Privacy Policy
Last updated: 1 October 2026 · Applies to the Pass Point website, web app and Android/iOS mobile apps, operated by TECHAOT TECHNOLOGIES
Introduction
Welcome to Pass Point, a visitor management system provided by TECHAOT TECHNOLOGIES through our website, web app and the Pass Point mobile apps for Android and iOS. This Privacy Policy explains how we collect, use, and protect your information on all of them. By using our service, you agree to the terms outlined in this policy.
Important: Your privacy is our priority. This document outlines our data processing practices for both physical visitors and digital customers.
Information We Collect
Visitor Information
- • Full name and contact details
- • Photo identification and visitor photo
- • Purpose of visit and host details
- • Entry and exit timestamps
- • Vehicle registration (if applicable)
- • Digital signatures
Customer/Client Information
- • Organization name and address
- • Administrator contact details
- • Employee/staff information
- • Facility access permissions
Payment Information
- • Billing details and company information
- • Transaction records and invoices
- • Payment method details (via secure gateways)
- • GST/Tax identification numbers
Mobile App & Device Permissions
The Pass Point mobile app requests only the device access listed below, and only when you use the feature that needs it:
- •Camera — to scan visitor and check-in QR codes, to take a visitor's photo, and to capture images of an identity document at check-in. Android asks for your permission the first time you use one of these features. Photos and ID images are uploaded over an encrypted (HTTPS) connection to your organization's Pass Point account; QR codes are processed on the device.
- •Choosing an existing photo — uses the system photo picker, so the app receives only the single image you select and never has access to the rest of your photo library.
- •Network access — to communicate with Pass Point servers.
The app does not access your microphone, location, contacts, call logs, SMS or files, does not contain advertising, and does not use the advertising ID or third-party analytics. Sign-in tokens are kept in the device's encrypted secure storage.
How We Use Your Information
Visitor Management
To facilitate secure check-in/check-out processes.
Security & Safety
To maintain premises security and emergency response.
Compliance
To meet legal and regulatory requirements.
Communication
To send visit confirmations and notifications.
Service Improvement
To enhance our platform features.
Record Keeping
To maintain visitor logs as per regulations.
Data Security Measures
Encryption
All data transmitted using SSL/TLS encryption protocols.
Secure Storage
Data stored on encrypted, highly secure cloud servers.
Access Control
Role-based access with multi-factor authentication.
Regular Backups
Automated backups with comprehensive disaster recovery.
Monitoring
24/7 security monitoring and real-time threat detection.
PCI DSS Compliance
Payment data handled per strict industry standards.
Payment Data Protection
- Payment information processed through PCI-DSS compliant gateways
- We do not store complete credit/debit card details on our servers
- All financial transactions are high-level encrypted (256-bit)
- Payment records retained only for mandatory accounting and tax purposes
- Annual security audits of all payment and financial systems
Government Compliance
Pass Point is committed to full transparency and compliance with all applicable laws in India and globally.
IT Act 2000
Full compliance with Information Technology Act and amendments.
SPDI Rules
Adherence to Sensitive Personal Data or Information Rules.
Data Protection
Following applicable Indian data protection regulations.
Industry Standards
ISO 27001 standard security management practices.
Record Retention
Visitor logs maintained as per local state regulations.
Law Enforcement
Cooperation with lawful, verified government requests.
Data Retention Policy
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
Your Rights & Controls
You have several rights regarding your personal data. You can exercise these by contacting our Data Protection Officer. To request removal of your data, follow the steps on our Data Deletion Request page.
Access
Request a copy of your personal data.
Correction
Update inaccurate information.
Deletion
Request removal of your data.
Control
Withdraw your consent anytime.
Portability
Get your data in portable format.
Complaints
Lodge issues with authorities.
Children's Privacy
Our service is not intended for children under 18. We do not knowingly collect personal data from minors.
Parental consent is required for any visitor under the age of 18 checking in through our system at client facilities.
Data Breach Notification
In the unlikely event of a security breach, we follow a strict protocol:
Investigation
Immediate investigation of any suspected or confirmed breach by our security team.
Notification within 72h
Notification to affected users and relevant regulatory authorities within 72 hours.
Remediation
Implementation of corrective actions and security enhancements to prevent recurrence.
International Data Transfers
Data is primarily stored and processed in India. For any international users or necessary cross-border transfers:
- • We comply with all applicable local data protection laws.
- • We implement adequate security safeguards for all transfers.
Changes to Privacy Policy
- We may update this policy periodically.
- Users notified of significant changes via email/platform.
- Continued use constitutes acceptance of updates.
- Previous versions archived and available on request.
Contact Information
Data Protection Officer
Support & Queries
Consent
By using Pass Point, you acknowledge that you have read and consent to this Privacy Policy.
For Visitors
Acknowledgment during check-in process.
For Customers
Agreement acceptance during registration.