Privacy Policy

AllianceOracle (the "Platform"), operated by Aurelian Ventures Ltd. ("we," "us," "our"), provides verification and settlement infrastructure for subsurface energy data. This policy explains what personal information we collect, why we collect it, and how we handle it.

1. Information we collect

We collect only the personal information reasonably necessary to operate the Platform and conduct legitimate business with you and your organisation. The categories are:

1.1 Information you provide directly

• Identity and contact data — name, business email, company, role, and phone number, supplied via our access-request form or in correspondence with us.
• Communications — the content of emails, support requests, and other messages you send us.
• Account data — once the Platform launches, authentication credentials and account preferences associated with your organisation's seat.

1.2 Information collected automatically

• Usage data — pages visited, referring source, session duration, device type, and approximate region. Collected via Google Analytics 4 with IP anonymisation enabled.
• Technical data — browser type, operating system, and timestamps, used to maintain platform security and reliability.

2. Subsurface data we do not collect

The Platform is architected so that raw subsurface data never leaves the operator's infrastructure. We do not ingest, store, or transmit:

• Raw seismic survey files, well log data, or reservoir model outputs;
• Proprietary interpretations or commercially sensitive analyses;
• Any geological data covered by confidentiality, joint-operating agreements, or regulatory non-disclosure.

We process only the metadata describing those assets — survey type, formation, area, vintage, resolution, and certification chain — which the operator voluntarily submits to receive a verification score.

3. Purposes — why we collect

We use personal information for the following purposes, and no others:

• To respond to access requests and qualify prospective buy-side and sell-side participants;
• To operate, secure, and improve the Platform and its scoring engine;
• To communicate with you about your interest in the Platform, including occasional product updates if you have opted in;
• To comply with applicable laws, including Canadian PIPEDA, Alberta PIPA, and where relevant, EU GDPR;
• To enforce our terms of service and protect our legitimate business interests.

4. Legal basis (GDPR jurisdictions)

Where the EU General Data Protection Regulation applies, we rely on the following lawful bases:

• Legitimate interest — for responding to inbound business enquiries, securing the Platform, and improving service quality;
• Performance of a contract — for operating accounts and processing transactions once you become a customer;
• Consent — for any optional marketing communications, withdrawable at any time;
• Legal obligation — where retention or disclosure is required by law.

5. Sharing and disclosure

We do not sell personal information. We share information only:

• With service providers who operate infrastructure on our behalf (cloud hosting via AWS; analytics via Google Analytics 4; email delivery via standard transactional providers) under written agreements that require equivalent privacy protection;
• With professional advisors (auditors, counsel, accountants) where reasonably necessary;
• Where legally required — in response to valid court orders, regulatory requests, or to protect against fraud or harm;
• In connection with a corporate transaction (merger, acquisition, or sale of substantially all assets), with continued protection of your information by the successor entity.

6. International transfers

Personal information is primarily stored in Canada. Where our service providers operate outside Canada (for example, Google Analytics infrastructure in the United States and Europe), we ensure those transfers occur under appropriate contractual safeguards including, where applicable, the European Commission's Standard Contractual Clauses.

7. Retention

We retain personal information only as long as necessary for the purposes set out in this policy:

• Access-request data — retained for up to 24 months from last contact, then deleted unless you have become a customer;
• Customer account data — retained for the duration of the customer relationship plus seven years for tax and regulatory record-keeping;
• Analytics data — retained per Google Analytics 4 default settings (14 months) with IP anonymisation enabled.

8. Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your information (subject to legal retention requirements);
• Object to or restrict certain processing activities;
• Request portability of information you have provided to us;
• Withdraw consent to optional processing at any time;
• Lodge a complaint with a data-protection authority — in Canada, the Office of the Privacy Commissioner; in Alberta, the Office of the Information and Privacy Commissioner; in the EU, your local supervisory authority.

To exercise any of these rights, contact us at privacy@allianceoracle.ai. We respond within 30 days.

9. Cookies and analytics

We use Google Analytics 4 to understand how visitors use the Platform, with IP anonymisation enabled. We do not use cookies for advertising, tracking across third-party sites, or building profiles of visitors.

You can disable analytics tracking by enabling "Do Not Track" in your browser, by using the Google Analytics opt-out add-on, or by blocking cookies from googletagmanager.com.

10. Security

We protect personal information using industry-standard technical and organisational measures, including TLS encryption in transit, access controls, audit logging, and least-privilege access for personnel. No system is completely secure; we will notify affected individuals and applicable regulators of any material breach in accordance with applicable law.

11. Children

The Platform is intended for use only by individuals acting in their professional capacity at energy industry organisations. We do not knowingly collect personal information from anyone under 18 years of age.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to active account holders and posted here with an updated effective date. Continued use of the Platform after a change constitutes acceptance.

13. How to contact us

Questions about this policy, or requests to exercise the rights described above, should be directed to:

This policy is governed by the laws of the Province of Alberta and the federal laws of Canada.