Last updated: April 2026
Passage is a flight disruption membership service based in the Netherlands. When this policy refers to "Passage", "we", or "us", it means us personally.
We will update this policy when we register a formal legal entity.
For questions about this policy or your personal data, contact us at concierge@joinpassage.co.
| Data | Why we collect it | Legal basis |
|---|---|---|
| Email address | To send your sign-in link, membership confirmation, and disruption alerts | Contract performance (Art. 6(1)(b) GDPR) |
| Membership status and tier | To know which services you are entitled to | Contract performance |
| Stripe customer ID | To link your payment to your account | Contract performance |
| Flight details (number, route, date) | To monitor your journeys for disruptions | Contract performance |
| Audit form submission (email) | To send you a journey audit as requested | Legitimate interest (Art. 6(1)(f) GDPR) |
We never see your card number, expiry date, or CVV. All payment processing is handled directly by Stripe.
We use the following services to operate Passage. Each acts as a data processor on our instructions.
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | EU (West Europe) |
| Stripe | Payment processing | USA (EU Standard Contractual Clauses) |
| Vercel | Website hosting | USA (EU Standard Contractual Clauses) |
| Resend | Transactional email | USA (EU Standard Contractual Clauses) |
We do not sell your data. We do not share it with any third parties beyond the processors listed above.
| Data | Retention period |
|---|---|
| Membership records | 7 years (required for financial record-keeping) |
| Flight and journey data | 2 years after the journey date |
| Audit form submissions | 12 months |
| Account data (email, auth) | Until you delete your account |
Under GDPR you have the right to:
To exercise any of these rights, email concierge@joinpassage.co. We will respond within 30 days.
To delete your account and all associated data, email concierge@joinpassage.co with the subject line "Delete my account". We will process your request within 30 days.
If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the Dutch data protection authority:
If we make material changes to this policy, we will notify active members by email before the changes take effect.