Skip to content

Privacy

Privacy notice

What we collect, who can see it, and how to delete it. Written in plain language for our pilot stage.

Operated by Pasaq · Last updated

Who we are

Pasaq runs the Pasaq website and app at pasaq.io. Companies use Pasaq to give their people a shared workspace for group plans built on real local deals. In this notice, "we" means Pasaq.

Pasaq is in its pilot stage. We're working with a small number of companies, and this notice describes how the product handles data today. When that changes, we'll update this page.

What we collect

  • Your account: your name, work email and password. We store passwords only as a one-way hash, never in plain text.
  • Your profile: your department and office, plus anything optional you choose to add, such as a short bio, a photo or a phone number.
  • Your activity in a workspace: the plans you join or leave, posts, replies, chat messages, poll votes, reports you file, and the workspaces you belong to.
  • Your credits ledger: credits granted to you, held for plans, spent and refunded, with the date and a short note for each.
  • Vendors: business name, what you offer, and the deals and bookings you post.
  • Pilot requests: what you send through the guided pilot form: name, work email, company, team size, city and your message.
  • Button tests: to learn which wording works better, the website shows each visitor one of two versions of some buttons. Your browser keeps a random ID and the version you saw; we count whether you saw, clicked and went on to sign up or ask for a pilot. The ID isn't linked to your name or email.
  • Technical data: like any website, our hosting provider receives your IP address and browser details when you visit. We use them to keep the service running and secure, for example to limit repeated sign-in attempts.

We don't buy data about you from anyone, and we don't collect payment card details.

How we use it

  • To run your workspace: show plans, hold and refund credits, place orders when a plan unlocks, and pass booking details to the vendor.
  • To give enterprise admins pilot reports, such as active members, cross-department connections and a monthly credits report.
  • To keep Pasaq safe: sign-in limits, the audit log, and reviewing reports of harassment or misuse.
  • To reply to pilot requests and support questions.
  • To understand which website pages are useful, through cookieless page analytics (see below).

Who sees what

  • Team members in your workspace see your name, department and bio, the plans you've joined, and what you post there.
  • Enterprise admins of your workspace also see your email and contact details, your activity for pilot reports, and your credits ledger. They can approve, remove and change the roles of people in that workspace.
  • Vendors see only the names of the people in their own deals, so they can make the booking. They can't see the member directory, posts or chat.
  • Pasaq staff can access data when needed to run, secure and support the service.

Your data stays inside the workspaces you belong to. We don't sell personal data, rent it, or share it with advertisers, and we don't use it to advertise to you.

Credits are not money

During the pilot, credits are a budgeting tool. They have no cash value and can't be withdrawn or transferred out of Pasaq. Billing for plans is set up separately with each pilot company. See the Terms for more.

Analytics and cookies

We use privacy-friendly, cookieless page analytics on the website to count page views and see which pages people find useful. It doesn't use cookies or follow you across other sites.

The app stores a sign-in token and a few preferences (like light or dark mode) in your browser's local storage so you stay signed in. We don't use advertising or tracking cookies.

Where data is stored

Pasaq is hosted on Vercel (website and application servers) and stores data, including uploaded images, in a MongoDB Atlas database. These providers process data on our behalf to run the service. All traffic between your browser and Pasaq is encrypted with HTTPS.

How long we keep it

  • Account and workspace data: for as long as your account is open.
  • When you delete your account, we delete your profile, posts, chat messages, plan memberships, activity records and credits ledger.
  • The audit log keeps an entry that "a former member" deleted their account, without your name, so the workspace's records stay consistent.
  • Pilot requests: for as long as we're discussing a pilot with you, and deleted on request.
  • At the end of a pilot, the company can ask us to delete its whole workspace.

Your choices

  • See and correct: you can view and edit your profile at any time.
  • Delete: members can delete their account from their profile. If you're the only enterprise admin of a workspace, hand the role to someone first, because every workspace keeps at least one admin.
  • Removal by an admin: enterprise admins can remove people from their workspace.
  • Anything else: to ask for a copy of your data or for deletion of a pilot request, use the contact form.

Who Pasaq is for

Pasaq is a workplace product for adults. It isn't meant for anyone under 16, and we don't knowingly collect their data.

Changes to this notice

If we change how we handle data, we'll update this page and its date. For significant changes, we'll also tell members in the app.

Contact

Questions or requests about privacy: send them through the contact form and mention "privacy" in the message.