This Privacy Notice describes how Platypass LLC ("Platypass", "we", "us") collects, uses, shares, and protects personal data when you use the Platypass website, applications, and related services (the "Service").
1. Data Controller
Platypass LLC acts as the data controller for personal data collected through the Service, meaning we determine how and why your data is processed.
2. Personal Data We Collect
We collect the following categories of personal data:
- Account data: name, email address, username, password (hashed), and profile information you provide.
- Business data: if you claim a business listing, the business name, address, phone, website, hours, photos, and related information you submit.
- User content: reviews, photos, favorites, itineraries, and other content you create on the Service.
- Communication data: messages you send to support and any feedback you provide.
- Usage and device data: pages viewed, features used, IP address, browser type, device identifiers, and approximate location.
- Cookies and similar technologies: see Section 9 below.
3. How We Use Personal Data
- Provide the Service: create and manage your account, deliver listings, process claims, and personalize discovery (legal basis: contract performance).
- Process payments: our payment provider Paddle handles transaction-related data (legal basis: contract performance).
- Customer support: respond to your questions and resolve issues (legal basis: legitimate interest).
- Improve the Service: analyze usage and develop new features (legal basis: legitimate interest).
- Security and fraud prevention: detect, prevent, and respond to abuse (legal basis: legitimate interest, legal obligation).
- Marketing: send product updates and promotional communications where permitted (legal basis: consent or legitimate interest).
- Legal compliance: comply with applicable laws and respond to lawful requests (legal basis: legal obligation).
4. How We Share Personal Data
We share personal data with the following categories of recipients:
- Service providers and subprocessors: hosting, database, analytics, email delivery, and customer support tooling.
- Merchant of Record (Paddle): for processing sales, subscription management, payments, tax compliance, invoicing, and refunds.
- Professional advisers: legal, accounting, and similar advisers as needed.
- Authorities: where required by law, regulation, court order, or to protect rights and safety.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
We do not sell your personal data.
5. Data Retention
We retain personal data only as long as necessary for the purposes described in this Notice, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. When data is no longer needed, we delete or anonymize it.
6. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Request deletion of your data;
- Restrict or object to certain processing;
- Receive a portable copy of your data;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact us through the in-app support channels. We respond to verifiable requests within the timeframes required by applicable law.
7. Security
We use appropriate technical and organizational measures — including encryption in transit, access controls, and regular security reviews — to protect personal data. No system is perfectly secure, but we work hard to minimize risk.
8. International Transfers
Personal data may be processed in the United States and other countries where we or our service providers operate. Where required, we put appropriate safeguards in place (such as standard contractual clauses) to protect transferred data.
9. Cookies
We use essential cookies to operate the Service (for example, to keep you signed in) and may use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use parts of the Service.
10. Children
The Service is not directed to children under 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can delete it.
11. Changes to This Notice
We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top reflects the latest revision.
12. Contact
Questions about this Privacy Notice or our data practices? Contact Platypass LLC through the in-app support channels.