Terms and Conditions
Last updated: July 2025
Terms and Conditions
Last updated: July 2025
Terms and Conditions
Last updated: July 2025
THIS END USER PRIVACY POLICY (“POLICY”) IS MEANT TO HELP YOU (THE “END USER”) UNDERSTAND HOW WE AT PASSAGE COLLECT, USE, AND SHARE YOUR DATA WHEN YOU USE PASSAGE PRODUCTS OR SERVICES. THIS POLICY APPLIES TO PASSAGE, INC. (COLLECTIVELY, “PASSAGE,” “WE,” “OUR,” AND “US”). (PLEASE SEE THE “CONTACTING PASSAGE” SECTION BELOW FOR WHICH OF THESE ENTITIES IS RESPONSIBLE FOR PROCESSING YOUR DATA.)
You should read this Policy carefully. It contains important information about your privacy rights and choices.
THIS END USER PRIVACY POLICY (“POLICY”) IS MEANT TO HELP YOU (THE “END USER”) UNDERSTAND HOW WE AT PASSAGE COLLECT, USE, AND SHARE YOUR DATA WHEN YOU USE PASSAGE PRODUCTS OR SERVICES. THIS POLICY APPLIES TO PASSAGE, INC. (COLLECTIVELY, “PASSAGE,” “WE,” “OUR,” AND “US”). (PLEASE SEE THE “CONTACTING PASSAGE” SECTION BELOW FOR WHICH OF THESE ENTITIES IS RESPONSIBLE FOR PROCESSING YOUR DATA.)
You should read this Policy carefully. It contains important information about your privacy rights and choices.
THIS END USER PRIVACY POLICY (“POLICY”) IS MEANT TO HELP YOU (THE “END USER”) UNDERSTAND HOW WE AT PASSAGE COLLECT, USE, AND SHARE YOUR DATA WHEN YOU USE PASSAGE PRODUCTS OR SERVICES. THIS POLICY APPLIES TO PASSAGE, INC. (COLLECTIVELY, “PASSAGE,” “WE,” “OUR,” AND “US”). (PLEASE SEE THE “CONTACTING PASSAGE” SECTION BELOW FOR WHICH OF THESE ENTITIES IS RESPONSIBLE FOR PROCESSING YOUR DATA.)
You should read this Policy carefully. It contains important information about your privacy rights and choices.
1. FIRST, SOME BACKGROUND
1. FIRST, SOME BACKGROUND
1. FIRST, SOME BACKGROUND
The Passage mission is to create the AI financial operating system. We help consumers save, earn, and grow their money inside their favorite LLM.
The Passage mission is to create the AI financial operating system. We help consumers save, earn, and grow their money inside their favorite LLM.
The Passage mission is to create the AI financial operating system. We help consumers save, earn, and grow their money inside their favorite LLM.
2. ABOUT THIS POLICY
2. ABOUT THIS POLICY
2. ABOUT THIS POLICY
Our goal with this Policy is to provide a simple and straightforward explanation of what data Passage collects from and about you and how we use and share that information. We value transparency and want to provide you with a clear and concise description of how we treat your data.
Passage's services are not directed to individuals under 18, and we do not knowingly collect data relating to children.
Our goal with this Policy is to provide a simple and straightforward explanation of what data Passage collects from and about you and how we use and share that information. We value transparency and want to provide you with a clear and concise description of how we treat your data.
Passage's services are not directed to individuals under 18, and we do not knowingly collect data relating to children.
Our goal with this Policy is to provide a simple and straightforward explanation of what data Passage collects from and about you and how we use and share that information. We value transparency and want to provide you with a clear and concise description of how we treat your data.
Passage's services are not directed to individuals under 18, and we do not knowingly collect data relating to children.
3. PROMOTIONAL COMMUNICATIONS
3. PROMOTIONAL COMMUNICATIONS
3. PROMOTIONAL COMMUNICATIONS
You can opt out of receiving email and in-app push notifications containing promotional messages from us by following the instructions on-screen or in those messages. If you opt out, we may still send you non-promotional communications, such as transaction receipts and messages about your account or our processing of your information.
You can opt out of receiving email and in-app push notifications containing promotional messages from us by following the instructions on-screen or in those messages. If you opt out, we may still send you non-promotional communications, such as transaction receipts and messages about your account or our processing of your information.
