BilaFundi Security and Data Protection Agreement

1. Introduction

BilaFundi ("BilaFundi", "we", "us", or "our") is committed to protecting the security, confidentiality, integrity, and privacy of information entrusted to our platform.

BilaFundi operates as a digital platform that connects clients, property owners, businesses, contractors, technical handymen, service providers, material suppliers, and other construction-related professionals. In providing these services, we may process information including account details, contact information, project information, communications, transaction information, and location-related information.

This Security and Data Protection Agreement explains the technical, organizational, and operational measures BilaFundi applies to protect information processed through:

• The BilaFundi website;

• BilaFundi mobile or web applications, where applicable;

• Provider and client accounts;

• Project and tender information;

• Communication and messaging functionality;

• Payment functionality;

• AI-powered features;

• Location-based services;

• Customer support channels; and

• Other services operated by or on behalf of BilaFundi.

By using BilaFundi, users acknowledge that no internet-based system can be guaranteed to be completely secure. BilaFundi nevertheless maintains reasonable and appropriate safeguards designed to reduce the risk of unauthorized access, disclosure, alteration, loss, misuse, or destruction of information.

2. Scope of This Agreement

This Agreement applies to information processed by BilaFundi in connection with the use of its platform and services.

It applies to information relating to:

• Clients;

• Technical handymen;

• Contractors;

• Service providers;

• Material suppliers;

• Business representatives;

• Platform administrators;

• Website visitors;

• Prospective users; and

• Other individuals interacting with BilaFundi.

This Agreement should be read together with the BilaFundi Privacy Policy, Terms and Conditions, and any other applicable platform policies.

Where there is a conflict between this Agreement and applicable law, applicable law will prevail.

3. Data Protection Principles

BilaFundi is committed to handling personal information in accordance with applicable data-protection and privacy laws.

Depending on the nature of the processing and the applicable jurisdiction, BilaFundi may act as a data controller, data processor, or another legally recognized role.

BilaFundi seeks to apply the following principles:

3.1 Lawfulness and Transparency

Personal information should be collected and processed for legitimate and clearly communicated purposes.

3.2 Purpose Limitation

Information should be used for the purposes for which it was collected or for other purposes permitted by applicable law.

3.3 Data Minimization

BilaFundi seeks to collect only information reasonably necessary to provide, secure, improve, and administer its services.

3.4 Accuracy

Users should provide accurate information and update their account information where necessary.

3.5 Storage Limitation

Personal information should not be retained indefinitely where there is no legitimate or legal reason to retain it.

3.6 Confidentiality and Security

BilaFundi applies reasonable technical and organizational measures designed to protect information against unauthorized or unlawful processing and accidental loss, destruction, damage, or disclosure.

3.7 Accountability

BilaFundi seeks to maintain appropriate internal processes and controls for managing information security and data-protection risks.

4. Information BilaFundi May Protect

Depending on how a user interacts with the platform, BilaFundi may process or protect categories of information including:

Account Information

• Name;

• Username;

• Email address;

• Telephone number;

• Password credentials;

• Account type;

• Business information;

• Provider profile information; and

• Account preferences.

Project Information

• Project descriptions;

• Property information;

• Construction requirements;

• Tender information;

• Quotations;

• Estimates;

• Documents submitted by users;

• Communications relating to projects; and

• Information exchanged between clients and providers.

Location Information

Where location functionality is used, BilaFundi may process information such as:

• Country;

• County/state/province;

• City or town;

• Project location;

• Service area;

• Provider operating location;

• Location submitted as part of a project; and

• Other location information necessary to facilitate services.

BilaFundi will seek to limit collection and disclosure of location information to what is reasonably necessary for the relevant service.

Transaction Information

This may include:

• Transaction references;

• Payment status;

• Order information;

• Amounts associated with transactions;

• Currency;

• Payment-provider references; and

• Other information necessary to reconcile transactions.

Technical and Security Information

This may include:

• IP address;

• Browser type;

• Device information;

• Operating system;

• Login timestamps;

• Authentication events;

• Security logs;

• Error logs;

• Fraud indicators; and

• Platform activity.

5. Secure Socket Layer (SSL/TLS) Encryption

BilaFundi uses industry-standard transport encryption technologies, including Transport Layer Security (TLS), commonly referred to by users as SSL encryption, to protect information transmitted between a user's browser or application and BilaFundi's systems.

