PassConsole helps organizations issue membership passes to their members in Google Wallet. PassConsole is operated by MISC DIGITAL HOLDINGS LLC, a Florida limited liability company (“PassConsole”, “we”). You can reach us at hello@passconsole.com.
This policy explains what we collect, why, who we share it with, and the choices you have. It covers three groups of people: visitors and people who request access, admins who sign in to the console, and members who receive a pass.
Who is responsible for what
- Organizations are responsible for their members’ data. When an Organization adds a member, the Organization decides what to collect and why, and is the controller of that data. PassConsole processes it on the Organization’s behalf, as its service provider (processor), to run the console, claim links and passes.
- PassConsole is responsible for the rest. That includes Requests for access, admin sign-in and accounts, security records, and website analytics.
If you are a member and want to see, correct or delete your information, contact your Organization first. We will help the Organization respond.
What we collect
When someone requests access
Full name, work email, organization name, role or title, and your answers about the organization (website, estimated members, region, use case and notes). We also store a one-way hash of the IP address that submitted the form, only to limit repeated submissions, and our own review notes and status for the Request.
Admins
Email address, role and Organization membership. Sign-in uses an emailed link, with no password. Links are stored only as a hash, work once and expire. While you are signed in, we keep a session record. We also keep an audit log of admin actions (who did what and when, for example creating an Organization or adding members).
Members
Entered or imported by the Organization’s admins: full name, member number, an optional email address, status and an optional expiration date. We also store the personal claim link created for each member and the pass design the Organization writes (text, images, logo and colors).
Technical data
Our hosting provider records standard request logs (such as IP address, browser, pages requested and time). Our website also uses an analytics service, described below.
How we use it
- To review Requests and set up Organizations and admins.
- To sign admins in, keep sessions secure and keep an audit trail.
- To let admins manage members and let members claim and update their pass.
- To send the emails described below.
- To prevent abuse and keep the service running, and to understand how the website is used.
Member data
Organizations add and control their members’ information: name, member number, email address (if the Organization provides one), status, expiration date and the pass design. We use member data only to create, deliver and update that Organization’s passes, and to send the emails the Organization chooses to send, such as claim links.
- We never sell member data.
- We never market to members or send them our own content.
- The Organization decides what to collect and handles requests from its members. We help when the Organization asks.
- We delete an Organization’s member data when the Organization asks us to, or when its account closes.
Emails
We send email through an email delivery provider from no-reply@mail.passconsole.com. Replies go to hello@passconsole.com. The emails are:
- a sign-in link, to admins who ask to sign in;
- a confirmation to the person who submitted a Request, and a welcome email with a sign-in link to a new Org admin;
- an alert to PassConsole staff when a new Request arrives;
- a claim link email to a member, when the member’s Organization chooses to email it.
Org admins receive service emails, such as sign-in links and important account and product notices. We send promotional or newsletter emails to admins only if they opt in, and every such email includes an unsubscribe link. Members never receive marketing email from us.
Google Wallet
When a member taps “Add to Google Wallet”, we create or update their pass through Google’s Wallet API. The pass contains the member’s name, member number, status and expiration (if set), the Organization’s name, and the text, images, colors and code text the Organization put on the pass. We do not send the member’s email address to Google. When the Organization syncs a design change, we update passes that members have already saved. Google handles the saved pass and the member’s Google account under Google’s privacy policy.
Apple Wallet is not offered today. If Apple Wallet passes are offered, the same pass details described above (member name, member number, status, expiration, Organization name and the pass content the Organization sets) would be provided to Apple to create and update the pass, and we would update this policy first.
Service providers
We use these providers to run PassConsole. Each handles data under its own terms and privacy policy.
| Category | What it does | Data involved |
|---|---|---|
| Hosting | Hosting, request logs and file storage for uploaded images | Website traffic and logs, uploaded logos and pass images |
| Database | Database | Requests, accounts, sessions, audit log, members, pass designs |
| Email delivery | Email delivery | Recipient email address and the content of each email |
| Google Wallet | Stores and shows the member’s pass | Member name, member number, status, expiration and pass content |
| Analytics | Website analytics | Page views, device and browser information, cookie identifiers |
We may share information if the law requires it, or to protect the security of the service.
Cookies and analytics
Sign-in cookie. When an admin signs in, we set one first-party cookie, admin_session. It keeps you signed in for up to 7 days and is cleared when you sign out. It is not used for advertising.
Analytics. Our website uses an analytics service, which typically sets cookies and collects page views, device and browser information and approximate location. We use it to understand how the website is used. To opt out, use your browser’s privacy settings or a tracker-blocking extension.
How long we keep data
We keep data while an Organization is using PassConsole and as long as needed to run and secure the service. We do not currently delete data automatically on a schedule. For example, expired sign-in and claim links and past audit records stay in our database until we remove them. When an Organization or a person asks us to delete data, we delete it, unless we must keep something to meet a legal obligation. Copies held by our providers, such as backups and logs, are deleted on their own schedules.
Your choices and requests
Members should contact their Organization about their member data. For everything else, email hello@passconsole.com to ask for access, correction or deletion. Depending on where you live, you may have additional rights under local privacy laws. We may need to confirm who you are before acting on a request.
Security
Each Organization’s data is available only to its own admins and to PassConsole staff who operate the service. Sign-in links are single use and short lived, and the session cookie is HTTP-only and sent only over HTTPS. No system is perfectly secure, so we cannot guarantee absolute security.
Children
PassConsole is built for organizations and is not directed to children. We do not knowingly collect Requests or admin accounts from children under 13. Some Organizations, such as youth clubs, may add members who are minors. In that case the Organization is responsible for having the right to provide that information and for any consent it needs from parents or guardians. If you believe a child has given us personal data directly, contact us and we will delete it.
Where data is processed
Our providers may process data in the United States and in other countries.
Changes to this policy
We may update this policy. We will post the new version here and change the effective date. If a change is significant, we will tell Organizations by email.
Contact
MISC DIGITAL HOLDINGS LLC
7901 4th St N, Ste 300
St. Petersburg, FL 33702
hello@passconsole.com