Privacy Policy

1. Introduction

This Privacy Policy describes how Agrobridge collects, uses, retains, protects, and shares the personal data of users of its B2B platform.

Agrobridge is a digital platform for professionals in the agricultural and agri-food sectors. It allows producers, exporters, importers, wholesalers, distributors, and other professionals to search for business partners, showcase their products, publish offers, express sourcing needs, communicate, and, where the corresponding features are available, conclude transactions.

Agrobridge places particular importance on the confidentiality and security of the information its users entrust to it.

This Policy applies to the website, applications, digital services, and features offered by Agrobridge.

2. Data controller

The controller of personal data processing is:

The full legal information regarding the entity operating Agrobridge is available in the "Legal Notice" section of the platform.

3. Personal data collected

Depending on how you use Agrobridge, we may collect the following categories of data.

3.1 Personal information

When an account is created and used, we may collect:

• first and last name;
• role within the business;
• professional email address;
• professional phone number;
• account identifier;
• login information;
• language and account preferences.

3.2 Business information

To enable our B2B marketplace to function, we may collect:

• company name;
• trade name;
• legal form;
• country;
• business address;
• registration number;
• tax number;
• industry sector;
• type of business;
• website;
• business contact details;
• information relating to the commercial activity.

3.3 Product and seller information

Users who offer products may provide:

• product categories;
• product names and varieties;
• available volumes;
• production capacities;
• availability periods;
• origin of products;
• targeted export markets;
• prices or commercial terms;
• delivery conditions;
• Incoterms;
• certifications;
• technical documents;
• photos and videos;
• information relating to condition and quality.

3.4 Buyer information

Buyers may provide:

• products sought;
• desired volumes;
• sourcing frequency;
• quality criteria;
• certification requirements;
• desired countries or regions of origin;
• destinations;
• logistics requirements;
• budgets or price ranges;
• commercial terms under consideration.

3.5 Transaction data

When the corresponding features are used, we may process:

• order references;
• products concerned;
• quantities;
• prices;
• currencies;
• order status;
• delivery information;
• returns;
• refunds;
• reviews;
• related commercial documents.

3.6 Technical data

We may also collect certain technical data, including:

• IP address;
• device type;
• operating system;
• browser;
• technical identifiers;
• date and time of connection;
• pages viewed;
• features used;
• security logs;
• data relating to technical errors.

4. Payment data

Payments made on Agrobridge may be processed by third-party payment providers, in particular Stripe, depending on the payment configuration used by the platform.

Because payment is processed directly by the payment provider, sensitive banking information may be transmitted directly to it.

Agrobridge does not retain full bank card data and only stores the information strictly necessary for tracking transactions.

Processing carried out by payment providers is subject to their own terms and privacy policies.

5. Communication data

When you use Agrobridge's communication features, we may process the following information:

• messages;
• shared files and documents;
• recipients;
• dates and times of communications;
• related technical information.

This data may be used to enable business exchanges, ensure the security of the platform, prevent abuse, and handle support requests or complaints.

6. Purposes of processing

Agrobridge uses the data collected for the following purposes:

• creating and managing user accounts;
• verifying professional information;
• enabling the marketplace to function;
• presenting products and professional profiles;
• facilitating matchmaking between buyers and sellers;
• enabling communication between users;
• processing and tracking orders;
• facilitating payments;
• preventing fraud and abuse;
• ensuring the security of the platform;
• providing customer service;
• handling complaints;
• improving features;
• developing new services;
• analyzing platform usage;
• producing statistics;
• improving search and recommendation systems;
• offering relevant business matching;
• complying with legal obligations.

7. Legal bases for processing

Where the General Data Protection Regulation ("GDPR") applies, Agrobridge processes personal data on an appropriate legal basis.

Depending on the circumstances, processing may be based on:

Performance of a contract

Where processing is necessary to create an account, provide Agrobridge's services, or perform a contract with the user.

Legal obligation

Where processing is necessary to comply with a legal obligation, in particular accounting, tax, or regulatory.

Legitimate interest

Where processing is necessary for the legitimate interests of Agrobridge or a third party, in particular to ensure security, prevent fraud, protect the services, and improve the platform, subject to respecting the rights and freedoms of the data subjects.

Consent

Where consent is required by applicable regulations, Agrobridge requests the user's consent before the relevant processing.