5.1 Encryption in Transit

Where supported, sensitive communications are transmitted over encrypted HTTPS connections.

This is intended to reduce the risk that information transmitted between the user and BilaFundi can be intercepted or modified by unauthorized third parties.

5.2 HTTPS

BilaFundi seeks to enforce secure HTTPS connections for applicable platform functionality.

Users should verify that their browser displays a secure HTTPS connection when accessing BilaFundi services.

5.3 Encryption Does Not Eliminate All Risks

Encryption protects information during transmission but does not eliminate all security risks.

For example, encryption cannot fully protect information if:

• A user's device is compromised;

• A user's password is stolen;

• A user voluntarily shares confidential information;

• A malicious browser extension accesses information;

• A user accesses the platform through an unsafe network; or

• An authorized account is compromised.

Users remain responsible for protecting their devices and credentials.

6. Data Security at Rest

Where technically and commercially appropriate, BilaFundi may apply security controls to information stored within its systems and infrastructure.

Such controls may include:

• Access controls;

• Database security controls;

• Encryption or encryption-at-rest mechanisms where appropriate;

• Secure backups;

• Authentication controls;

• Logging and monitoring;

• Infrastructure security controls;

• Network security controls; and

• Secure configuration practices.

The specific security architecture may change over time as BilaFundi improves its infrastructure and adopts new security technologies.

7. Secure Payment Processing

BilaFundi takes payment security seriously.

Where BilaFundi enables users to pay for services, subscriptions, fees, or other transactions, payments may be processed through independent third-party payment processors.

7.1 BilaFundi Does Not Intentionally Store Full Payment Credentials

Unless expressly stated otherwise, BilaFundi does not intend to store users' complete:

• Credit-card numbers;

• Debit-card numbers;

• Card security codes;

• Mobile-money PINs; or

• Other sensitive payment authentication credentials.

Payment information may instead be submitted directly to an applicable payment processor.

7.2 Payment Providers

Payment providers may process payment information under their own:

• Security controls;

• Privacy policies;

• Compliance requirements;

• Terms and conditions; and

• Data-processing obligations.

Where appropriate, BilaFundi may retain limited transaction information such as:

• Transaction ID;

• Payment reference;

• Payment status;

• Amount;

• Currency;

• Date and time;

• Payment-provider identifier; and

• Other reconciliation information.

7.3 Payment Security Compliance

BilaFundi expects applicable payment processors to maintain security controls appropriate to the payment services they provide.

Where card payments are involved, the relevant payment provider may be responsible for applicable PCI DSS compliance obligations associated with cardholder-data environments.

BilaFundi does not represent that it itself is PCI DSS certified unless expressly stated.

7.4 Payment Disputes

Payment disputes, chargebacks, failed transactions, unauthorized transactions, or payment reversals may require BilaFundi to exchange relevant transaction information with payment processors or financial institutions to investigate and resolve the issue.

8. User Authentication and Account Security

Account credentials are an important part of BilaFundi's security architecture.

Users are responsible for maintaining the confidentiality of their authentication information.

8.1 Password Requirements

Users should:

• Use a strong password;

• Use a unique password that is not used on other websites;

• Avoid predictable passwords;

• Avoid sharing passwords with other people;

• Avoid storing passwords insecurely; and

• Change compromised credentials immediately.

8.2 Credential Confidentiality

Users must not:

• Share their BilaFundi password;

• Allow unauthorized individuals to access their account;

• Sell, transfer, or improperly share account credentials;

• Attempt to obtain another user's credentials; or

• Circumvent authentication controls.

8.3 Authentication Controls

Depending on the platform architecture, BilaFundi may implement controls such as:

• Password hashing;

• Secure session management;

• Session expiration;

• Login monitoring;

• Rate limiting;

• Account lockouts or temporary restrictions;

• Email verification;

• Multi-factor authentication where available;

• Suspicious-login detection; and

• Other authentication-security controls.

8.4 Account Compromise

Users must notify BilaFundi promptly if they believe that:

• Their password has been compromised;

• Someone has accessed their account without authorization;

• Their account is being used fraudulently;

• Their contact information has been changed without authorization; or

• They observe suspicious activity.

BilaFundi may temporarily restrict or suspend an account where reasonably necessary to protect the user, other users, or the platform.

