DATA AGREEMENT
Your company's data, in plain words.
Last updated 2026-10-11
This page is for companies that use PassB Teams. It says how we, Omelette Inc., USA, handle the work data your company keeps in PassB. To sign a data agreement (a DPA) with us, write to contactus@passb.app with your company's name.
Who decides
Your company decides what work data to keep in PassB, and why. We handle it for you, only to run PassB. In data law words, your company is the "controller" and we are the "processor".
What data this covers
- Your people: work email, name, degrees, job title, mobile number, note, team, role and status.
- Your card design: company name, logo, address, website and main phone.
- Work activity: shares and opens of work cards, each day, and event tags.
- Work contacts: cards sent back to work cards, and people your team scanned and marked "for work".
- Events, and the log of what each admin did.
It does not cover your people's personal cards or personal contacts. Your company never sees those.
What we may do with it
- Only what is needed to run PassB for you, or what the law asks.
- We never sell it, and we never use it for ads.
- Only the few people who run PassB can reach it, only when the work needs it, and they keep it secret.
How we keep it safe
- Every connection uses HTTPS.
- Passwords, private link codes and invite links are kept only in a scrambled form (a hash).
- Rate limits slow down anyone who guesses links or codes.
- In the console, each admin sees only what their role allows. Suspend and Remove stop a person's work links at once.
Who else handles it
Only the companies on our subprocessors page, and only for the job listed there. We post any change there first.
Where it is kept
On our server in the USA. If your company needs the EU Standard Contractual Clauses or the UK addendum, write to us.
Helping with people's requests
If one of your people asks to see, fix, export or delete their work data, we help you answer. You can export contacts and reports as CSV in the console at any time.
If something goes wrong
If we learn that your company's data was reached by someone who should not have it, we tell your company's Owner without delay, and say what we know and what we are doing.
When you stop Teams
We keep your company's data so you can start again, until your Owner asks us to delete it. Then we delete it within 30 days. Copies in backups go when those copies are replaced. Export what you need first.
Questions
Write to contactus@passb.app. Our privacy policy and terms say more.