ScanPass Pro — privacy policy

Who we are

ScanPass Pro is provided by Naftali Ravinov, 26 HaShoshanim St, Nof HaGalil, Israel. For any question about this policy, or to exercise any of the rights described below, contact support@scanpasspro.com. We determine how customer and authorised-user information is used to operate the service and are responsible for that processing.

Cloudflare hosts the site and provides access checks and storage for customer, subscription and sign-in information. It receives technical connection information, such as an IP address, to deliver and protect the service. The scan itself does not send passport content to Cloudflare.

What the application does with passport data

When you open a passport image or PDF in the application, the image and its machine-readable zone are processed in your browser. You can review the result, copy it or export it to a file. Opening a document for scanning does not upload it to our server.

• Local recognition. Image decoding and OCR run on the device; the scan path does not upload passport content to our services.
• Copies outside the page. You can copy, export or save results. An installed companion extension may also receive a separate temporary copy, as explained below.
• Sign-in security. Cookies and temporary security records support sign-in and help prevent repeated sending or reuse of a sign-in link. Sent emails may remain with the email provider after a code expires; see Service providers below.
• Separate online services. Website delivery, sign-in and Paddle checkout involve their providers. No advertising or scan analytics are added to recognition.
• Offline use. Scanning can work offline after the required files and models have been loaded and cached. A first visit, missing files or a cleared cache can require a connection.

What is stored, and where

The application's preference storage records settings, not passenger details. Remembering a selected folder does not upload its contents. Exported files and the extension's storage are separate, as explained below.

Photo and Excel files are saved only after your explicit action. Filenames can contain passenger details. Your folder or clipboard service may synchronise copies to your own cloud account. Paddle checkout has separate storage under its policy. Extension storage is separate from this site's data.

The browser extension

The optional ScanPass Pro extension fills details from a passport already scanned in the application into a supplier's booking or insurance form in another tab. This lets you transfer details already displayed in the application without retyping them.

• Passenger fields are held in the extension's browser session storage. They are cleared after 45 minutes without a new scan or Fill, and at the end of that browser session. Suspension may delay timed cleanup until the browser wakes. Reloading the application alone does not clear the extension.
• Saved form mappings remain until you delete them. They contain field locations, labels, names and website paths or matching rules. These can include booking or passenger identifiers, and a name may be suggested from the page title. Use generic names and check mappings and exported backups before saving or sharing them.
• Filling a chosen supplier page discloses the fields to that site and its scripts, which may read, store or transmit them before a manual Submit. The extension does not upload passenger data to ScanPass Pro. Clearing it does not erase supplier copies.
• The extension fills forms; the operator reviews and submits. It does not book, pay or confirm transactions. In one supported flow, guarded automation clicks the site's Add button to attach a scanned passenger to a list.
• Supplier-site permissions are optional and revocable in extension settings. A fill targets a selected, re-checked frame; ambiguous targets are refused.

The optional scanner bridge

The optional scanner helper transfers images to the browser through a local connection on the same computer. A network scanner may first send the image across your office network; a USB scanner uses its local driver. The helper does not upload scans to our cloud services. Check any image storage by your scanner, driver or operating system separately.

Data we collect about you

We use customer and authorised-user emails, customer/subscription/product identifiers, subscription status and event timestamps to provide access and administer billing. Paddle handles checkout and payments in its own role; our ledger does not store card details. Support messages contain your email address and whatever you send, including attachments. Providing information is voluntary, but the relevant sign-in, purchase or support service may be unavailable without it.

The table above describes local storage and temporary security records. Ending a subscription does not automatically delete customer or subscription records. We assess deletion requests against service needs, security and legal recordkeeping duties. Provider logs and backups can have different retention periods.

Do not send passport images or passenger details to support. Use descriptions and redacted or synthetic examples. If such information arrives unintentionally, we restrict its use and arrange appropriate deletion, subject to necessary legal preservation and provider/backup capabilities.

When one address has signed in on four or more computers, we receive an email notice so that we can check that the subscription is used by the people it covers.

Service providers

The local scan path does not provide passport content to these providers. They process customer, communication or technical information for these services:

• Paddle is the reseller and Merchant of Record. It handles checkout, payment, tax, invoices and subscriptions under its own policy. Customer and subscription events reach our access service.
• Cloudflare hosts the site, checks access and stores customer, subscription and sign-in records. It sends sign-in and welcome emails and routes incoming support messages. Copies of sent emails, including sign-in codes and links, are available in its dashboard for about seven days under the current email-preview setting. A code expiring does not delete the email copy.
• Google (Gmail) holds the support mailbox to which Cloudflare routes incoming messages. This is separate from Cloudflare's sign-in sender.

Our providers may process customer, communication and technical information outside Israel under their applicable terms and safeguards. Deletion from active storage does not necessarily remove copies immediately from security logs, backups or financial records that must be retained.

How we protect information

Connections to the site are encrypted (HTTPS). Sign-in cookies are signed so that they cannot be altered, and sign-in codes and links expire. Customer and subscription records can be read only by us and by our hosting provider as described above. Passport recognition stays on your device, so passenger content is not stored on our servers. No system is completely secure; if you suspect a problem, write to support@scanpasspro.com.

Your rights

The local passenger list, files, clipboard and supplier copies are separate. Clearing the page or extension does not delete exports, clipboard history, synchronised folders or supplier records. Manage each copy at its destination. ScanPass Pro cannot erase a passenger file it does not receive.

For access to or correction of customer information, deletion requests or another applicable right, contact support@scanpasspro.com. We verify identity proportionately and respond within the time required by applicable law, explaining relevant retention exceptions or provider responsibility. You may contact the Israeli Privacy Protection Authority. Foreign-law rights depend on applicability.

We respond to privacy requests within 30 days, or sooner if applicable law requires. This is a response deadline, not a promise to erase every copy within that period. Accounting documents are retained for the period required by applicable law; that period does not automatically apply to support messages or technical records.

Your own obligations

The agency must ensure permission and a lawful basis for passenger processing, verify results, protect devices, exports, clipboard and supplier access, and set appropriate retention. Our product and customer-information obligations remain separate. Roles and responsibilities follow the actual processing and applicable law.

Children

The application is a business tool for travel professionals and is not directed at children. It can of course read a child's passport when an agent is booking a family — that data is handled exactly as described above, on the agent's machine.

Changes to this policy

If this policy changes, the version number and date at the top of this page change with it. Material changes affecting how data is handled will be communicated to active subscribers before taking effect.

Language versions

This policy is published in English, Hebrew, Russian and Arabic. The English version is the authoritative one. The Hebrew, Russian and Arabic versions are provided for convenience only; if they differ from the English, the English version governs. If you find a discrepancy between them, write to support@scanpasspro.com before relying on the passage in question, and we will correct it.