Infin8PAY Security Statement
Last Updated: 8 Aug 2024

At Infin8PAY, the security of our systems and your data is our highest priority. While we do not hold or manage client funds, we implement robust measures to safeguard information processed through our technology platform.

1. Technical Safeguards

• Encryption: All data transmitted between your browser and our servers uses HTTPS/TLS encryption.
• Access Controls: System and database access is restricted to authorized personnel only.
• Regular Updates: Our infrastructure and software receive timely security patches.
• Environment Segregation: Development, staging, and production environments are separated to reduce risk exposure.

2. Organizational Measures

• Staff Training: All personnel receive regular security and data protection training.
• Policies: We maintain documented information security policies, incident response procedures, and risk management protocols.

3. Data Storage and Handling

Collected data is stored securely in data centers with industry-standard physical and logical protections. We retain only the data necessary to deliver our Services.

4. Incident Response

Infin8PAY has an incident response plan to detect, assess, and respond to security incidents. In the event of a breach involving your data:

• We will notify affected parties as required by law.
• We will take immediate action to mitigate risks and contain the incident.
• We will cooperate with relevant authorities as necessary.

5. Responsibility for Compliance

Infin8PAY provides technology tools but does not provide or guarantee PCI DSS certification or other regulated security certifications on your behalf. You are solely responsible for ensuring your own use of our technology complies with payment industry security standards or other regulations applicable to your business.

6. Shared Responsibility

While Infin8PAY takes extensive steps to secure our platform, security also depends on you:

• Keep your account credentials confidential.
• Use secure devices and trusted networks to access our Services.
• Notify us immediately at support@infin8pay.com if you suspect unauthorized access or suspicious activity.

7. No Custody of Funds

Infin8PAY does not store or manage client funds. All payments and transactions initiated through our platform are processed by third-party financial institutions or payment providers selected by you. These providers are responsible for the security, execution, and regulatory compliance of all transactions.