9. Role-Based Access Controls

BilaFundi seeks to limit access to personal and confidential information based on legitimate business and operational requirements.

Access may be granted according to:

• User role;

• Job responsibilities;

• System requirements;

• Support requirements;

• Security responsibilities; and

• Legal or regulatory obligations.

Employees, contractors, and authorized service providers may receive access only where reasonably necessary to perform their responsibilities.

Where appropriate, access rights may be reviewed and revoked when no longer required.

10. Anti-Fraud and Abuse Measures

BilaFundi may implement measures designed to detect, prevent, investigate, and respond to fraudulent or abusive activity.

These measures may include:

• Monitoring suspicious account activity;

• Detecting unusual login patterns;

• Rate limiting;

• IP and device-security signals;

• Transaction monitoring;

• Duplicate-account detection;

• Suspicious payment detection;

• Automated abuse detection;

• Manual review;

• Account verification;

• Provider verification;

• Identity or business verification where appropriate;

• Blocking malicious traffic;

• Restricting suspicious accounts; and

• Investigating reports from users.

10.1 Prohibited Fraudulent Activities

Users must not use BilaFundi to:

• Create fraudulent accounts;

• Impersonate another person or business;

• Submit false project information;

• Submit fraudulent tenders or quotations;

• Manipulate reviews or ratings;

• Misrepresent qualifications;

• Conduct payment fraud;

• Attempt to bypass platform fees;

• Abuse referral or promotional mechanisms;

• Send malicious links or files;

• Conduct phishing attacks;

• Scrape protected platform information without authorization;

• Attempt unauthorized access; or

• Engage in any unlawful activity.

BilaFundi may suspend, restrict, investigate, or terminate accounts associated with suspected fraud or abuse, subject to applicable law.

11. Monitoring, Logging, and Security Auditing

To protect the platform, BilaFundi may maintain technical logs relating to security and platform activity.

These may include:

• Login events;

• Authentication attempts;

• IP addresses;

• Device information;

• API activity;

• Error events;

• Administrative actions;

• Transaction events;

• Security alerts; and

• Other relevant system events.

Security logs may be used to:

• Investigate incidents;

• Detect attacks;

• Prevent abuse;

• Troubleshoot technical problems;

• Maintain platform security;

• Meet legal obligations; and

• Improve security controls.

Access to security logs should be restricted to authorized personnel and retained only for an appropriate period, taking into account security, operational, legal, and regulatory requirements.

12. Location Data Protection

Because BilaFundi connects clients with local technical handymen and service providers, location information may be important to platform functionality.

Location information may be used to:

• Identify service areas;

• Match clients with relevant providers;

• Display project locations;

• Estimate service availability;

• Improve search functionality;

• Provide location-based recommendations;

• Support project coordination; and

• Prevent fraud or abuse.

Users should avoid submitting highly sensitive location information unless it is necessary for the service.

Where possible, BilaFundi may use generalized location information rather than unnecessarily exposing exact coordinates or addresses.

Users should understand that information they voluntarily publish on their profile, project, tender, or communication may be visible to other users depending on the platform's functionality and privacy settings.

13. Communications and User-Generated Content

BilaFundi may process information contained in:

• Messages;

• Project descriptions;

• Tender requests;

• Quotations;

• Reviews;

• Comments;

• Uploaded documents;

• Support requests; and

• Other user-generated content.

Users should not submit passwords, payment PINs, security codes, or other highly confidential credentials through public project descriptions, reviews, or ordinary communications.

BilaFundi may process communications where necessary to:

• Deliver the requested service;

• Provide customer support;

• Prevent fraud;

• Investigate abuse;

• Resolve disputes;

• Maintain platform security; or

• Comply with applicable legal obligations.

14. AI-Powered Features

BilaFundi may provide AI-powered functionality, including features such as:

• Cost estimation;

• Project assistance;

• Content generation;

• Recommendations;

• Technical support;

• Search assistance; or

• Other AI-enabled functionality.

When a user submits information to an AI feature, relevant information may be transmitted to third-party AI service providers for the purpose of generating the requested response.

14.1 Data Minimization

BilaFundi seeks to send only information reasonably necessary for the relevant AI feature.

Users should avoid submitting unnecessary sensitive personal information to AI features.

14.2 Third-Party AI Providers

AI providers may process submitted information according to their applicable contractual, security, privacy, and data-handling obligations.

