Privacy Policy

1. Introduction

Indilago Ventures Inc. ("Pastrata," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, mobile applications, APIs, and related services (collectively, the "Service").

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and authentication credentials (magic link tokens, OAuth tokens, passkeys).
• Profile Information: Display name, avatar, phone number, and unit association within a building.
• Building Data: Building configuration, unit details, membership roles, and administrative settings.
• Content: Posts, comments, messages, documents, maintenance requests, and other content you create or upload.
• Financial Information: Payment method details (processed by our payment processor, Stripe), fee schedules, and payment history.
• Usage Data: Log data, device information, IP addresses, and how you interact with the Service.
• Communications: Messages sent through the Service, support requests, and feedback.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Facilitate communication between building members and management
• Process payments and manage billing
• Power AI features such as eConcierge (document-based question answering)
• Send notifications, notices, and service-related communications
• Ensure security, prevent fraud, and enforce our Terms of Service
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share information with:

• Building Members: Information you share within a building community is visible to other authorized members of that building.
• Building Administrators: Management and council members may access member information necessary for building operations.
• Service Providers: Third-party vendors who assist in operating the Service (hosting, email delivery, payment processing, AI services).
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Storage & Security

Your data is stored on secure servers in Canada and the United States. We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security assessments. Building data is isolated at the tenant level to ensure your building's information remains private.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request account deletion at any time. Upon deletion, we will remove or anonymize your personal information within a reasonable timeframe, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Withdraw consent for data processing
• Request a copy of your data in a portable format
• Object to certain processing activities
• File a complaint with a privacy authority

To exercise these rights, contact us at privacy@pastrata.com.

8. Canadian Privacy Law Compliance

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the Personal Information Protection Act (PIPA) of British Columbia. We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances.

9. Cookies & Tracking

We use essential cookies for authentication and session management. We do not currently use advertising or third-party tracking cookies on the marketing site.

10. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through in-app notices or email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

For questions about this Privacy Policy or our privacy practices, please contact us at privacy@pastrata.com or by mail at Indilago Ventures Inc., 1330 Graveley St, Suite 205, Vancouver, BC V5L 3A2, Canada.