Privacy Policy

Data Passage handles

Passage stores your email address, password hash, account and subscription status, sessions, API-token metadata, account dates, and the policy version and time you accepted at signup. It stores the Markdown documents you save, including document titles, sharing state, and timestamps.

Password-reset requests, security rate-limit records, and ordinary server logs may contain your email address, an IP address or a one-way hash, request details, and error information. Passage does not sell your personal data or use third-party advertising trackers.

Why it is used

This data is used to provide and secure the service, authenticate you, save and share documents at your direction, deliver account email, manage subscriptions, prevent abuse, support users, and meet legal and accounting obligations.

Service providers

Google Cloud hosts the application, database, logs, and backups. Stripe processes subscription payments and keeps billing records. Resend delivers account email. These providers process data under their own terms and may process it outside your country.

Data may also be disclosed when required by law, to protect Passage or others, or as part of a business transfer. Public documents are disclosed only when you enable their share link.

Retention and deletion

Account and document data is kept while your account is active. Removing a document from the workspace currently archives it in the account rather than erasing it permanently. A verified permanent-deletion request removes the account and its documents, shares, sessions, API tokens, grants, and local billing state from the active database. If Stripe cleanup must be retried, Passage temporarily keeps the account email and Stripe customer ID in a restricted cleanup record and removes that record when cleanup succeeds.

Routine database backups and point-in-time recovery data follow a seven-backup and seven-day schedule. Deleted data cannot be removed from an individual backup and remains there until that backup expires. Stripe may retain invoices, payments, and related data for legal, fraud-prevention, and accounting reasons. Limited records may be retained where law or a security investigation requires it.

Security

Passage uses access controls, encrypted connections, hashed passwords and tokens, restricted production secrets, backups, and provider security controls. No online service can guarantee absolute security.

Your requests

You may ask for a machine-readable export, correction, or permanent deletion of your account data. Send the request from your account email to owain@gradientwork.com. We may ask for reasonable proof that you control the account before acting. Applicable law may give you additional privacy rights.

Changes and contact

Material changes will be posted here with a new effective date. Privacy questions can be sent to owain@gradientwork.com.