Where processing is based on consent, it may be withdrawn at any time.

8. Intelligent matching and artificial intelligence

Agrobridge uses automation and artificial intelligence technologies to facilitate matching between users.

The matching system may in particular analyze the following parameters:

• products offered;
• products sought;
• varieties;
• volumes;
• capacities;
• availability;
• certifications;
• location;
• quality criteria;
• prices or commercial terms;
• preferences provided;
• other relevant information available on the platform.

This information may be used to calculate a level of compatibility between an offer and a request.

The result may take the form of a score or a recommendation.

The compatibility score is a tool to assist with search and matchmaking. It is not a guarantee as to the quality, compliance, availability, or successful completion of a transaction.

Users remain responsible for their business decisions and must carry out their own checks before concluding a transaction.

9. Service improvement

Agrobridge may analyze certain data relating to the use of its services in order to improve:

• the relevance of matching;
• search results;
• recommendations;
• the user experience;
• the platform's features.

Where possible, these analyses are carried out using aggregated or anonymized data.

Agrobridge does not process personal data for purposes incompatible with those described in this Policy without having an appropriate legal basis.

10. Information visible to other users

Agrobridge is a B2B platform. Certain professional information is accessible to other users to facilitate exchanges.

Depending on account settings and the features used, the following may in particular be visible:

• company name;
• country;
• industry sector;
• products;
• published business information;
• declared certifications;
• photos and videos;
• reviews;
• professional information voluntarily provided.

Users are responsible for the information they choose to publish on their profiles or listings.

11. Verification of professional users

To strengthen trust in the platform, Agrobridge may carry out certain checks on professional users.

These checks may in particular concern:

• identity;
• the existence of the business;
• registration information;
• professional documents;
• certifications;
• contact details;
• business information.

Where a profile is identified as "verified", this indication means only that the profile met Agrobridge's verification criteria at the time of that verification.

Verification does not constitute an absolute guarantee as to the quality of products, solvency, reliability, or the performance of contractual obligations by the professionals concerned.

12. Data sharing

Agrobridge may share certain data with third parties under the conditions described below.

Recipients may in particular include:

• other platform users, when communication is necessary for matchmaking;
• insurance providers;
• cloud service providers;
• payment providers;
• IT service providers;
• analytics service providers;
• communication and email service providers;
• commercial guarantee providers;
• logistics providers;
• professional advisors (legal, accounting, etc.);
• public authorities where required by law.

Agrobridge limits access to those individuals and providers who need it for the relevant purposes.

13. Service providers

Agrobridge may use specialized providers to ensure the platform runs properly.

These providers may in particular operate in the following areas:

• hosting;
• storage;
• payment;
• security;
• analytics;
• email delivery;
• notifications;
• artificial intelligence;
• technical support.

Where applicable regulations require it, Agrobridge governs its relationships with its subcontractors through appropriate data protection agreements.

14. International transfers

Agrobridge is an international trade platform; data transfers to other countries may therefore be necessary.

Where the GDPR applies, Agrobridge puts in place the mechanisms required to govern international transfers of personal data, in particular:

• an adequacy decision;
• standard contractual clauses;
• appropriate safeguards;
• or any other recognized legal mechanism.

Transfers are only carried out to the extent necessary to provide the services or for the purposes described in this Policy.

15. Data retention

Agrobridge retains personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The retention period depends in particular on:

• the nature of the data;
• the contractual relationship;
• the length of time the account has been in use;
• accounting and tax obligations;
• legal obligations;
• security needs;
• the need to establish, exercise, or defend legal claims.

Once the applicable period expires, data is deleted or anonymized, as technically and legally appropriate.

16. Account deletion

The user may request the deletion of their account in accordance with the features available on the platform.

Deleting an account may result in the deletion or anonymization of the associated data.

Certain data may nonetheless be retained where necessary to:

• comply with a legal obligation;
• comply with an accounting or tax obligation;
• prevent fraud;
• ensure security;
• establish, exercise, or defend a legal claim;
• comply with a contractual obligation.

17. Cookies and similar technologies

Agrobridge uses cookies and similar technologies.

Cookies are used in particular to:

• maintain the session;
• authenticate the user;
• secure transactions;
• remember certain preferences;
• measure platform usage;
• improve performance;
• analyze the use of the services;
• personalize certain features.

