Privacy Policy

Privacy Policy

Last updated: [ 20th June 2025 ]


1. Who We Are

Africa Insights AI (A Virtual Trade Tours LLC company) (“we”, “our”, “us”) is a market-intelligence software platform offered by Africa Insights AI Ltd., registered in the State of Texas in the USA. We provide AI-powered analytics that help organisations make data-driven decisions in African markets.

We act as the Data Controller for all personal data collected through our website, app and related services.

Contact details
Africa Insights AI - (A Virtual Trade Tours LLC company).
E-mail: privacy@africainsights.ai
If you have questions about this policy or wish to exercise your rights, please contact our Privacy Lead at the address above.


2. Personal Data We Collect

Data category

What we collect

Purpose Legal basis (GDPR Art. 6)

Account Information: Name, e-mail address • Authenticate you and let you log in• Personalise your dashboard

Performance of a contract: (Art. 6 (1)(b)) – required to provide the service

Operational Notifications: Name, e-mail address • Send transactional e-mails (password reset, invoices, service alerts, downtime & maintenance notices)

Legitimate interest: (Art. 6 (1)(f)) – keeping you informed of critical service information

Newsletter (optional): Name, e-mail address • Send weekly “African Market Insights” newsletter Consent: (Art. 6 (1)(a)) – only if you opt-in; you can unsubscribe at any time

We do not collect special-category data (Art. 9 GDPR), financial card details, or persistent personal identifiers beyond the items above.


3. How We Use Cookies

Our site uses minimal first-party cookies solely to maintain login sessions and remember language preferences. We do not use third-party advertising or tracking cookies.


4. Data Sharing & Processors

We never sell or rent your personal data. We share it only with trusted sub-processors who help us operate the service:

Sub-processor: AWS (Frankfurt)

Purpose: Cloud hosting & database

Location: EU

Safeguard: Standard Contractual Clauses not required (EEA)

Sub-processor: Google Workspace

Purpose: Transactional emails

Location: USA

Safeguard: Standard Contractual Clauses (2021) + provider SOC 2

Sub-processor: Beehiiv

Purpose: Newsletter e-mails

Location: USA

Safeguard: Standard Contractual Clauses (2021) + provider SOC 2

Each vendor is bound by a written Data Processing Agreement (Art. 28 GDPR) and can process data only under our instructions.


5. International Transfers

If we transfer personal data outside the EEA/UK (e.g., to Beehiiv in the USA) we rely on Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR) or other lawful transfer mechanisms.


6. Data Retention

  • Account data – kept for as long as you hold an active subscription and up to 12 months after cancellation (for audit & dispute resolution).

  • Operational e-mail logs – stored for 90 days.

  • Newsletter list – stored until you unsubscribe or until 24 months of inactivity, whichever comes first.

We regularly review and securely delete data that is no longer required.


7. Security Measures

  • AES-256 encryption at rest; TLS 1.2+ in transit

  • Role-based access controls & MFA for admin accounts

  • Annual penetration testing and internal security audits

  • Continuous monitoring and automated backup of production databases


8. Your Rights (GDPR/UK GDPR)

You have the right to:

  1. Access – request a copy of your personal data

  2. Rectification – correct inaccurate or incomplete data

  3. Erasure (“right to be forgotten”)

  4. Restriction of processing

  5. Portability – receive data in a structured, machine-readable format

  6. Objection to processing based on legitimate interests

  7. Withdraw consent at any time (for newsletter e-mails) without affecting lawfulness of prior processing

  8. Lodge a complaint with your local Data Protection Authority (e.g., ICO in the UK, or any EU supervisory authority)

To exercise any right, e-mail us at privacy@africainsights.ai. We will respond within 30 days.


9. Automated Decision-Making

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.


10. Children

Our services are designed for professionals aged 18+. We do not knowingly collect data from minors.


11. Changes to This Policy

We may update this policy to reflect technical or legal changes. We will notify you via e-mail and/or in-app banner if changes are material. The “Last updated” date reflects the most recent version.


Questions?
We are committed to transparent and lawful data practices. Contact privacy@africainsights.ai any time, and we’ll be happy to help.