Privacy Policy

Last Updated: May 27, 2026 · Effective immediately upon publication

Contents

1. Overview2. Information We Collect3. How We Use Your Information4. Disclosure of Your Information5. Data Retention6. Data Security7. Cookies & Tracking Technologies8. Your Privacy Rights9. Children's Privacy10. International Data Transfers11. Changes to This Privacy Policy12. Contact Us

1. Overview

Pass2Wheel ("Company," "we," "our," or "us") operates the website located at https://pass2wheel.com and all associated subdomains, mobile applications, and services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to this Privacy Policy in its entirety. If you do not agree, you must immediately cease all use of the Service.

2. Information We Collect

a) Information You Provide Directly

  • Full name and email address upon registration
  • Password (stored as a one-way cryptographic hash — never in plain text)
  • Billing name, address, and payment method details processed exclusively by Stripe, Inc.
  • Business name, contact details, and tax information for Business accounts
  • Communications you send us (support requests, feedback, reports)

b) Information Collected Automatically

  • IP address, browser type, device type, operating system, and referring URLs
  • Pages visited, time spent, clicks, scroll depth, and navigation paths
  • Test scores, quiz answers, session duration, and learning progress
  • Cookies, local storage, and similar tracking technologies (see Section 7)

c) Information from Third Parties

  • Stripe, Inc. may share limited transaction metadata (e.g., subscription status, payment failures) with us
  • Supabase, Inc. provides our database infrastructure and processes data on our behalf
  • Analytics providers may return aggregated or pseudonymous usage data

3. How We Use Your Information

  • To create, maintain, and manage your account
  • To process payments, subscriptions, and billing through Stripe
  • To deliver, personalize, and improve the educational content and testing features
  • To communicate service updates, security notices, and marketing communications (with opt-out)
  • To detect, prevent, and respond to fraud, abuse, or security incidents
  • To comply with applicable laws, regulations, and legal obligations
  • To enforce our Terms of Service and protect our intellectual property rights
  • To conduct internal analytics, product research, and performance monitoring

4. Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:

  • Service Providers: Stripe (payments), Supabase (database hosting), email delivery providers, and analytics tools — all bound by confidentiality agreements.
  • Legal Compliance: When required by applicable law, court order, subpoena, or government authority.
  • Protection of Rights: To enforce our Terms of Service, protect against fraud, or defend our legal interests.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred as part of that transaction with prior notice.
  • With Your Consent: For any other purpose with your explicit consent.

5. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, tax records). Aggregated, anonymized data derived from your usage may be retained indefinitely.

6. Data Security

We implement industry-standard security measures including TLS/SSL encryption in transit, AES-256 encryption at rest, access controls, and regular security audits. Payment data is handled exclusively by Stripe and is never stored on our servers. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and disclaim liability for unauthorized access beyond our reasonable control.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, maintain sessions, and analyze usage. Types of cookies we use:

  • Essential cookies: Required for the Service to function (authentication, security, language preference). Cannot be disabled.
  • Analytics cookies: Help us understand how users interact with the Service (e.g., Google Analytics, anonymized).
  • Preference cookies: Remember your settings such as language and UI state.

You may disable non-essential cookies through your browser settings. Disabling essential cookies will impair Service functionality. We do not use advertising or third-party tracking cookies.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing of your data for direct marketing purposes.
  • Withdrawal of Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

California residents (CCPA): You have the right to know what personal information is collected, the right to delete it, and the right to opt out of sale (we do not sell data). To exercise any of these rights, contact us at legal@pass2wheel.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you believe a child has provided us personal information, contact us immediately at legal@pass2wheel.com.

10. International Data Transfers

The Service is operated in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to such transfer, storage, and processing.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. We will notify you of material changes by posting the new policy on this page with a revised "Last Updated" date and, where appropriate, by email notification. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

For any privacy-related questions, requests, or concerns, please contact us at: legal@pass2wheel.com

This Privacy Policy is part of and incorporated into our Terms of Service. Together, these documents govern your use of Pass2Wheel.

© 2026 Pass2Wheel. All rights reserved.