You can opt out of receiving email and in-app push notifications containing promotional messages from us by following the instructions on-screen or in those messages. If you opt out, we may still send you non-promotional communications, such as transaction receipts and messages about your account or our processing of your information.
4. OUR DATA PRACTICES
4. OUR DATA PRACTICES
4. OUR DATA PRACTICES
Passage is committed to providing end users with meaningful control over their data. This section describes Passage's data practices relating to our processing of data about you. We also provide summaries of our practices by data category and product in the "Summaries of Processing Activities" section.
Passage is committed to providing end users with meaningful control over their data. This section describes Passage's data practices relating to our processing of data about you. We also provide summaries of our practices by data category and product in the "Summaries of Processing Activities" section.
Passage is committed to providing end users with meaningful control over their data. This section describes Passage's data practices relating to our processing of data about you. We also provide summaries of our practices by data category and product in the "Summaries of Processing Activities" section.
DATA WE COLLECT AND CATEGORIES OF SOURCES
DATA WE COLLECT AND CATEGORIES OF SOURCES
DATA WE COLLECT AND CATEGORIES OF SOURCES
The data we collect depends on the shops you connect through Passage. Depending on third-party apps you connect, we may collect:
The data we collect depends on the shops you connect through Passage. Depending on third-party apps you connect, we may collect:
The data we collect depends on the shops you connect through Passage. Depending on third-party apps you connect, we may collect:
Registration and Contact Information
Registration and Contact Information
Registration and Contact Information
Name, email, password, social media usernames, phone number, and addresses.
Name, email, password, social media usernames, phone number, and addresses.
Name, email, password, social media usernames, phone number, and addresses.
Plaid financial data
Plaid financial data
Plaid financial data
Account balances, card transactions, and investment data.
Account balances, card transactions, and investment data.
Account balances, card transactions, and investment data.
Transaction Information
Transaction Information
Transaction Information
Offers viewed/redeemed, products purchased, store preferences, and interactions with our services and partners.
Offers viewed/redeemed, products purchased, store preferences, and interactions with our services and partners.
Offers viewed/redeemed, products purchased, store preferences, and interactions with our services and partners.
Shop Session Data
Shop Session Data
Shop Session Data
Cookies, session storage, and local storage (only used to automate shopping on your behalf).
Cookies, session storage, and local storage (only used to automate shopping on your behalf).
Cookies, session storage, and local storage (only used to automate shopping on your behalf).
Shop Purchase Information and History
Shop Purchase Information and History
Shop Purchase Information and History
Item descriptions, purchase times, costs, and store details. Includes info from receipts (e.g., payment type, EBT use).
Item descriptions, purchase times, costs, and store details. Includes info from receipts (e.g., payment type, EBT use).
Item descriptions, purchase times, costs, and store details. Includes info from receipts (e.g., payment type, EBT use).
Shop Loyalty and Retailer Account Info
Shop Loyalty and Retailer Account Info
Shop Loyalty and Retailer Account Info
Purchase and transaction info from connected retailer accounts.
Purchase and transaction info from connected retailer accounts.
Purchase and transaction info from connected retailer accounts.
Geolocation Information
Geolocation Information
Geolocation Information
General and precise location data (only if allowed by your device).
General and precise location data (only if allowed by your device).
General and precise location data (only if allowed by your device).
Mobile Device Info
Mobile Device Info
Mobile Device Info
Device ID, settings, OS, usage data.
Device ID, settings, OS, usage data.
Device ID, settings, OS, usage data.
Invisible CAPTCHA
Invisible CAPTCHA
Invisible CAPTCHA
Used for security, operates in the background. Data handled per Google Privacy Policy.
Used for security, operates in the background. Data handled per Google Privacy Policy.
Used for security, operates in the background. Data handled per Google Privacy Policy.
Cookies and Similar Technologies
Cookies and Similar Technologies
Cookies and Similar Technologies
Session and persistent cookies, pixel tags, beacons, and analytics tools.
Session and persistent cookies, pixel tags, beacons, and analytics tools.
Session and persistent cookies, pixel tags, beacons, and analytics tools.
