1. Data controller

PUGIZ ("We", "the Platform") is the controller of personal data collected via the platform.

Contact: support@pugiz.com

2. Data we collect

We only collect data necessary to operate the service:

• Account information (name, email, hashed password)

• Institution data (name, type, address, contact)

• Member data entered by the institution (name, contact, attendance, donations, dues)

• Technical metadata (IP address, connection logs, admin actions)

3. Purpose of processing

Your data is used to:

• Provide and maintain the service

• Secure access and prevent fraud

• Send service notifications (email, WhatsApp)

• Improve our features

• Comply with legal and tax obligations

4. Legal basis

Processing is based on the contract between you and PUGIZ, your consent (for marketing) and legal obligations.

5. Data sharing

We never sell your data. It is only shared with:

• Our technical providers (hosting, payments) under confidentiality agreements

• Competent authorities upon legal request

Each institution is strictly isolated: no admin from another institution can access your data.

6. Security

Your data is encrypted in transit (HTTPS/TLS) and at rest. Passwords are hashed (bcrypt). Admin access is logged. Daily backups.

7. Retention

Active data is kept as long as your account is active. After termination, it is kept 30 days then deleted, except for legal obligations (billing: 10 years).

8. Your rights

Under GDPR and applicable local laws, you have rights of access, rectification, erasure, opposition and portability. Contact support@pugiz.com to exercise them.

9. Cookies

We only use technical cookies for authentication and language preference. No advertising cookies.

10. Changes

This policy may evolve. Any material change will be notified by email at least 30 days before it takes effect.

11. Contact

Any question: support@pugiz.com