Pegasus4i workspace

Privacy Notice

Effective 18 September 2026

This notice explains what the Pegasus4i subscriber workspace at app.pegasussource.ai collects, why, who it's shared with, and the choices you have. The workspace is operated by Pegasus Source LLC ("Pegasus," "we," "us"). We keep this deliberately short and plain.

What we collect

We only collect what the workspace needs to sign you in and run the tools you use:

• Account details you give us — your name, company, and work email, entered when you create your workspace.
• Your diagnostic results — the answers and scores from the HOT readiness diagnostic (Human, Organization, Technology), saved to your profile so your workspace and the ROI model can use them.
• Usage events — a record of actions inside the workspace, such as running or saving an ROI sizing or completing the diagnostic, so we can show your engagement history.
• Sign-in and security data — a single-use sign-in link (valid 15 minutes), a session cookie that keeps you signed in, and your IP address, which we process to rate-limit sign-in requests and protect the service from abuse.
• Your consent record — the fact and time you agreed to this notice.

We do not ask for a password, and we do not knowingly collect any special-category information (such as health, financial-account, or government-ID numbers). Please don't enter any in free-text fields.

How we use it

We use your information to create and secure your account, send your sign-in link, save and display your diagnostic results, run the workspace tools, respond to your requests, and keep the service reliable and secure. We do not use it for advertising, and we do not sell or rent it to anyone.

Who it's shared with

We use a small number of service providers ("processors") that handle data on our behalf, under contract, only to run the workspace:

• Cloudflare — hosting, the database that stores your profile and results, and network security.
• Resend — sending your transactional sign-in emails.

We may also disclose information if required by law, or as part of a business transfer (such as a merger or acquisition), in which case we'll ensure it stays protected under terms consistent with this notice.

Cookies

The workspace sets one cookie, pp_session, after you sign in. It is strictly necessary — it keeps you signed in and cannot be turned off while you use the workspace. It is an HttpOnly, Secure cookie scoped to .pegasussource.ai and expires after 14 days. We don't use advertising or third-party tracking cookies here. Your browser may also store your email locally to pre-fill the sign-in form; that stays on your device.

How long we keep it

We keep your profile and results for as long as your workspace is active, and delete or anonymize them within a reasonable period after you ask us to close it or delete your data. Sign-in links expire in 15 minutes; short-lived security records (such as rate-limit counters) clear on their own.

Your choices and rights

You can ask us to access, correct, export, or delete your information, or to close your workspace, at any time. Depending on where you live, you may have additional rights under laws such as the GDPR or state privacy laws; we honor these regardless. To make a request, contact us using the details below — we may need to verify your identity first.

Security

Access is passwordless and protected by single-use, time-limited sign-in links and a signed session. Data is stored on Cloudflare's infrastructure and transmitted over encrypted connections. No system is perfectly secure, but we work to protect your information and limit who can reach it.

Children

The workspace is a business tool intended for adults and is not directed to children.

Changes

If we change this notice, we'll update the date above and, for material changes, let you know in the workspace or by email.

Contact

Questions or requests about your privacy: email privacy@pegasussource.ai, or reach us through the Pegasus4i contact page. Pegasus Source LLC is the data controller for the Pegasus4i workspace.