The applicable providers may change as BilaFundi develops and improves its services.

14.3 AI Output

AI-generated information may contain errors or inaccuracies.

Users should independently verify important:

• Construction information;

• Cost estimates;

• Technical recommendations;

• Regulatory information;

• Safety information; and

• Other consequential information.

AI features should not be treated as a substitute for qualified professional advice.

15. Third-Party Service Providers

BilaFundi may use trusted third-party service providers to operate and secure parts of the platform.

These may include providers responsible for:

• Cloud hosting;

• Databases;

• Payment processing;

• Email delivery;

• SMS delivery;

• Authentication;

• Analytics;

• Security monitoring;

• AI services;

• File storage;

• Customer support; and

• Other infrastructure services.

Where appropriate, BilaFundi seeks to use providers that maintain security practices appropriate to the services they provide.

Third-party providers may process information only to the extent reasonably necessary to provide their services or as otherwise permitted or required by applicable law and contractual arrangements.

16. Data Transfers and International Processing

BilaFundi may use infrastructure or service providers located in countries other than the country in which a user resides.

As a result, personal information may be transferred to or processed in other jurisdictions.

Where applicable, BilaFundi will seek to implement appropriate safeguards for international transfers in accordance with applicable data-protection laws.

Users acknowledge that different jurisdictions may have different privacy and data-protection frameworks.

17. Data Retention

BilaFundi does not intend to retain personal information indefinitely without a legitimate purpose.

Retention periods may depend on:

• The purpose for which information was collected;

• Account status;

• Transaction requirements;

• Legal obligations;

• Dispute resolution;

• Fraud prevention;

• Security requirements;

• Financial and accounting requirements;

• Backup systems; and

• Legitimate business requirements.

Information may remain in backups for a limited period after deletion from active systems, where technically necessary.

18. Data Breach and Security Incident Response

BilaFundi maintains processes intended to identify, investigate, contain, and respond to security incidents.

A security incident may include:

• Unauthorized access;

• Unauthorized disclosure;

• Data loss;

• Malware;

• Account compromise;

• Credential theft;

• Database exposure;

• Denial-of-service attack;

• Ransomware;

• Phishing;

• Infrastructure compromise; or

• Other events affecting information security.

Where BilaFundi determines that a security incident has occurred, it may take measures including:

1. Identifying the affected systems;

2. Containing the incident;

3. Restricting compromised accounts;

4. Blocking malicious traffic;

5. Preserving relevant logs;

6. Investigating the cause;

7. Remediating vulnerabilities;

8. Restoring affected services;

9. Assessing affected information;

10. Cooperating with relevant authorities where required; and

11. Notifying affected individuals or organizations where required by applicable law.

19. Responsible Vulnerability Disclosure

BilaFundi encourages security researchers and users to report vulnerabilities responsibly.

Reports should be sent to:

info@bilafundi.com

A vulnerability report should, where possible, include:

• A description of the vulnerability;

• Affected functionality or URL;

• Steps required to reproduce the issue;

• Proof of concept where appropriate;

• Potential security impact;

• Relevant screenshots or logs where safe to provide; and

• Contact information for follow-up.

Responsible Disclosure Principles

Security researchers are requested to:

• Act in good faith;

• Avoid accessing, modifying, or deleting other users' data;

• Avoid disrupting BilaFundi services;

• Avoid destructive testing;

• Avoid social engineering of BilaFundi personnel;

• Avoid publicly disclosing a vulnerability before BilaFundi has had a reasonable opportunity to investigate and remediate it; and

• Stop testing and notify BilaFundi if sensitive information is unintentionally accessed.

BilaFundi will acknowledge vulnerability reports within approximately 48 hours where reasonably practicable and will assess confirmed vulnerabilities according to their severity and potential impact.

BilaFundi reserves the right to determine whether a reported issue constitutes a security vulnerability and the appropriate remediation timeline.

20. Security of Uploaded Documents

Users may upload documents relating to projects, tenders, quotations, property, businesses, or other activities.

Users should ensure that uploaded documents do not unnecessarily contain:

• Passwords;

• Payment PINs;

• Private authentication credentials;

• Unnecessary personal information;

• Confidential information belonging to third parties; or

• Information the user does not have permission to disclose.

BilaFundi may apply access controls to uploaded documents based on the functionality through which they are submitted.

