Security Policy

This policy describes the security characteristics and intended use of the Mandaro Group website. It does not certify the security of every internal system, email provider, investment vehicle, or third-party platform.

1. Website scope

The site presents company information and accepts introductory inquiries. It does not accept payments, collect banking credentials, provide an investor account portal, or receive uploaded tax or investment documents. When you submit an inquiry, the website validates it on the server and uses an email delivery service to forward it to the appropriate Mandaro inbox.

2. Website connection

The published site uses HTTPS to protect the connection between your browser and its hosting service. Hosting infrastructure is operated by third-party providers. HTTPS does not establish the security of your device, guarantee email confidentiality, or eliminate phishing and other risks.

3. Sensitive communications

Do not send passwords, government identifiers, bank account details, tax records, or sensitive employee and customer information through an initial inquiry. Ask your established Mandaro contact to arrange an appropriate channel and, where relevant, a confidentiality agreement before exchanging sensitive documents.

This website makes no representation that ordinary email is end-to-end encrypted or that every connected service uses a particular encryption standard. Protect access to your own email, device, and saved drafts.

4. Fraud prevention

Verify the sender and destination before sharing information. Independently confirm any payment instructions or changes through an established contact using a contact method obtained separately from the message containing the instructions. Do not rely on an unexpected email, social message, or website link to authorize a transfer. This website is not a payment channel.

5. Reporting a concern

Report suspected impersonation, a suspicious message, accidental disclosure, or a potential website vulnerability to legal@mandaro.com. Include the affected URL, a concise description, the time observed, and a safe way to reach you. Do not include passwords, exploit payloads containing personal data, or another person's confidential records.

This contact channel is not authorization to access systems without permission, disrupt services, obtain other users' data, or conduct destructive testing. It does not establish a bug bounty or a promise of compensation.

6. Security limits and incident handling

No system is completely secure. Reports will be assessed in context and, where applicable, coordinated with relevant service providers. Any legally required notifications will be handled under applicable law. This page does not promise a specific response time or describe controls that have not been independently verified for every service.

7. Related policies

Our Privacy Policy covers inquiry information, technical processing, and retention. The Terms of Use govern website access. Separate agreements may apply to secure document exchange or future investor services. This policy may be updated as the site changes.

Contact

Mandaro Corp., also known as Mandaro Group
legal@mandaro.com