Additional Info to Connect Accounts
Additional Info to Connect Accounts
Additional Info to Connect Accounts
Such as one-time passwords (OTP).
Such as one-time passwords (OTP).
Such as one-time passwords (OTP).
DATA WE RECEIVE FROM DEVICES
DATA WE RECEIVE FROM DEVICES
DATA WE RECEIVE FROM DEVICES
We may collect the following from your smartphone, tablet, or computer:
• IP address
• Timezone and location
• Device model and OS
• Browser and network data
We may collect the following from your smartphone, tablet, or computer:
• IP address
• Timezone and location
• Device model and OS
• Browser and network data
We may collect the following from your smartphone, tablet, or computer:
• IP address
• Timezone and location
• Device model and OS
• Browser and network data
DATA FROM OTHER SOURCES
DATA FROM OTHER SOURCES
DATA FROM OTHER SOURCES
To provide services or ensure security, we may receive data from third parties such as wireless carriers or service providers.
To provide services or ensure security, we may receive data from third parties such as wireless carriers or service providers.
To provide services or ensure security, we may receive data from third parties such as wireless carriers or service providers.
HOW WE USE YOUR DATA
HOW WE USE YOUR DATA
HOW WE USE YOUR DATA
We use your data to:
• Provide and maintain services
• Improve and develop new services
• Verify identity and prevent fraud
• Offer support
• Communicate updates and messages
• Investigate misuse
• Comply with legal obligations
• Fulfill other purposes with your consent
We may use anonymized or aggregated data for analytics, research, and service development.
We use your data to:
• Provide and maintain services
• Improve and develop new services
• Verify identity and prevent fraud
• Offer support
• Communicate updates and messages
• Investigate misuse
• Comply with legal obligations
• Fulfill other purposes with your consent
We may use anonymized or aggregated data for analytics, research, and service development.
We use your data to:
• Provide and maintain services
• Improve and develop new services
• Verify identity and prevent fraud
• Offer support
• Communicate updates and messages
• Investigate misuse
• Comply with legal obligations
• Fulfill other purposes with your consent
We may use anonymized or aggregated data for analytics, research, and service development.
OUR LAWFUL BASES FOR PROCESSING (EEA AND UK)
OUR LAWFUL BASES FOR PROCESSING (EEA AND UK)
OUR LAWFUL BASES FOR PROCESSING (EEA AND UK)
Only U.S.-based users are eligible for Passage services.
Only U.S.-based users are eligible for Passage services.
Only U.S.-based users are eligible for Passage services.
THIRD PARTIES
THIRD PARTIES
THIRD PARTIES
We do not share data with non-affiliated third parties unless legally permitted. We only share your financial data to operate services you requested, with your consent, or to prevent fraud. Cookie data may be shared with third parties. See our Cookie Policy and All Audience Privacy Statement for details.
We do not share data with non-affiliated third parties unless legally permitted. We only share your financial data to operate services you requested, with your consent, or to prevent fraud. Cookie data may be shared with third parties. See our Cookie Policy and All Audience Privacy Statement for details.
We do not share data with non-affiliated third parties unless legally permitted. We only share your financial data to operate services you requested, with your consent, or to prevent fraud. Cookie data may be shared with third parties. See our Cookie Policy and All Audience Privacy Statement for details.
CALIFORNIA PRIVACY NOTICE (CCPA)
CALIFORNIA PRIVACY NOTICE (CCPA)
CALIFORNIA PRIVACY NOTICE (CCPA)
CCPA gives California residents rights regarding their personal information, including:
• Know, access, and correct personal information
• Opt out of data sale or sharing
• Limit use of sensitive information
• Request deletion of personal data
To exercise these rights, contact privacy@getpassage.com.
CCPA gives California residents rights regarding their personal information, including:
• Know, access, and correct personal information
• Opt out of data sale or sharing
• Limit use of sensitive information
• Request deletion of personal data
To exercise these rights, contact privacy@getpassage.com.
CCPA gives California residents rights regarding their personal information, including:
• Know, access, and correct personal information
• Opt out of data sale or sharing
• Limit use of sensitive information
• Request deletion of personal data
To exercise these rights, contact privacy@getpassage.com.