Where consent is required for certain cookies or similar technologies, Agrobridge provides a mechanism allowing the user to manage their preferences.

18. Data security

Agrobridge implements technical and organizational measures designed to protect personal data against:

• unauthorized access;
• loss;
• destruction;
• alteration;
• unauthorized disclosure;
• misuse.

These measures may in particular include:

• encryption of communications;
• access controls;
• strong authentication;
• permission management;
• backups;
• security monitoring;
• event logging;
• incident management procedures.

Despite these measures, no computer system can guarantee absolute security.

19. Protection of business information

In the context of B2B relationships, users may exchange sensitive or confidential business information, in particular:

• prices;
• volumes;
• contracts;
• technical documents;
• commercial terms;
• information relating to suppliers or customers.

Agrobridge applies access controls designed to limit access to this information to authorized individuals or users.

Users themselves must avoid posting confidential information in publicly accessible spaces.

20. Business communications

Agrobridge may send various types of communications to its users, in particular:

• registration confirmation;
• security notifications;
• order-related information;
• transaction-related messages;
• important service information.

Agrobridge is also authorized to send commercial communications, under the conditions permitted by applicable regulations.

Where consent is required, it will be requested before the relevant communications are sent.

The user may unsubscribe from marketing communications at any time, using the unsubscribe link included in the communications or the settings available on the platform.

21. Anonymized data and statistics

Agrobridge may use anonymized or aggregated data for statistics and analysis purposes relating in particular to:

• products sought;
• demand trends;
• product categories;
• geographic areas;
• business trends;
• platform usage.

This data may be used to develop Agrobridge Intelligence services and improve the platform.

When genuinely anonymized, this data no longer allows a person to be identified, directly or indirectly.

22. User rights

Where applicable regulations, in particular the GDPR, provide for it, the user has the following rights:

Right of access

Request access to the personal data held by Agrobridge.

Right to rectification

Require correction of inaccurate or incomplete information.

Right to erasure

Request deletion of their personal data.

Right to restriction of processing

Require the restriction of processing in situations provided for by the regulations.

Right to object

Object to certain processing where the legal conditions are met.

Right to data portability

Receive their personal data in a structured, commonly used, and machine-readable format.

Right to withdraw consent

Where processing is based on consent, it may be withdrawn at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before that withdrawal.

23. Exercising your rights

To exercise your rights or obtain information about the processing of your data, you may contact Agrobridge:

To protect the personal data concerned, Agrobridge may request additional information to verify the identity of the person making the request.

Agrobridge processes requests within the timeframes provided for by applicable regulations.

24. Lodging a complaint with a supervisory authority

If you believe that your data protection rights are not being respected, you may lodge a complaint with the competent supervisory authority.

For processing subject to Moroccan law, the competent authority is in particular the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

For processing subject to the GDPR, the competent authority may be the data protection authority of the relevant country.

25. Children's data

Agrobridge is a B2B platform intended for professionals.

Agrobridge's services are not intended to be used by minors.

Agrobridge does not knowingly collect personal data relating to minors.

If we discover that an account has been created by a person not authorized to use our services, we may take appropriate measures, including closing the account and deleting the data where legally possible.

26. Sensitive data

Agrobridge does not seek to collect special categories of data (so-called "sensitive" data), such as racial or ethnic origin, political opinions, religious beliefs, or health information.

Users should avoid transmitting such information through their profiles, listings, or communications where it is not necessary for the use of the services.

27. Links to third-party services

The Agrobridge platform may contain links to resources or integrate third-party services.

Agrobridge is not responsible for the privacy practices of sites or services that are not operated by Agrobridge.

We recommend that users review the privacy policies of third-party services before providing them with personal data.

28. Changes to the Privacy Policy

Agrobridge may amend this Privacy Policy in order to take into account, in particular:

• the evolution of its services;
• new features;
• technical changes;
• new providers;
• new regulatory requirements;
• the evolution of its data processing practices.

The date of the last update is shown at the top of this page.

Where applicable regulations require it, Agrobridge will inform users of significant changes through appropriate means.

29. Contact

For any questions regarding this Privacy Policy, the processing of data, or the exercise of your rights:

30. Effective date

This Privacy Policy takes effect on August 16, 2026.

It applies to the processing of personal data carried out by Agrobridge from that date, subject to applicable legal provisions.

Version: 1.0