Security Policy

Effective Date: August 6, 2026

Security at a Glance

• ✓ We never ask for your seed phrase.
• ✓ Wallet signatures never move funds.
• ✓ Sensitive data is encrypted where appropriate.
• ✓ Access is restricted using least-privilege principles.
• ✓ We continuously monitor for abuse and suspicious activity.
• ✓ Security issues can be reported to support@ansemperks.com.

1. Our Security Commitment

At ANSEM Perks, security is a fundamental part of how we design, build, and operate our platform.

We recognize that our users trust us to verify wallet ownership, protect account information, process benefit claims, and safeguard personal data. Protecting that trust is one of our highest priorities.

Security is incorporated throughout our development lifecycle and operational processes. We continuously review and improve our security practices as technology, threats, and regulatory requirements evolve.

Although no online service can guarantee absolute security, we are committed to implementing reasonable administrative, technical, and organizational measures designed to protect the confidentiality, integrity, and availability of our Platform and the information entrusted to us.

2. Security Principles

Our security program is guided by the following principles:

• Security by Design
• Privacy by Design
• Least Privilege Access
• Defense in Depth
• Secure Defaults
• Continuous Improvement
• Transparency
• Responsible Disclosure

These principles influence both technical implementation and operational decision-making.

3. Wallet Security

Wallet security is shared between ANSEM Perks and our users.

Wallet Verification

To verify wallet ownership, we may request that you cryptographically sign a message using your wallet.

This signature:

• verifies wallet ownership;
• does not transfer tokens;
• does not create a blockchain transaction;
• does not grant us access to your wallet.

Wallet verification is used only to confirm eligibility for Platform features and Partner benefits.

Information We Will Never Request

ANSEM Perks will never ask for:

• your wallet seed phrase;
• your recovery phrase;
• your private keys;
• your wallet password;
• remote access to your device.

If anyone claiming to represent ANSEM Perks requests this information, treat it as fraudulent and contact us immediately.

User Responsibilities

Users should:

• use reputable wallet software;
• enable available security features;
• keep wallet software updated;
• protect recovery phrases offline;
• verify website URLs before connecting a wallet;
• disconnect wallets from untrusted websites.

The security of your digital assets ultimately depends on the security of your wallet and your own operational practices.

4. Authentication and Account Security

Where user accounts are supported, we implement measures designed to reduce unauthorized access.

These may include:

• secure authentication mechanisms;
• encrypted communications;
• session management;
• automatic session expiration where appropriate;
• secure password handling (if passwords are used);
• wallet ownership verification;
• rate limiting;
• abuse detection.

Users are responsible for maintaining the confidentiality of their authentication credentials and notifying us promptly if unauthorized access is suspected.

5. Infrastructure Security

We implement multiple layers of security to protect the Platform and supporting infrastructure.

Depending on operational requirements, these measures may include:

• encrypted network communications (HTTPS/TLS);
• secure cloud infrastructure;
• firewall protections;
• network segmentation where appropriate;
• system monitoring;
• vulnerability management;
• software updates;
• infrastructure hardening;
• redundancy for critical services;
• secure configuration management.

For security reasons, we do not publicly disclose detailed implementation information.

6. Data Protection

Protecting user information is an important component of our security program.

We implement measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction.

These measures may include:

• encryption in transit;
• encryption at rest where appropriate;
• role-based access controls;
• secure authentication;
• audit logging;
• secure backups;
• restricted administrative access;
• continuous monitoring.

Access to sensitive information is limited to personnel and systems that require access for legitimate business purposes.

7. Application Security

Security is integrated throughout the software development lifecycle.

Our development practices may include:

• secure coding standards;
• peer review of production code;
• dependency management;
• vulnerability monitoring;
• automated testing;
• input validation;
• server-side authorization;
• output encoding;
• security-focused release reviews.

We regularly evaluate our applications against recognized industry security practices, including the OWASP Top 10.

8. Fraud Prevention

To protect users and Partners, we monitor the Platform for suspicious or abusive activity.

Examples include:

• repeated failed authentication attempts;
• unusual wallet verification activity;
• duplicate claim attempts;
• automated abuse;
• suspicious account behavior;
• unauthorized access attempts.

Where appropriate, we may temporarily suspend accounts, wallets, claims, or Partner access while investigating suspicious activity.

Our fraud prevention measures are designed to protect the integrity of the Platform and may evolve over time.

9. Responsible Disclosure

We appreciate responsible disclosure of security vulnerabilities.

If you believe you have identified a potential security vulnerability affecting ANSEM Perks, please report it to:

security@ansemperks.com

Please include:

• a description of the issue;
• steps to reproduce;
• affected URLs or features;
• supporting screenshots or logs where appropriate;
• your contact information.

We ask that researchers:

• avoid accessing data that does not belong to them;
• avoid disrupting Platform availability;
• avoid exploiting vulnerabilities beyond what is reasonably necessary to demonstrate the issue;
• allow us a reasonable opportunity to investigate and remediate the issue before public disclosure.

We will make reasonable efforts to:

• acknowledge reports promptly;
• investigate reported issues;
• keep researchers informed where appropriate;
• remediate confirmed vulnerabilities according to their severity.

Submission of a vulnerability report does not create any contractual relationship, employment relationship, or obligation to provide compensation unless expressly agreed in writing.

10. Security Incidents

Despite our security measures, no online service can eliminate all risk.

If we become aware of a security incident that materially affects personal information or Platform operations, we will:

• investigate the incident;
• contain the issue where possible;
• assess the potential impact;
• restore affected services;
• notify affected users where required by applicable law;
• notify regulatory authorities where legally required;
• implement appropriate corrective measures.

Following significant incidents, we review our security controls to reduce the likelihood of similar events occurring in the future.

11. Third-Party Services

ANSEM Perks relies on carefully selected third-party service providers to support Platform operations.

These providers may include:

• cloud hosting providers;
• authentication providers;
• blockchain infrastructure providers;
• analytics providers;
• email service providers;
• customer support tools.

While we carefully select service providers, they operate independently.

Users should also review the security and privacy practices of any third-party services they choose to use.

12. Business Continuity

We maintain operational procedures designed to improve service resilience and reduce disruption.

These procedures may include:

• secure backups;
• infrastructure redundancy where appropriate;
• monitoring;
• disaster recovery planning;
• incident response procedures.

Although we strive for high availability, uninterrupted Platform availability cannot be guaranteed.

13. User Security Best Practices

Users can significantly improve their own security by following good security practices.

We recommend that users:

• never share wallet recovery phrases or private keys;
• use hardware wallets for significant digital asset holdings where appropriate;
• enable multi-factor authentication on email accounts and other services where available;
• verify website addresses before connecting wallets;
• keep operating systems and browsers up to date;
• use strong, unique passwords where passwords are required;
• remain cautious of phishing attempts;
• review wallet permissions periodically;
• disconnect wallets from unused services.

If you believe your wallet or account has been compromised, contact us immediately and disconnect your wallet from the Platform if possible.

14. Continuous Improvement

Security is an ongoing process.

We continually review and improve our security program based on:

• evolving threats;
• industry best practices;
• technological developments;
• user feedback;
• operational experience;
• regulatory developments.

As our Platform evolves, our security practices may also evolve.

15. Contact Us

Questions relating to Platform security may be directed to:

ANSEM Perks

Website: https://ansemperks.com

General Support: support@ansemperks.com