RIGHT TO NON-DISCRIMINATION
RIGHT TO NON-DISCRIMINATION
RIGHT TO NON-DISCRIMINATION
Passage will not discriminate against users for exercising privacy rights. However, certain personalized features (e.g., custom offers) may be affected.
Passage will not discriminate against users for exercising privacy rights. However, certain personalized features (e.g., custom offers) may be affected.
Passage will not discriminate against users for exercising privacy rights. However, certain personalized features (e.g., custom offers) may be affected.
RIGHT TO DELETE
RIGHT TO DELETE
RIGHT TO DELETE
You may request deletion of personal data. This will affect personalization and pending rewards may be lost. Login credentials will be retained so you may continue using your account.
We may deny deletion if required for:
• Completing a transaction
• Detecting fraud or illegal activity
• Debugging
• Exercising legal rights
• Compliance with law
• Research
• Internal business use
You may request deletion of personal data. This will affect personalization and pending rewards may be lost. Login credentials will be retained so you may continue using your account.
We may deny deletion if required for:
• Completing a transaction
• Detecting fraud or illegal activity
• Debugging
• Exercising legal rights
• Compliance with law
• Research
• Internal business use
You may request deletion of personal data. This will affect personalization and pending rewards may be lost. Login credentials will be retained so you may continue using your account.
We may deny deletion if required for:
• Completing a transaction
• Detecting fraud or illegal activity
• Debugging
• Exercising legal rights
• Compliance with law
• Research
• Internal business use
RIGHT TO CORRECT
RIGHT TO CORRECT
RIGHT TO CORRECT
Right to Correct
You can request corrections to inaccurate personal data. Changes are reflected promptly but may be retained for legal or business purposes.
Right to Correct
You can request corrections to inaccurate personal data. Changes are reflected promptly but may be retained for legal or business purposes.
Right to Correct
You can request corrections to inaccurate personal data. Changes are reflected promptly but may be retained for legal or business purposes.
RETENTION AND DELETION PRACTICES
RETENTION AND DELETION PRACTICES
RETENTION AND DELETION PRACTICES
We retain data only as long as needed. If a developer disconnects your data, we will delete your personal data unless legally required to retain it.
We retain data only as long as needed. If a developer disconnects your data, we will delete your personal data unless legally required to retain it.
We retain data only as long as needed. If a developer disconnects your data, we will delete your personal data unless legally required to retain it.
PROTECTION OF DATA
PROTECTION OF DATA
PROTECTION OF DATA
We apply security controls to protect your data and limit access to authorized personnel.
We apply security controls to protect your data and limit access to authorized personnel.
We apply security controls to protect your data and limit access to authorized personnel.
YOUR DATA PROTECTION RIGHTS
YOUR DATA PROTECTION RIGHTS
YOUR DATA PROTECTION RIGHTS
We honor the following rights (with some legal limitations):
• Access, correct, delete, or restrict personal data
• Object to processing
• Withdraw consent
• Receive data in portable format
To exercise rights, contact help@getpassage.com. We may request identity verification.
Complaints can be directed to local data protection authorities or to our DPO at privacy@getpassage.com.
Passage, Inc. has appointed a Data Protection Officer (DPO) who oversees compliance and privacy practices. Contact the DPO at privacy@getpassage.com.
We honor the following rights (with some legal limitations):
• Access, correct, delete, or restrict personal data
• Object to processing
• Withdraw consent
• Receive data in portable format
To exercise rights, contact help@getpassage.com. We may request identity verification.
Complaints can be directed to local data protection authorities or to our DPO at privacy@getpassage.com.
Passage, Inc. has appointed a Data Protection Officer (DPO) who oversees compliance and privacy practices. Contact the DPO at privacy@getpassage.com.
We honor the following rights (with some legal limitations):
• Access, correct, delete, or restrict personal data
• Object to processing
• Withdraw consent
• Receive data in portable format
To exercise rights, contact help@getpassage.com. We may request identity verification.
Complaints can be directed to local data protection authorities or to our DPO at privacy@getpassage.com.
Passage, Inc. has appointed a Data Protection Officer (DPO) who oversees compliance and privacy practices. Contact the DPO at privacy@getpassage.com.
2025 Passage, All rights reserved
2025 Passage, All rights reserved
2025 Passage, All rights reserved