Pagasi Trust Center

Pagasi uses technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, and other security risks.

Our security approach includes measures such as:

• Secure user authentication
• Role-based access controls
• Restricted administrative access
• Encryption in transit and at rest where supported and appropriate
• Secure infrastructure and hosting practices
• Controlled access to user and referral information
• Security monitoring and protective measures
• Regular review of security practices as the platform develops

No online platform can guarantee absolute security. Pagasi continuously works to maintain safeguards appropriate to the nature and sensitivity of the information we handle.

Pagasi is committed to responsible collection, use, disclosure, retention, and protection of personal information.

Our privacy practices are designed with applicable Canadian privacy requirements and recognized privacy principles in mind.

These principles include:

• Accountability
• Identifying why information is collected
• Meaningful consent
• Limiting collection
• Limiting use and disclosure
• Appropriate retention
• Accuracy
• Safeguards
• Transparency
• Individual access
• Handling privacy concerns

For more detailed information about our privacy practices, please review the Pagasi Privacy Policy.

Pagasi seeks to collect only information reasonably necessary to provide our services.

Depending on how you use Pagasi, information we collect or process may include:

• Name
• Email address
• Phone number
• General location or service area
• Account information
• Referral information
• Service preferences
• Transaction information
• Reward information
• Information required to connect you with a service provider
• Verification information where reasonably required
• Information required for tax, accounting, fraud prevention, regulatory, or other legal purposes

The information required may vary depending on the Pagasi service or referral category you use.

Pagasi connects users with participating service providers and professionals.

When you request or participate in a referral, information reasonably necessary to facilitate that connection may be provided to the applicable service provider.

Pagasi does not intend to give service providers unrestricted access to your Pagasi account or unrelated personal information.

Information shared may depend on:

• The service requested
• Information you submit
• Your consent
• The selected service provider
• Legal or regulatory requirements

Additional information requested directly by a service provider after a connection is made may be subject to that provider's own privacy practices and professional obligations.

Access to Pagasi systems and information is restricted according to role and legitimate business requirements.

Different access levels may apply to:

• Users
• Referrers
• Service providers
• Authorized Pagasi personnel
• Administrators

Access is intended to be limited to the information reasonably necessary for the person's role or the applicable transaction. Administrative access to sensitive systems and information is restricted to authorized personnel.

Pagasi uses account authentication and other security controls intended to help prevent unauthorized account access.

Users are responsible for maintaining the confidentiality of their login credentials and should not share passwords, verification codes, or other account authentication information.

Pagasi may implement additional authentication, verification, or security measures where appropriate.

Pagasi uses third-party technology, cloud infrastructure, hosting, authentication, communication, payment, and other service providers to operate portions of the platform.

We seek to use reputable technology providers with appropriate security and privacy practices.

Our infrastructure approach may include:

• Encryption
• Secure data transmission
• Controlled system access
• Authentication controls
• Infrastructure monitoring
• Backups and recovery capabilities
• Security protections provided by our technology partners

Pagasi periodically reviews its technology and security requirements as the platform develops.

Pagasi may facilitate referral rewards, promotional incentives, commissions, or other eligible payments.

Where appropriate, specialized third-party payment providers may be used to process payments.

Pagasi seeks to minimize unnecessary storage of sensitive financial information where secure payment providers can process that information directly.

Reward eligibility is subject to applicable Pagasi program rules, verification requirements, Terms of Use, and applicable laws.

Pagasi may use reasonable measures to detect, investigate, and prevent:

• Fraudulent referrals
• Duplicate or manipulated accounts
• Unauthorized account access
• False transactions
• Reward abuse
• Misrepresentation
• Platform manipulation
• Other violations of Pagasi policies

Accounts, referrals, transactions, or rewards may be reviewed when suspicious activity is detected. Pagasi may restrict or suspend activity where reasonably necessary to protect users, service providers, the platform, or the integrity of the referral program.

