How Sedrino Labs, Inc. collects, uses, shares, stores, and protects personal information through PackagePass across the website, dashboard, API, registry, and support workflows.
1. Information we collect
- Account information, such as name, email address, organization name, role, authentication identifiers, and account settings.
- Organization and registry information, such as package names, package metadata, version records, grants, groups, users, agents, tokens, audit events, registry requests, and dashboard activity.
- Billing information, such as customer identifiers, plan, subscription status, invoice references, and payment workflow metadata. Payment card details are handled by our payment processor.
- Website and product usage information, such as pages viewed, referrers, UTM parameters, campaign identifiers, local visitor identifiers, session identifiers, user agent hashes, IP address hashes, event names, and interaction metadata.
- Support and communications information, such as messages, requests, attachments, feedback, and other information you choose to provide.
2. How we use information
- Provide, secure, operate, troubleshoot, and improve PackagePass.
- Authenticate users, sync organizations, enforce package access, process registry requests, issue tokens, and maintain audit logs.
- Manage billing, subscriptions, plan limits, invoices, tax handling, and customer support.
- Analyze website and product usage, attribute signups, improve onboarding, and understand marketing performance.
- Prevent abuse, investigate security issues, enforce terms, comply with legal obligations, and protect rights.
3. Local storage and cookies
PackagePass uses authentication cookies and related browser storage for sign-in and session management. The website also stores a marketing visitor identifier in local storage and a marketing session identifier in session storage so we can understand acquisition and page interactions.
You can control cookies and storage through browser settings, but disabling them may affect sign-in, dashboard functionality, attribution, or support diagnostics.
4. How we share information
- With service providers that help us provide authentication, hosting, storage, billing, analytics, email, security, infrastructure, and support.
- With organization administrators and authorized workspace members according to their roles and permissions.
- With connected services or integrations you configure or authorize.
- When required by law, legal process, security investigation, rights enforcement, business transfer, or with your consent.
5. Customer content and processor role
For customer content processed on behalf of a customer organization, Sedrino Labs, Inc. generally acts as a service provider or processor. The customer organization controls the content it publishes, the users it invites, the grants it creates, and the personal information it submits to PackagePass.
Where Sedrino Labs, Inc. determines how and why personal information is processed for account administration, billing, security, website analytics, or business operations, Sedrino Labs, Inc. acts as an independent controller.
6. Retention
We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes. Audit log retention may vary by plan.
When information is no longer needed, we delete, aggregate, de-identify, or otherwise limit it according to operational and legal requirements.
7. Security
We use technical and organizational safeguards designed to protect personal information. These include access controls, hashed token storage, authorization checks, audit records, and infrastructure security measures. No method of transmission or storage is perfectly secure.
8. International processing
PackagePass may process information in the United States and other locations where we or our providers operate. If you use PackagePass from outside the United States, your information may be transferred to, stored in, or processed in jurisdictions with different data protection laws.
9. Privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. You may also have the right to appeal a decision or lodge a complaint with a regulator.
To exercise rights, contact us using the email below. We may need to verify your request and may direct requests about organization-controlled data to the relevant organization administrator.
10. California privacy notice
We do not sell personal information for money. We also do not knowingly sell or share personal information of people under 16. If we use advertising or analytics in a way that is considered sale or sharing under California law, we will provide the required opt-out controls.
Categories of personal information we may collect include identifiers, commercial information, internet or network activity, professional or employment-related information, and inferences from product or website usage.
11. Children
PackagePass is intended for business and developer use and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
12. Changes
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and provide additional notice where required.
Contact
Questions, notices, privacy requests, and abuse reports can be sent to michael@sedrino.com.