Legal
Privacy Policy
1. Who We Are
PassPages ("PassPages," "we," "our," or "us") operates the website located at passpages.xyz (the "Service"). We provide AI prompt packs for students, accessible through your PassPages account after purchase.
If you have questions about this Privacy Policy or our data practices, contact us at: pass.pages.2@gmail.com
2. Information We Collect
Information You Provide Directly
- Account information: Your name and email address when you create an account.
- Payment information: We do not store your credit card details. All payment processing is handled by Stripe, Inc. We receive a record of your purchase (product purchased, amount, and date) but never your full card number, CVV, or billing address.
- Communications: Any information you send us by email, including support requests or creator early access applications.
Information Collected Automatically
- Usage data: Pages visited, time spent on the site, features accessed, and general navigation patterns. This is collected through Vercel Analytics, which is privacy-friendly and does not use cookies or fingerprinting to track individual users across sites.
- Device and technical data: Browser type, operating system, screen resolution, referring URL, and general geographic region (country/state level, derived from IP address). We do not store raw IP addresses.
- Session information: Login timestamps and session tokens used to keep you signed in securely.
Information We Do Not Collect
- We do not use third-party advertising trackers or ad networks.
- We do not track you across other websites.
- We do not collect Social Security numbers, government ID numbers, or sensitive financial account numbers.
- We do not knowingly collect information from children under 13 (see Section 9).
3. How We Use Your Information
We use the information we collect for the following purposes:
To Operate and Deliver the Service
- Create and maintain your account
- Verify your identity when you log in
- Unlock and display the prompt packs you have purchased
- Process payments through Stripe and maintain your purchase history
- Send transactional emails (account confirmation, password reset, purchase receipt)
For Marketing Research and Product Improvement
We analyze aggregated and anonymized usage data to understand how students interact with the Service. This research is used solely to:
- Identify which prompt packs are most valuable and which need improvement
- Understand how users navigate the site so we can improve the experience
- Determine which features to build next
- Inform our marketing strategy, including understanding which content resonates with our audience
- Measure the overall performance of the Service
This analysis is conducted on aggregate data and is not used to build individual behavioral profiles. We do not share individual-level usage data with third parties for their marketing purposes.
For Marketing Communications
With your consent, we may send you emails about new prompt packs, updates to the Service, and promotions. You can opt out of these communications at any time by clicking "Unsubscribe" in any marketing email or by contacting us at pass.pages.2@gmail.com. Opting out of marketing emails does not affect transactional emails related to your account or purchases.
4. How We Share Your Information
We do not sell your personal information. We share your information only in the following limited circumstances:
Service Providers
We use trusted third-party services to operate the platform. Each provider only receives the data necessary to perform their function:
- Stripe, Inc. — Payment processing. Stripe is PCI-DSS compliant. See Stripe's Privacy Policy.
- Supabase, Inc. — Account authentication and secure database storage. See Supabase's Privacy Policy.
- Vercel, Inc. — Website hosting and privacy-friendly analytics. See Vercel's Privacy Policy.
Legal Requirements
We may disclose your information if required by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of PassPages, our users, or the public.
Business Transfers
If PassPages is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you by email and/or prominent notice on our website before your data becomes subject to a different privacy policy.
5. Cookies and Tracking Technologies
We use minimal, functional cookies and local storage to operate the Service:
- Authentication tokens: Stored in your browser to keep you logged in securely. These are required for the Service to function.
- Theme preference: A single item stored in your browser's local storage to remember whether you prefer dark or light mode.
We do not use advertising cookies, cross-site tracking cookies, or behavioral retargeting pixels. Vercel Analytics collects usage statistics without setting tracking cookies or fingerprinting your browser.
6. FTC Compliance and Advertising Disclosures
PassPages complies with the Federal Trade Commission Act (15 U.S.C. § 45) and applicable FTC guidelines, including the FTC's Endorsement Guides and regulations concerning unfair or deceptive acts or practices.
- We make no false or misleading claims about our products, pricing, or the outcomes users can expect from using our prompts.
- If PassPages engages in affiliate marketing, sponsored content, or paid partnerships in the future, such relationships will be clearly and conspicuously disclosed.
- Any testimonials or user reviews displayed on the Service reflect the genuine experiences of real users. Results may vary.
- Pricing displayed on the Service is accurate and inclusive of all fees charged directly by PassPages. Stripe's payment processing fees are not passed on to customers.
- Our email marketing practices comply with the CAN-SPAM Act. Every marketing email we send includes a clear opt-out mechanism, our physical mailing address, and truthful subject lines.
7. Your Privacy Rights
Depending on where you live, you may have certain rights regarding your personal information.
All Users
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may update your account information at any time by logging in to your account.
- Deletion: You may request that we delete your account and associated personal data. Note that purchase records may be retained as required by law or for legitimate business purposes (e.g., tax compliance).
- Opt-out of marketing: You may unsubscribe from marketing emails at any time.
California Residents (CCPA / CPRA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:
- The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information)
- The right to delete personal information we have collected from you
- The right to opt out of the sale of personal information (not applicable — we do not sell personal information)
- The right to non-discrimination for exercising your privacy rights
- The right to correct inaccurate personal information
- The right to limit the use of sensitive personal information (we do not process sensitive personal information as defined by CPRA)
To exercise any of these rights, contact us at pass.pages.2@gmail.com. We will respond within 45 days.
EEA, UK, and Swiss Residents (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation including the right to data portability and the right to lodge a complaint with your local supervisory authority. Our lawful basis for processing is performance of a contract (account and purchase fulfillment) and legitimate interests (product improvement and aggregated analytics).
8. Data Retention
We retain your account information and purchase history for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where retention is required by law (such as financial records, which may be retained for up to 7 years for tax compliance purposes).
Anonymized and aggregated usage data, which cannot be used to identify you, may be retained indefinitely for research and analytics purposes.
9. Children's Privacy (COPPA)
PassPages is designed for high school and college students. The Service is not directed to children under the age of 13. We do not knowingly collect personal information from anyone under 13 years of age. If we learn that we have collected personal information from a child under 13 without verifiable parental consent as required by the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501 et seq.), we will delete that information promptly.
If you believe we may have collected information from a child under 13, please contact us immediately at pass.pages.2@gmail.com.
10. Data Security
We take reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encrypted data transmission using TLS/HTTPS across all pages
- Passwords stored using industry-standard hashing (managed by Supabase Auth)
- Payment data handled exclusively by PCI-DSS certified Stripe infrastructure
- Access to production data limited to essential personnel
No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
11. Third-Party Links
The Service may contain links to third-party websites (such as links to AI tools like ChatGPT or Claude). This Privacy Policy applies only to PassPages. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email to the address associated with your account. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
- Email: pass.pages.2@gmail.com
- Website: passpages.xyz
We will respond to all privacy-related inquiries within 30 days.