Last updated 15 September 2026
Privacy Policy
This policy explains what personal information AssetAssure collects, why, and how you can exercise your rights over it. It covers this website and the AssetAssure service that our customers run on their payment pages.
1. Who we are
AssetAssure is a product created and provided by Pagey Corp (ABN 702787648), referred to in this policy as "Pagey Corp", "we", "us" and "our". We are bound by the Australian Privacy Act 1988 and the Australian Privacy Principles. Where visitors or customers are in the European Economic Area or the United Kingdom, we also honour the rights described in section 9.
You can contact us about privacy at contact@pageycorp.com.
2. What this policy covers
We handle personal information in three different situations, and this policy treats them separately:
- This website at assetassure.io, including the enquiry form (section 3).
- The service, which our customers install on their payment pages. Here we act as a service provider on our customer's instructions (section 4).
- Customer team accounts, the people our customers invite to use the service (section 5).
3. Information we collect on this website
Enquiry form
When you make an enquiry we ask for your work email address, your company name and a contact number, and you may add notes about your payment pages and assessment timeline. We use this information to respond to your enquiry and to discuss the service with you. We do not add you to a marketing list without asking you first, and we never sell it.
Enquiries are stored in our systems in Australia and kept for up to two years after our last contact with you, unless you ask us to delete them sooner.
Technical information
Like every website, our servers record the IP address, browser type, requested page and time of each request. We use these logs to keep the site secure and to diagnose faults. They are kept for up to 30 days.
Fonts
This site loads its typefaces from Google Fonts. When a page loads, your browser requests the font files from Google, which means Google receives your IP address and browser details. Google describes how it handles this in its privacy policy.
Cookies and tracking
This website does not set cookies and does not use analytics, advertising or social-media trackers.
4. Information we process for our customers
Customers install a small collector script on their payment pages so that AssetAssure can keep an inventory of the scripts those pages load and detect changes to them. In doing so we process information on the customer's behalf and under their instructions. If you are a shopper on a customer's website, the customer is responsible for the personal information collected on that website, and their privacy policy applies. Please direct any request about that information to them.
What the collector sends
The collector reports the address of the page and, for each script the browser loaded, the script's address and the kind of element that loaded it. That is all. It does not read form fields, card numbers, keystrokes, cookies or page content, and it sends nothing typed by the shopper.
Because the report is sent from the shopper's browser, the request carries the browser's IP address like any web request. The IP address appears only in short-lived technical logs. It is not stored with the page or script records and is not used to identify or profile shoppers.
What we retrieve ourselves
From our own infrastructure we fetch the scripts and the response headers of the reported addresses, hash them and keep every version so that changes can be reviewed. These are the customer's and their vendors' files, not shopper data. Page addresses are recorded as reported, so we ask customers not to place personal information in the addresses of payment pages.
Automated analysis
Script contents and header values may be sent to an AI model provider to produce plain-language summaries, change explanations and draft justifications for the customer's reviewers. Customers may instead connect a model provider of their own choice, in which case that provider's terms apply to those requests.
5. Customer team accounts
When a customer invites a team member, we hold that person's name, email address, role and sign-in history so they can use the service and so the customer has a record of who reviewed and approved what. Sign-in is handled by a dedicated identity provider on our behalf. Notification destinations configured by the customer, such as email addresses, chat channels and webhook endpoints, are used only to deliver the alerts and reports they have asked for.
6. How we use personal information
- To respond to enquiries and discuss the service with prospective customers.
- To provide, secure, support and improve the service for our customers.
- To deliver the alerts, reports and inventories customers configure.
- To protect our systems and our customers from fraud, abuse and security incidents.
- To comply with legal obligations and to enforce our agreements.
7. Who we share it with
We share personal information only where needed to run the service and the website:
- Service providers for cloud hosting, email delivery, identity and sign-in, and AI model inference, each bound to use the information only to provide their service to us.
- Professional advisers such as lawyers, accountants and insurers, where necessary.
- Authorities where the law requires it or to protect someone's safety or our legal rights.
- A successor if we sell or restructure the business, under this policy or one that is at least as protective.
Our infrastructure is hosted in Australia, and each customer's data is kept in an isolated environment that is not shared with any other customer. Some of our providers, including our identity provider and optional AI model providers, process information in the United States. We take reasonable steps to ensure they protect it to a standard consistent with this policy.
8. How we protect it
Information is encrypted in transit and at rest. Access is limited to the people and systems that need it, is authenticated, and is logged. Customer environments are isolated from one another and from our own systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we review our controls regularly and will notify affected people and regulators of an eligible data breach as the law requires.
9. Your rights
You can ask us to tell you what personal information we hold about you, to correct it, or to delete it. You can also withdraw consent where we rely on it, and object to processing based on our legitimate interests. Write to contact@pageycorp.com and we will respond within 30 days. Where the information belongs to one of our customers, we will refer your request to them.
If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of a contract or steps at your request before entering one (enquiries, customer accounts); our legitimate interests in running and securing the website and the service (technical logs, security monitoring); and your consent where we ask for it. You also have the right to data portability and to lodge a complaint with your local supervisory authority.
If you are unhappy with how we have handled a privacy matter, contact us first and we will investigate. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.
10. How long we keep it
| Information | Retention |
|---|---|
| Enquiries | Up to two years after our last contact with you. |
| Website technical logs | Up to 30 days. |
| Customer service data | For the term of the customer agreement, then deleted or returned as the agreement provides. Approval records may be kept longer at the customer's request to satisfy assessment evidence requirements. |
| Customer team accounts | Until the customer removes the account or the agreement ends. |
11. Changes to this policy
We will update this policy when our practices change and show the date at the top. Material changes affecting existing customers are communicated to the customer directly.
12. Contact
Pagey Corp (ABN 702787648), provider of AssetAssure
contact@pageycorp.com