Privacy Policy

Designated Privacy Officer

A77 Inc. has designated a privacy officer responsible for compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and all applicable Canadian privacy legislation.

Scope

Pay My Student Loans ("PMSL") is a project of A77 Inc. This policy applies to all personal information collected through the PMSL platform at paymystudentloans.ca, including information from applicants, advertisers, and general visitors.

Information Collected from Applicants

Personal Identifying Information (PII)

• Full name (first name and last name)
• Email address
• Phone number
• City and province/state of residence
• Country (Canada or United States)

Financial and Loan Information

• Loan servicer name and type
• Total loan balance
• Monthly payment amount and interest rate
• Years in repayment
• Monthly income (for scoring purposes)

Documents

• Loan statements
• Government-issued identification
• Proof of residency

Story and Consent Records

• Personal story and life milestone information
• Consent records for: public listing, loan verification, direct payment, tax acknowledgment, one-time application, and optional A77 marketing

Information Collected from Advertisers

• Contact name and email address
• Company/business name and website URL
• Payment information (processed by Stripe — A77 Inc. never stores credit card details directly)
• Ad creative files and click-through URLs

Purpose of Collection

Personal information is collected solely for the following identified purposes:

• Loan verification: Confirming the existence, balance, and servicer details of applicant student loans
• Payment facilitation: Making payments directly to loan servicers on behalf of funded recipients
• Platform operation: Processing applications, scoring, queue management, advertiser account management, and transactional communications
• A77 marketing (separate consent): Only with explicit, separate opt-in consent — receiving updates about other A77 Inc. projects and services. This consent is entirely optional and does not affect application status.

Public Information

With explicit consent, the following information may be displayed publicly on the PMSL transparency page, homepage, funded page, and alumni wall:

• First name only
• City
• Personal story excerpt
• Loan balance range

This information is shown only when the applicant has explicitly consented via the public listing checkbox during application. Consent can be revoked at any time.

Private Information — Never Shared

The following information is never publicly displayed, shared with third parties (except as noted below), or disclosed without a legal obligation:

• Last name
• Email address
• Phone number
• Loan servicer account numbers and details
• Verification documents (ID, loan statements, residency proof)
• Income information
• Scoring breakdown and internal review notes
• Application review history

Data Storage

All data is stored in Supabase with encryption at rest. Applicant verification documents are stored in encrypted cloud storage with restricted access limited to authorized administrators. Database backups are encrypted. All data is hosted in secure, SOC 2-compliant infrastructure.

Data Retention

• Rejected applicants: Personal data is retained for 90 days after rejection, then permanently purged — unless the applicant has provided separate consent for A77 marketing communications, in which case marketing contact data (name and email only) is retained.
• Funded applicants: Data is retained for 2 years after funding is complete, then permanently purged. Public listing data (first name, city) may remain on the Alumni Wall unless consent is withdrawn.
• Withdrawn applicants: Data is purged within 90 days of withdrawal.
• Advertiser data: Retained for the duration of the business relationship plus 2 years, or any legally required period.

Third-Party Services

We share data with the following third-party services only as necessary for platform operation:

• Stripe — payment processing for advertiser transactions and loan disbursements
• Resend — transactional email delivery (application confirmations, status updates)
• Plausible Analytics — privacy-focused, cookieless web analytics (no personal data collected)

We do not use Google Analytics or any invasive tracking, advertising, or profiling services. We do not sell, rent, or share personal data with any other parties.

Data Deletion Requests

Any user may request a complete deletion of their personal data by emailing hello@a77inc.com. Data deletion requests are honored and completed within 30 calendar days. A confirmation will be sent upon completion.

Consent Revocation

• Applicants may withdraw their application at any time, which removes them from the queue
• Applicants may revoke consent for public listing at any time
• Revoking consent for loan verification or direct payment will result in removal from the queue
• Marketing consent can be revoked independently without affecting application status

To revoke any consent, email hello@a77inc.com.

Your Rights

Under PIPEDA and applicable privacy legislation, you have the right to:

• Access any personal information A77 Inc. holds about you
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal retention requirements)
• Withdraw consent for any or all purposes at any time
• File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

PIPEDA Compliance

A77 Inc. is a Canadian company and complies fully with the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect personal information only with informed consent, for clearly identified purposes, and retain it only as long as necessary. We are accountable for all personal information in our possession and have implemented safeguards appropriate to the sensitivity of the information.

Contact

For privacy-related questions, data access requests, consent revocation, or deletion requests, contact the designated privacy officer: