Privacy Policy
Last updated: July 2026
This policy explains how Wallettami (info@wallettami.com) collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR — Regulation 2016/679).
1. Data Controller
The data controller is Wallettami, reachable at info@wallettami.com.
2. Data We Collect
- Account data: email address and display name provided at registration (via Microsoft Entra External ID / Google Sign-In).
- Usage data: pass templates, instances, and configuration you create within the service.
- Billing data: subscription status and plan. Payment details (card number, etc.) are handled exclusively by Paddle and are never stored by Wallettami.
- Technical data: IP address, browser/device type, and access logs for security and diagnostic purposes.
3. Purposes and Legal Basis
- Service delivery — performance of the contract (Art. 6(1)(b) GDPR).
- Billing and subscription management — performance of the contract; processed by Paddle as Merchant of Record.
- Security and abuse prevention — legitimate interest (Art. 6(1)(f) GDPR).
- Service communications (updates, policy changes) — legitimate interest.
4. Third-Party Processors
- Microsoft Azure (hosting and infrastructure) — EU/EEA region.
- Paddle (payment processing and billing) — acts as Merchant of Record; see Paddle's Privacy Policy.
- Apple / Google (wallet pass delivery) — data is transmitted to deliver passes to end-users' devices.
- Microsoft Entra External ID (authentication).
5. Retention
We retain your data for as long as your account is active. Upon account deletion, data is removed within 30 days, except where retention is required by law.
6. Your Rights
Under GDPR you have the right to: access your data, correct inaccurate data, request erasure, restrict processing, data portability, and object to processing. To exercise these rights, contact info@wallettami.com.
You also have the right to lodge a complaint with the Italian supervisory authority: Garante per la protezione dei dati personali.
7. Cookies
Wallettami uses only strictly necessary session cookies for authentication. No tracking or advertising cookies are used.
8. Changes
Material changes to this policy will be communicated by email. Continued use of the service after changes constitutes acceptance.