How personal and business data is handled.

1. Controller and contact

The controller responsible for the processing described in this policy is Consai Web Agency FZ-LLC, Compass Building, Al Hulaila Industrial Zone, Ras Al Khaimah, United Arab Emirates. Privacy and platform-data enquiries may be sent to info@consaiagroos.com; legal company enquiries may be sent to info@consaiagency.com.

2. Scope of this policy

This policy applies to the CONSAI Agro & Energy OS public website, registration and onboarding paths, role-based platform areas, CRM and opportunity workflows, marketplace and exhibition features, strategic-partner activities, support channels and connected CONSAI community and cloud services where CONSAI determines the purposes and means of processing.

A third-party website, integration, payment service, registry, verification body or external communication service may apply its own privacy terms.

3. Data we may process

The data processed depends on the role, service and stage of the relationship.

• Identity and contact data, including name, business email, telephone number, country and account identifiers.
• Organization, role, verification and professional-profile data.
• Farmer, farm, cooperative, crop, livestock, land, location and operational information supplied for onboarding or a selected workflow.
• Marketplace listings, RFQs, project requirements, supplier capabilities, commercial interests and communication records.
• Energy, carbon, climate, finance, ESG, MRV and project-preparation information submitted by participants.
• Account, authentication, permission, support, security and activity records.
• Technical website data such as IP address, browser type, device information, requested pages, timestamps and consent preferences.
• Documents and evidence submitted for verification, diligence, project preparation or controlled collaboration.

4. Sources of data

We receive data directly from users and authorized representatives, from organizations or strategic partners conducting legitimate onboarding, from connected services selected by the user, and from public professional or business sources used for relevant B2B research and outreach.

A person supplying information about another individual must be authorized to do so and must provide any required notice or obtain any required consent.

5. Purposes of processing

We process data to provide and secure accounts; verify roles and organizations; operate CRM, marketplace, RFQ, exhibition, partner, community and project workflows; respond to enquiries and support requests; match relevant participants and opportunities; manage documents and evidence; administer payments and subscriptions where applicable; prevent misuse; maintain records; improve services; and comply with legal obligations.

Data used for market, opportunity or AI-supported analysis is intended to support human review and operational prioritization. It is not a guarantee of financing, commercial success, verification, carbon-credit issuance or transaction completion.

6. Legal grounds

Depending on the activity and applicable law, processing may be based on performance of a contract or steps requested before a contract, consent, compliance with a legal obligation, protection of legitimate interests, or establishment and defense of legal claims.

Legitimate interests may include operating and securing the platform, maintaining relevant professional relationships, preventing fraud, improving services and conducting proportionate B2B communication. Consent can be withdrawn for future processing where consent is the applicable basis.

7. Website analytics, cookies and similar technologies

Essential technologies may be used to provide security, session continuity, language, consent and core website functions. Optional analytics is activated only after the relevant consent choice where required.

CONSAI may use self-hosted analytics to understand aggregated website use and performance. Users can reject optional analytics through the consent interface. Browser or device settings may provide additional controls.

8. Roles, visibility and controlled access

Public profiles, member-only information and sensitive project records follow different visibility rules. Access is limited according to role, authorization, workflow stage and operational need.

Registration does not make every submitted record public. Contact details, documents, financial information and evidence may be withheld until the relevant review or permission boundary is satisfied.

9. CRM, leads and professional outreach

CONSAI may maintain professional contact records and organization information for legitimate ecosystem development, partnership, supplier, buyer, investor and institutional outreach. Records should be relevant to the intended professional purpose and sourced lawfully.

Recipients may object to direct marketing or request that no further information be sent. Suppression information may be retained to respect that request.

10. AI-supported processing

AI-supported tools may help classify records, detect completeness issues, identify potentially relevant opportunities, draft summaries or prioritize review. Material commercial, eligibility, verification, account or enforcement decisions remain subject to human review.

CONSAI does not represent AI-generated output as independently verified fact. Users must review recommendations, extracted data and generated content before relying on them.

11. Recipients and disclosures

Data may be accessed by authorized CONSAI personnel, contracted service providers, hosting and infrastructure providers, professional advisers, payment or communication providers, and verified ecosystem participants where disclosure is necessary for the requested workflow and permitted by the applicable access rules.

We may disclose information where required by law, court order or competent authority, or where necessary to protect rights, security and the integrity of the platform. Personal data is not made publicly available or sold merely because a person registers.

12. International processing

CONSAI operates from the United Arab Emirates and supports international participants. Data may therefore be processed in or accessed from countries other than the individual’s country of residence.

Where an applicable law requires specific safeguards for an international transfer, CONSAI will use an available lawful mechanism or limit the transfer accordingly.

13. Retention

We retain personal data only for as long as reasonably necessary for the stated purpose, an active account or relationship, security and audit requirements, dispute management and applicable legal or accounting obligations.

Retention periods vary by record type. Data may be deleted, anonymized, archived with restricted access or retained in a suppression record where necessary to honor an objection or comply with law.

14. Security

CONSAI applies technical and organizational measures appropriate to the nature and risk of the processing. These include permission-based access, authentication controls, secure transport, administrative oversight, backups, logging and controlled handling of documents and evidence.

No internet service can guarantee absolute security. Users must protect their credentials, use accurate contact information and notify CONSAI promptly of suspected unauthorized access.

15. Individual rights

Subject to applicable law and any lawful limitations, individuals may request information and access, correction, deletion, restriction, portability, or object to certain processing. They may withdraw consent for future processing where consent is the legal basis and may request human review of a decision that significantly affects them.

Requests should be sent to info@consaiagroos.com. CONSAI may request proportionate information to verify identity and authority before acting. Individuals may also contact the competent supervisory authority available under the law that applies to them.

16. Children

CONSAI is designed for professional, institutional and commercial participation and is not directed to children. A minor’s data should be submitted only through a legally authorized guardian or institution and where a valid program and lawful basis exist.

17. Policy updates

This policy may be updated when services, processing activities or legal requirements change. The current version and effective date will be published on this page. Material changes may also be communicated through the platform or registered contact channel.