Privacy Policy

Last updated: July 1, 2026 • Estimated reading time: 6-7 minutes

Introduction

At PassDrop, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information across our freemium SaaS product, including guest uploads, signed-in accounts, Premium and Business billing, reusable pass templates, template API requests, optional feedback, and newsletter subscriptions.

We process personal data based on legitimate interest for service delivery and security, to perform a contract when you use paid features, and with your consent where consent-based processing applies, such as newsletter subscriptions and optional feedback.

Information We Collect

We collect information you intentionally share with us and limited technical data needed to operate the service. This can include information provided when you:

  • Forward an email for wallet pass generation
  • Upload a file through our website
  • Sign in with Apple, Google, or email to access My passes
  • Contact support
  • Subscribe to the PassDrop newsletter
  • Submit optional pass-quality feedback
  • Purchase, renew, or manage a Premium or Business plan
  • Create Business templates or template-generated passes
  • Send a template pass to a recipient email address
  • Create passes through a template API URL

Depending on the flow, this may include your email address, account identifiers, uploaded or emailed content, pass-processing metadata, support messages, feedback responses, billing-related customer or subscription identifiers, template data, recipient email addresses, API request metadata, IP address, and user agent information.

How We Use Your Information

We use your information to:

  • Process requests to generate Apple Wallet passes
  • Deliver passes, download links, and job status updates
  • Associate uploads with your account when you sign in
  • Provide support, investigate failures, and prevent abuse
  • Measure service quality and improve pass extraction and delivery
  • Manage billing, entitlements, and Premium or Business access
  • Create, store, update, and delete Business templates and template passes
  • Process template API requests and return generated pass download links
  • Send template-generated passes to recipient email addresses when requested
  • Send product updates if you subscribe to the newsletter

We do not sell or rent your personal information. We use the minimum data reasonably necessary to operate the service and support customers.

Accounts and Sign-In

You can use PassDrop as a guest for some workflows. If you sign in with Apple, Google, or email, we create an account and use secure session cookies so you can access My passes and other authenticated features.

  • What we store: Account profile data such as email address, name, verification status, and authentication session records.
  • How uploads are linked: Signed-in web uploads can be attached to your account. Email submissions may be associated with the account for the sender address when available.
  • Guest usage: Guest uploads may still generate technical records so we can deliver the service and support issues, but they are not treated as a full account.

Plans and Billing

PassDrop offers both free and paid access. If you subscribe to Premium, our billing or Business, our billing and authentication systems may process customer, subscription, entitlement, and webhook event records so we can activate and manage your plan.

  • Billing data we store: Provider customer ids, subscription ids, plan information, entitlement state, and related timestamps.
  • Payment details: Payment card details are handled by our billing provider and are not stored directly by PassDrop.
  • Operational use: Billing metadata may be used for access control, fraud prevention, support, accounting, and dispute handling.
  • Account deletion: If you delete your account, we request deletion and anonymization of the linked billing customer where supported by our billing provider.

Business Templates and API

Business features let signed-in users create reusable pass templates and generate personalized passes from those templates in the product or through the template API. To provide those features, we may store:

  • Template names, descriptions, base pass payload JSON, and variable definitions
  • Template pass records, variable values, and resolved pass payloads
  • Custom logos, uploaded logo files, and logo asset references
  • Recipient email addresses when you ask us to send a template pass by email
  • Generated job ids, download link records, timestamps, and delivery status
  • Template API request metadata used for security, rate limits, and support

Recipient email addresses are used to deliver template passes and to maintain operational records tied to the generated template pass or job. We may retain those records for support, abuse prevention, dispute handling, security, and service history.

Database Storage and Job Tracking

To run the service reliably, we store job and account metadata in a secure database. This may include:

  • Job ids, status, timestamps, and processing source
  • Pass counts, success or failure results, and support-related notes
  • Account identifiers used to show jobs in My passes
  • Template and template pass identifiers when a pass is created from a template
  • Technical and security data such as IP address and rate-limit context

We do not store uploaded or emailed content in the database as a permanent content library. Content is handled for processing and delivery, while persistent records focus on metadata and operational history.

Feedback System

We offer optional feedback tools so you can tell us how well PassDrop handled a pass, delivery flow, or support experience. Feedback may include ratings, comments, and recommendation signals.

Feedback is used to identify quality issues, improve extraction and delivery reliability, and prioritize product work. Providing feedback is voluntary.

Newsletter Subscriptions

If you subscribe to the PassDrop newsletter, we store the email address you submit, the signup timestamp, and limited technical metadata such as source, IP address, or user agent when available. We use this information to manage subscriptions and send product updates.

Newsletter subscriptions are optional and based on your consent. You can unsubscribe at any time using the unsubscribe link in the email or by contacting support@passdrop.app.

Data Retention

  • Uploaded files and email content: Retained only as long as needed to process the request, generate passes, and complete delivery or troubleshooting.
  • Job metadata: Retained for up to 24 months for support, service monitoring, fraud prevention, and aggregate reporting.
  • Feedback data: Retained for up to 36 months to analyze service quality trends and address user-reported issues.
  • Newsletter data: Retained until you unsubscribe or request deletion, subject to reasonable backup retention.
  • Account and billing data: Retained as needed to maintain your account, support active subscriptions, resolve disputes, and meet legal or tax obligations.
  • Business templates: Retained while active in your account and removed or soft-deleted when you delete the template or close your account, subject to reasonable backup retention and legal obligations.
  • Template-generated passes: Template pass records, recipient email addresses, generated job links, resolved payloads, and related metadata may be retained with job history for support, abuse prevention, security, and operational records unless deleted through the product or removed during account deletion.
  • Account deletion requests: Confirmed account deletion removes PassDrop account data, linked jobs, passes, templates, template-generated passes, recipient email records, and stored files from active systems where deletion is supported. Billing providers may retain historic order and subscription records as needed for legal, tax, dispute, accounting, and fraud prevention purposes.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, and to withdraw consent for consent-based processing.

To exercise your rights, contact support@passdrop.app with enough detail for us to identify the relevant account, job, or subscription. We may ask for information needed to verify your identity before acting on a request.

Cookies and Tracking Technologies

We use a limited set of cookies, session storage, and analytics tools for authentication, security, and privacy-focused analytics.

  • Authentication cookies: Used to maintain secure signed-in sessions.
  • Guest claim session storage: We temporarily store a claim token in browser session storage so a guest upload can be saved to an account later.
  • Analytics: We use privacy-focused analytics to understand site usage without ad-tech tracking or third-party advertising cookies.
  • No advertising network profiling: We do not use the service to build ad-targeting profiles or sell tracking data.

Third-Party Services

We rely on service providers to operate PassDrop, including:

  • Vercel - Frontend hosting and deployment infrastructure.
  • Polar - Premium and Business billing, subscriptions, and customer portal flows.
  • Cloudflare Email Sending - Outbound transactional email delivery. ImprovMX - Inbound email forwarding to our processing webhook.
  • OpenAI - Content analysis and extraction assistance.
  • Mistral - OCR processing for scanned documents and images.

These providers process data on our behalf or as independent providers of the services you use through PassDrop. They are governed by their own privacy terms.

Contact Us

If you have questions about this Privacy Policy, contact us at:

support@passdrop.app