Security Incident and Breach Notification Policy

About this Policy

Effective date: November 6, 2026 · Last updated: November 6, 2026 · Version: 1.0.0

AguiCorp, LLC takes the security of personal information seriously. This Policy describes how we identify, respond to, and notify You of a security incident affecting Your personal information held in connection with MyHappySky at https://www.myhappysky.com or any other AguiCorp property.

1.1 What is a Security Incident

A "security incident" means an unauthorized access to, acquisition of, use of, loss of, disclosure of, destruction of, or modification of personal information in our possession or under our control. A "breach of security" means an unauthorized access and acquisition of unencrypted computerized data that materially compromises the security, confidentiality, or integrity of personal information.

Information the free tools keep in the browser on Your own device never reaches our servers, so it is outside our systems; keep Your device secure and download a backup from the parent portal.

1.2 Our Commitment Under Florida Law

AguiCorp is a "covered entity" under the Florida Information Protection Act of 2014 (Fla. Stat. § 501.171) ("FIPA"). FIPA sets Florida's standard for how businesses must respond to data breaches affecting Florida residents. We apply FIPA's standard — and in several respects stricter internal commitments — to all users of our Services, not only Florida residents.

1.3 What Triggers Notification to You

If we determine, after investigation, that a breach of security has occurred that affects Your personal information, we will notify You:

• Within 30 days of determining the breach has occurred, as required by FIPA § 501.171(4)(a);
• By the fastest reliable means available, including email to the address on file for Your account, and where appropriate, by notice on the Service, by mail, or by telephone;
• With the content specified by FIPA § 501.171(4)(e), including:
  • the date, estimated date, or date range of the breach;
  • a description of the personal information that was accessed or acquired, or that is reasonably believed to have been;
  • information You can use to protect Yourself from identity theft or fraud, including contact information for the credit reporting agencies and the Federal Trade Commission;
  • our contact information so You can ask questions and learn more about what we are doing in response.

Children's information. If a breach affects information about a child, we send the notice to the parent or legal guardian who holds the parent account.

1.4 What Triggers Notification to the Florida Attorney General

If a breach affects 500 or more individuals in Florida, we will also notify the Florida Attorney General within 30 days of determining the breach, as required by FIPA § 501.171(3)(a). That notification will include:

• a synopsis of the events surrounding the breach at the time notice is provided;
• the number of individuals in Florida who were or potentially have been affected;
• any services related to the breach being offered or scheduled to be offered to individuals, without charge, and instructions for how to use such services;
• a copy of the notice sent to affected individuals;
• the name, address, telephone number, and email of the AguiCorp employee or agent from whom additional information may be obtained.

1.5 Notification to Consumer Reporting Agencies

If a breach affects more than 1,000 individuals at a single time, we will notify, without unreasonable delay, each consumer reporting agency that compiles and maintains files on consumers on a nationwide basis, as required by FIPA § 501.171(5), of the timing, distribution, and content of the notices sent to affected individuals.

1.6 Delayed or Limited Notification

Notification may be delayed only if:

• a federal, state, or local law enforcement agency determines that notification will interfere with a criminal investigation and provides us with a written request to delay — in which case notification will be made as soon as reasonably possible after the agency determines that notification will no longer interfere with the investigation; or
• after an appropriate investigation and consultation with relevant federal, state, or local law enforcement, we reasonably determine that the breach has not and will not likely result in identity theft or any other financial harm to the individuals whose personal information has been accessed. In that case, we will document in writing the determination that notification is not required and maintain that documentation for at least 5 years, as required by FIPA § 501.171(4)(c).

1.7 Documentation and Audit

We maintain a written record of every security incident, every breach determination, and every notification sent. These records are kept for not less than 5 years and are available to the Florida Attorney General on request, as required by FIPA § 501.171(9).

1.8 Processor Obligations

Where AguiCorp acts as a service provider ("third-party agent" under FIPA § 501.171(6)) for another entity's data, we will notify the covered entity on whose behalf we maintain the data of any breach as soon as practicable, but no later than 10 days following determination of the breach. This applies in particular to BillingSky's processing on behalf of other AguiCorp properties, and to SpamSky's processing on behalf of other AguiCorp properties.

1.9 Your Role

If You believe Your account has been accessed without Your authorization, Your credentials have been stolen, or You have received a notification that appears to be from AguiCorp but is suspicious, contact us immediately at [email protected].

1.10 Contact

For questions about this Policy or to report a suspected security incident:

• Email: [email protected]
• General Legal: [email protected]
• Phone: 407-751-1551
• Mail: AguiCorp, LLC, Attn: Security, P.O. Box 620101, Orlando, FL 32862, USA

To report a security vulnerability in MyHappySky, see our Security Policy.