Pagasi intends to retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as otherwise required or permitted by law.

Information may be retained when necessary to:

• Maintain user accounts
• Provide requested services
• Complete referrals
• Verify completed transactions
• Administer referral rewards
• Maintain accounting and transaction records
• Meet tax obligations
• Prevent or investigate fraud
• Resolve disputes
• Enforce agreements
• Meet regulatory or legal requirements

When information is no longer reasonably required, Pagasi may delete, anonymize, or otherwise securely dispose of it, subject to applicable legal requirements.

Subject to applicable laws and exceptions, users may contact Pagasi regarding:

• Access to their personal information
• Correction of inaccurate information
• Account deletion
• Withdrawal of certain consent
• Questions about information collection or use
• Privacy concerns or complaints

Some information may need to be retained after an account is closed where required or permitted for tax, accounting, legal, fraud-prevention, regulatory, security, or dispute-resolution purposes.

Pagasi maintains procedures intended to help identify, assess, contain, investigate, document, and respond to suspected privacy and security incidents.

Depending on the circumstances, our response may include:

• Securing affected systems
• Investigating the incident
• Determining what information may have been affected
• Working with relevant technology providers
• Taking corrective measures
• Documenting the incident
• Notifying affected individuals where required
• Reporting to applicable authorities where required by law

Pagasi may update its incident-response procedures as the platform and applicable requirements evolve.

Pagasi relies on selected third-party providers to operate certain platform functions.

These may include providers for:

• Cloud infrastructure
• Application technology
• Authentication
• Communications
• Analytics
• Payment processing
• Email
• Customer support
• Security
• Other operational services

Third-party providers may process information on Pagasi's behalf where necessary to provide their services. Pagasi seeks to select providers with appropriate privacy and security practices and to limit information sharing to what is reasonably necessary for the applicable service.

Pagasi is committed to operating its privacy program in accordance with applicable Canadian privacy requirements.

Depending on the activity and jurisdiction, federal or provincial privacy legislation may apply.

Our privacy program is designed around principles including:

Accountability
Pagasi is responsible for personal information under its control.

Purpose Limitation
Personal information should be collected for identified and appropriate purposes.

Consent
Meaningful consent should be obtained where required.

Data Minimization
Only information reasonably necessary for the applicable purpose should be collected.

Safeguards
Personal information should be protected using safeguards appropriate to its sensitivity.

Transparency
Users should be able to understand how Pagasi handles their information.

Access and Correction
Individuals may have rights to request access to and correction of their personal information, subject to applicable law.

Pagasi's technology infrastructure incorporates security controls and practices provided by established technology and infrastructure providers.

Some technology providers used by Pagasi may maintain independent security certifications, audits, or recognized industry standards.

Such certifications belong to the applicable provider and should not be interpreted as an independent certification of Pagasi unless Pagasi expressly states otherwise.

Pagasi does not currently represent itself as independently SOC 2 certified, ISO 27001 certified, or HIPAA compliant.

If you believe you have discovered a security vulnerability, privacy issue, or unauthorized activity involving Pagasi, please report it to Pagasi Support.

When reporting a potential vulnerability, please:

• Provide enough information for us to investigate
• Avoid accessing information that does not belong to you
• Avoid modifying or deleting data
• Avoid disrupting Pagasi services
• Avoid publicly disclosing the vulnerability before Pagasi has had a reasonable opportunity to investigate and address it

We take legitimate security and privacy reports seriously.

Security and privacy are ongoing responsibilities.

As Pagasi grows, we may introduce additional:

• Security controls
• Monitoring capabilities
• Authentication protections
• Privacy controls
• Compliance procedures
• Internal policies
• Security testing
• Risk assessments

We may update this Trust Center as our platform, technology, business operations, or legal requirements change.

Questions about security, privacy, or data protection can be submitted through Pagasi Support.

For formal privacy requests, users may follow the contact process described in our Privacy Policy.