Privacy Policy

Account data: name, email address, hashed password, organisation details, and role.

Customer Data: the product information, images and documents you upload. This is normally commercial rather than personal data, but may include contact details of your economic operator or service contacts.

Usage data: log records, IP address, browser and device information, pages viewed and actions taken, collected to operate and secure the service.

Billing data: handled by our payment processor; we do not store full card numbers.

To provide and maintain the service and perform our contract with you; to secure the platform, prevent abuse and debug faults on the basis of our legitimate interests; to send service and billing communications on the basis of contract; to send product updates where you have consented or where permitted; and to comply with legal obligations.

When you publish a passport, the information in it becomes publicly accessible to anyone with the link or the printed code, and may be indexed by search engines. Do not include personal data in a published passport unless you have a lawful basis to make it public.

We share data with processors who help us operate the service — cloud hosting and database infrastructure, email delivery, payment processing, and error monitoring — each bound by contractual confidentiality and security obligations. We do not sell personal data or share it for third-party advertising.

We may disclose data where required by law, to protect our rights, or in connection with a merger or acquisition, in which case we will notify you.

Data may be processed outside your country, including in the European Union and the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Account and Customer Data are retained while your account is active and for 30 days after termination to allow export, unless a longer period is required by law. Logs are typically retained for up to 12 months.

Subject to applicable law you may request access to, correction of, deletion of, or a portable copy of your personal data; object to or restrict certain processing; and withdraw consent at any time. Contact privacy@tagpass.one. You may also lodge a complaint with your local data protection authority.

We apply technical and organisational measures including encryption in transit, encryption at rest, row-level access controls scoped to your organisation, least-privilege administration and regular patching. No system is perfectly secure; we will notify you of a personal data breach where legally required.

The service is not directed to children and we do not knowingly collect their data.

We will post updates to this policy here and notify you of material changes. Contact privacy@tagpass.one or write to Musivo LLC, Tornado Tower, Doha, Qatar.