Privacy Policy

For company details and contact information, see our Impressum. This policy covers both our marketing website and the PassIssuer application. We do not sell your data and do not engage in behavioral advertising.

Our marketing website is hosted on the Cloudflare network. We use analytics to understand how visitors use our website. We do not collect personal data, and do not track visitors across websites.

We only use essential cookies necessary for the website to function. No marketing or tracking cookies are used.

When you create an account, we collect:

• Your name
• Your email address
• Your company details

This information is hosted in the EU.

Payments are processed by Stripe. We do not store your credit card details. Stripe handles all payment data directly and is certified as a PCI Level 1 Service Provider.

When you use PassIssuer to create wallet passes for your customers, the following data may be stored:

• End-customer names and email addresses
• Pass usage data (scans, redemptions, timestamps)
• Location data (where passes are scanned)

You are the data controller for your customers' data. We process this data on your behalf as a data processor. You are responsible for ensuring you have the appropriate consent from your customers.

To deliver updates to wallet passes, we use Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM). These services receive device tokens to deliver notifications but do not have access to pass content.

• Transactional emails (account verification, password resets, receipts)
• Product updates and tips (you can unsubscribe anytime)

We use a third-party service to monitor our application for errors and to improve reliability. Error reports may include technical information about your browser and the actions that led to an error.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data, except where we need to retain certain information for legal or accounting purposes.

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data
• Object to processing
• Withdraw consent for marketing emails

Contact us at [email protected] to exercise these rights.

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with a data protection authority.

We may update this policy from time to time. Changes will be posted on this page with an updated date.