Privacy Policy
PassOn — getpasson.app and app.getpasson.app
Last updated: July 27, 2026
Plain-language summary: We collect information needed to run and protect PassOn, provide AI-assisted pricing, connect marketplace users, send requested communications, and understand whether the product works. We do not sell personal information.
1. Introduction
This Privacy Policy explains how PassOn (“we”, “us”, “our”) collects, uses, shares, retains, and protects information when you use our public pricing site, authenticated marketplace, chat, swaps, auctions, notifications, support, and related relay services.
PassOn is operated from Bali, Indonesia. For privacy requests, contact hello@getpasson.app.
2. Information We Collect
Account and profile information
- Email address, authentication and session records, display name, nationality or flag, profile content, and optional WhatsApp number.
Marketplace and transaction-related content
- Listings, descriptions, category, condition, asking price, AI estimates, area, urgency, Gear Passport origin, photos, saved listings, chats, swap offers, bids, deal status, ratings, reviews, and reports.
AI inputs and outputs
- Item details, descriptions, photos submitted for image checks, pricing inputs, generated estimates, model and grounding status, and limited diagnostic metadata.
Device, usage, and reliability information
- IP address, browser and device information, page and listing views, saves, shares, chat or swap opens, session identifiers, client errors, request timing, and security logs.
- If you enable browser alerts: notification permission, preference, push endpoint, browser-generated encryption keys, user agent, and subscription timestamps.
3. How We Use Information
- Create and secure accounts and authenticated sessions.
- Publish listings and provide profiles, saved items, chats, swaps, auctions, ratings, and related marketplace activity.
- Provide AI-assisted pricing and image verification, including fallback estimates when live AI or search is unavailable.
- Send requested OTP, transactional email, browser push, newsletter, support, and relay communications.
- Moderate content, respond to reports, prevent fraud and abuse, enforce our Terms, and protect users and the service.
- Measure product usage, diagnose errors, improve features, and create aggregated or de-identified insights.
- Comply with applicable law and respond to lawful requests.
4. When Information Is Visible or Shared
We do not sell personal information.
- Marketplace users: Listings and public profiles may display item information, photos, price, approximate area, seller name, ratings, and Gear Passport origin. Chat and swap details are available only to relevant participants and authorized administrators.
- Relay channels: Approved listing content may be shared with a private buyer or operations community through Telegram or related channels. Contact details are not intentionally placed in public listing content.
- Service providers: We use providers such as Supabase for authentication, database, and storage; Cloudflare for hosting, security, analytics, and push delivery; Google Gemini and Google Search for AI-assisted analysis; Brevo for email; Telegram for operations and relay channels; and Google Sheets for limited operational tracking.
- Legal and safety: We may preserve or disclose information where required by law or reasonably necessary to prevent fraud, protect safety, investigate abuse, or defend legal rights.
- Business changes: Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale, subject to appropriate confidentiality and notice.
5. AI Processing
When you request pricing or image verification, relevant item information or photos may be sent to Google AI services for analysis. AI results can be inaccurate and may not be grounded in current search results. Do not submit faces, identity documents, financial information, or unrelated sensitive content in item photos or descriptions.
6. Communications and Notifications
- We use your email for passwordless login and essential account or marketplace messages.
- If you subscribe to “The Relay,” Brevo processes your email to deliver newsletter messages. You can unsubscribe through the email link.
- If you enable browser alerts, we store a device-specific push subscription. You can disable alerts from your PassOn profile or browser settings.
- We may use an optional WhatsApp number for support or managed relay communication. We do not sell it or use it for unrelated advertising.
7. Browser Storage and Analytics
PassOn uses browser storage and similar technologies for authentication, drafts, recently viewed listings, interface preferences, and analytics session identifiers. Cloudflare and our internal product analytics may record page views, feature events, request metadata, and client errors. We do not currently use third-party advertising cookies or sell browsing activity for targeted advertising.
8. Data Retention
We retain account and marketplace information while your account is active and as reasonably needed to provide the service. Deleted listings may remain in a restricted soft-deleted state for fraud prevention, dispute handling, backups, and legal compliance. Security, transaction, moderation, and diagnostic records may be kept longer where necessary. Push subscriptions are removed when you disable alerts or when the browser reports that a subscription is no longer valid.
You may request account or personal-data deletion. We will remove or de-identify information unless retention is required for security, dispute resolution, legal obligations, or the rights of other users. Backup copies may expire on a delayed cycle.
9. International Processing
PassOn operates from Indonesia and uses service providers that may process information in other countries. Those countries may have different data-protection rules. We take reasonable steps to use reputable providers and appropriate contractual or technical safeguards.
10. Security
We use measures such as encrypted transport, authenticated sessions, access controls, restricted administrative routes, database policies, and secret-managed service integrations. No system is completely secure, and we cannot guarantee absolute security. Contact us promptly if you suspect unauthorized access.
11. Children's Privacy
PassOn is not intended for users under 18. We do not knowingly collect personal information from minors.
12. Legal Bases for EEA and UK Users
Where GDPR or UK GDPR applies, we generally process information because it is needed to provide the service you request, based on our legitimate interests in operating and securing the marketplace, with your consent for optional notifications or marketing, or to comply with legal obligations. You may withdraw consent without affecting prior lawful processing.
13. Your Rights
Depending on your location, you may have the right to:
- Access, correct, delete, or receive a portable copy of certain personal information.
- Object to or restrict certain processing and withdraw consent.
- Unsubscribe from marketing and disable browser alerts.
- Complain to an applicable data-protection authority.
Contact us from the email associated with your account. We may need to verify your identity and may decline requests where an exception applies.
14. Changes to This Policy
We may update this Privacy Policy. We will change the “Last updated” date and provide additional notice when a material change reasonably requires it.
15. Contact Us
PassOn — The gear marketplace built for people who move.
getpasson.app | Bali, Indonesia