Users are responsible for ensuring that they have the necessary rights and permissions to upload documents.

21. User Responsibilities

Security is a shared responsibility.

Users are expected to:

• Maintain strong authentication credentials;

• Protect their devices;

• Keep operating systems and browsers updated;

• Avoid suspicious links;

• Avoid sharing account credentials;

• Use secure networks when possible;

• Verify payment requests;

• Report suspicious activity;

• Provide accurate information;

• Avoid uploading unnecessary sensitive information;

• Log out of shared devices;

• Review account activity where available; and

• Follow BilaFundi's security instructions.

BilaFundi will not normally be responsible for security compromises caused primarily by a user's failure to protect their account, device, credentials, or information.

22. Security of the BilaFundi Platform

BilaFundi may implement reasonable security measures appropriate to the nature and scale of its services.

These may include:

• HTTPS/TLS encryption;

• Password hashing;

• Authentication controls;

• Authorization controls;

• Access restrictions;

• Network security;

• Firewall and traffic-management controls;

• Security monitoring;

• Logging;

• Backups;

• Vulnerability management;

• Software updates;

• Secure development practices;

• Fraud detection;

• Incident response procedures; and

• Third-party security controls.

Security controls may be modified, upgraded, or replaced as technology and security threats evolve.

23. Limitation of Liability for External Cyber-Attacks

BilaFundi takes reasonable measures to protect its systems; however, no online platform, network, database, application, or internet transmission can be guaranteed to be completely secure.

To the maximum extent permitted by applicable law, BilaFundi will not be liable for loss, damage, unauthorized access, disclosure, interruption, or compromise resulting solely from circumstances beyond its reasonable control, including certain external cyber-attacks.

Such circumstances may include:

• Sophisticated hacking attacks;

• Zero-day vulnerabilities;

• Distributed denial-of-service attacks;

• Malware;

• Ransomware;

• Supply-chain compromises;

• Compromise of third-party infrastructure;

• Internet infrastructure failures;

• Telecommunications failures;

• Credential-stuffing attacks;

• Phishing attacks directed at users;

• Compromised user devices;

• Acts of cyber warfare;

• Government or state-sponsored attacks;

• Natural disasters affecting infrastructure;

• Widespread internet outages; or

• Other unforeseeable events beyond BilaFundi's reasonable control.

This limitation does not exclude or limit liability where such exclusion or limitation is prohibited by applicable law, nor does it excuse BilaFundi from obligations that cannot legally be excluded.

Nothing in this section should be interpreted as a guarantee that BilaFundi will never experience a security incident.

24. No Absolute Security Guarantee

BilaFundi does not represent or warrant that:

• The platform will always be available;

• The platform will never experience a security vulnerability;

• All cyber-attacks will be prevented;

• All information will always remain secure;

• Third-party services will never experience a breach;

• User devices will never be compromised; or

• Information transmitted through the internet can be made completely risk-free.

BilaFundi's commitment is to maintain reasonable and appropriate safeguards and continuously improve its security practices.

25. Security Notifications

Where appropriate and legally required, BilaFundi may notify affected users about material security incidents.

Notifications may be delivered through:

• Email;

• Platform notifications;

• Website notices;

• Account notifications; or

• Other reasonable communication channels.

Users should ensure their registered contact information remains accurate.

26. Children's Information

BilaFundi is primarily intended for individuals capable of entering into legally binding arrangements under applicable law.

Users should not knowingly provide personal information belonging to children through the platform unless they have the necessary legal authority and the processing is lawful.

If BilaFundi becomes aware that personal information has been collected from a child in circumstances where collection is not permitted, BilaFundi may take appropriate steps to delete or restrict the information.

27. Data Subject Rights

Subject to applicable law, individuals may have rights relating to their personal information.

These may include rights to:

• Request access to personal information;

• Request correction of inaccurate information;

• Request deletion where legally applicable;

• Request restriction of processing;

• Object to certain processing;

• Request information about processing activities;

• Withdraw consent where processing is based on consent; and

• Exercise other rights provided under applicable data-protection law.

Requests should be submitted through BilaFundi's designated privacy or support channel.

Privacy and data-protection contact:

info@bilafundi.com

BilaFundi may need to verify the identity of a requester before responding to a data request.

