurers, subject to professional confidentiality.
• Regulators and authorities where required by law, court order or legitimate investigation.
• An acquirer or successor in the event of a merger, acquisition or corporate restructuring.

Data may be processed in jurisdictions outside your country of residence, including the European Economic Area, the United Kingdom, the United States, Canada and the Republic of Guinea. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

We retain personal data only as long as necessary for the purposes described in this policy, to comply with legal obligations (typically up to 10 years for financial and compliance records), resolve disputes and enforce agreements. Account data is deleted or anonymised within a reasonable period after account closure.

• Encryption in transit (TLS 1.2+) and at rest (AES-256 where applicable).
• Role-based access controls and least-privilege administration.
• Two-factor authentication available to accounts.
• Confidential documents held in a controlled Virtual Data Room with audit logging.
• Periodic security reviews, backups and incident-response procedures.

No online service is fully immune to risk. Users are responsible for safeguarding their credentials and reporting suspected incidents promptly.

Depending on your jurisdiction you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data ("right to be forgotten").
• Request restriction or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with a competent supervisory authority.

Requests: privacy@akiexpert.com. We respond within 30 days.

California residents (CCPA/CPRA): you have the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. AKI does not sell personal information.

Canada residents (PIPEDA): you may contact our Privacy Officer to access or challenge the accuracy of your personal information.

See our Cookie Policy for details of cookies, analytics tools and how to manage your preferences.

The Platform is intended exclusively for professional users aged 18 or over. We do not knowingly collect data from minors.

We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision. Material changes will be notified through the Platform or by email where appropriate.

AKI Petroleum Group SARL — Conakry, Republic of Guinea
Privacy inquiries: privacy@akiexpert.com
Compliance: compliance@akiexpert.com