1. Introduction
Welcome to InfoPass ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name, and password when you create an account
- Contact Information: Phone numbers and email addresses when you verify to access passes
- Content: Files, links, and other content you upload or share through InfoPass
- Communication Data: Messages you send through our contact form
2.2 Automatically Collected Information
- Usage Data: Information about how you use our service, including scan counts and access patterns
- Device Information: IP address, browser type, and device identifiers
- Cookies: We use cookies and similar technologies to maintain your session and improve user experience
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Send verification codes via WhatsApp, SMS, or Email
- Track and analyze usage patterns to improve user experience
- Communicate with you about service updates and support
- Prevent fraud and ensure platform security
- Comply with legal obligations
4. Information Sharing
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party services like Cloudinary (file storage), Twilio/MSG91 (SMS/WhatsApp), and Resend/SendGrid (email)
- Pass Creators: When you verify to access a pass, your contact information is shared with the pass creator
- Legal Requirements: When required by law or to protect our rights
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit using SSL/TLS
- Secure password hashing using bcrypt
- Regular security audits and updates
- Access controls and authentication
6. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations:
- Account data: Until you delete your account
- Contact information: As long as the associated pass exists
- Verification codes (OTP): 5 minutes or until verified
- Activity logs: 90 days
7. Your Rights
You have the right to:
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information
- Opt-out: Unsubscribe from marketing communications
- Data Portability: Receive your data in a portable format
To exercise these rights, please contact us at csgosaifi5@gmail.com
8. Third-Party Services
We use the following third-party services:
- Cloudinary: File storage and delivery
- Twilio/MSG91: SMS and WhatsApp messaging
- Resend/SendGrid: Email delivery
- Supabase/PostgreSQL: Database hosting
These services have their own privacy policies governing their use of your information.
9. Children's Privacy
InfoPass is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at: