Compliance Layer

Privacy Policy

Last Updated: April 20, 2026. Governing energy trade data protocols.

01 1. Data Collection & Institutional KYC

PetraFlow collects and processes data necessary for the execution of high-value energy transactions. This includes, but is not limited to: Corporate registration documents, Certificates of Incorporation, Proof of Funds (POF), and personal identification for 'Know Your Customer' (KYC) compliance. We operate on a 'Need to Know' basis, masking participant identities until procedural milestones require revelation.

02 2. Financial Data and Escrow

When utilizing our hybrid escrow services, we facilitate the exchange of financial instructions between neutral third-party agents and transaction participants. PetraFlow does not store MT103 or MT760 keys directly; however, transaction status logs from Paymasters are retained to ensure the integrity of the deal lifecycle.

03 3. Fraud Surveillance & Behavior Tracking

To maintain platform integrity, we monitor interaction patterns within Virtual Deal Rooms. This includes monitoring for circumvention attempts (sharing contact details before SPA execution) and procedural sequence skipping. This data is used to calculate 'Trust Scores' which determine platform access levels.

04 4. Information Disclosure

Identity revelation is strictly governed by the selected trading procedure (FOB, CIF, TTT, TTV). We disclose your institutional information to counter-parties only when the transaction reaches the 'Signatory Exchange' milestone, or as required by law for money-laundering (AML) prevention.

05 5. Data Sovereignty & Encryption

All communication within PetraFlow Deal Rooms is end-to-end encrypted. Documents are stored in secured, segregated silos with access restricted to the assigned human broker and authorized platform administrators. We comply with international data protection standards, including GDPR and local energy sector regulations.

Questions regarding data governance? Contact our DPO at compliance@petraflow.io