28. Data Protection Officer / Privacy Contact

Where BilaFundi is required to appoint a Data Protection Officer or equivalent privacy representative under applicable law, relevant contact details will be published through the BilaFundi website.

For general privacy and data-security concerns, users may contact:

Email: info@bilafundi.com

Subject lines such as "Data Protection Request", "Security Incident", or "Privacy Concern" may be used to help route requests appropriately.

29. Security and Privacy by Design

BilaFundi seeks to incorporate security and privacy considerations into the development and operation of its platform.

Where appropriate, this may include:

• Minimizing information collection;

• Restricting access to sensitive information;

• Applying secure defaults;

• Protecting information during transmission;

• Assessing security risks before significant system changes;

• Reviewing third-party integrations;

• Monitoring security events;

• Implementing appropriate authentication controls; and

• Improving controls as new risks are identified.

30. Changes to Security Measures

Cybersecurity threats and technology continuously evolve.

BilaFundi may therefore modify its security architecture, infrastructure, vendors, controls, authentication mechanisms, encryption technologies, and operational procedures from time to time.

Such changes may occur without prior notice where necessary to:

• Address security vulnerabilities;

• Respond to emerging threats;

• Comply with legal requirements;

• Improve platform security;

• Improve system performance; or

• Protect users.

Material changes to this Agreement will be communicated through the BilaFundi website or other appropriate channels where required.

31. Governing Law and Regulatory Compliance

This Agreement shall be interpreted together with BilaFundi's Terms and Conditions and Privacy Policy.

Where BilaFundi operates in Kenya, its data-processing activities may be subject to applicable Kenyan laws and regulations, including the Data Protection Act, 2019, together with applicable regulations and guidance.

Where BilaFundi provides services to individuals in other jurisdictions, additional data-protection requirements may apply depending on the circumstances.

Nothing in this Agreement is intended to remove or reduce rights that cannot legally be excluded under applicable law.

32. Contacting BilaFundi About Security

Users should immediately report suspected security incidents involving their BilaFundi account or the BilaFundi platform.

Examples include:

• Unauthorized account access;

• Stolen credentials;

• Suspicious payment activity;

• Phishing attempts;

• Exposed personal information;

• Vulnerabilities;

• Malware;

• Suspicious links;

• Unauthorized access to project information; or

• Other security concerns.

Security Contact

BilaFundi

Email: info@bilafundi.com

For vulnerability reports, please include:

• Vulnerability description;

• Steps to reproduce;

• Affected feature;

• Potential impact; and

• Any relevant technical evidence.

33. User Security Checklist

Users should follow these basic security practices:

• Use a unique, strong password.

• Never share your password.

• Never share your payment PIN or security code.

• Enable additional authentication controls where available.

• Keep your device and browser updated.

• Avoid logging in through suspicious links.

• Verify payment requests before completing transactions.

• Do not upload unnecessary sensitive information.

• Do not publish private information in public project descriptions.

• Log out when using shared devices.

• Report suspicious activity immediately.

• Verify provider or client information before entering into an offline transaction.

• Be cautious of users requesting payment outside approved BilaFundi processes.

• Do not download suspicious files sent by other users.

• Contact BilaFundi if you believe your account has been compromised.

34. Acknowledgement

By accessing or using BilaFundi, users acknowledge that:

• They have read and understood this Security and Data Protection Agreement;

• They understand that internet-based systems cannot be guaranteed to be completely secure;

• They are responsible for maintaining the security of their accounts and devices;

• They should report suspected security incidents promptly;

• BilaFundi may use third-party infrastructure and service providers;

• Payment information may be processed by independent payment providers;

• Certain AI features may transmit submitted information to third-party AI providers;

• Location information may be processed where required for platform functionality; and

• BilaFundi will apply reasonable and appropriate security measures consistent with the nature of the services and applicable legal requirements.

35. Effective Date

This Security and Data Protection Agreement is effective from:

Effective Date: [Insert Date]

Last Updated: [Insert Date]

Website: BilaFundi

Security & Data Protection Contact: info@bilafundi.com

BilaFundi Security Commitment

BilaFundi is committed to continuously improving the security and protection of information entrusted to its platform.

Our approach is based on security, privacy, transparency, responsible data handling, fraud prevention, and continuous improvement.

While no technology platform can eliminate every cybersecurity risk, BilaFundi will continue to evaluate emerging threats and implement reasonable safeguards designed to protect its users, systems, and information.