Privacy Policy — FunPass

FunPass ("we", "our", "us") is operated by Paragon Media Group. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform at funpass.com.mx and any tenant-branded storefronts powered by FunPass.

1. Information We Collect

• Personal identification: name, email address, phone number
• Payment information: processed securely by Stripe; we do not store card numbers
• Pass and ticket data: purchases, redemptions, scan history
• Device and usage data: IP address, browser type, pages visited, timestamps
• Google account data (if you sign in with Google): name, email, profile picture — we only use this to authenticate you and create/access your account

2. How We Use Your Information

• To create and manage your account
• To process purchases and deliver digital passes
• To send transactional emails (pass delivery, receipts, OTP codes) via Resend
• To validate passes at attractions via QR scan
• To provide customer support
• To improve platform performance and security
• We do NOT use your data for advertising or sell it to third parties

3. Google User Data

If you sign in with Google OAuth, we receive your name, email address, and profile photo from Google. We use this data solely to authenticate your identity and provide you access to your FunPass account. We do not share Google user data with any third parties beyond what is necessary to operate the platform. You can revoke FunPass access to your Google account at any time at https://myaccount.google.com/permissions.

4. Data Sharing

We share data only with:

• Stripe (payment processing)
• Resend (transactional email delivery)
• Supabase (secure database and authentication infrastructure)
• Attraction operators (your pass redemption data, to validate your pass at their venues)

We do not sell, rent, or share your personal data with advertisers or unrelated third parties.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request account deletion by emailing privacy@funpass.com.mx. Upon deletion, personal data is removed within 30 days, except where retention is required by law.

6. Security

We use industry-standard security measures including HTTPS encryption, Supabase Row Level Security (RLS), and rotating QR tokens. No method of transmission over the internet is 100% secure.

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

8. Children's Privacy

FunPass is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Your Rights

You have the right to access, correct, or delete your personal data. Contact us at privacy@funpass.com.mx.

10. Changes to This Policy

We may update this policy. We will notify you of significant changes via email or a notice on the platform.

11. Contact

Paragon Media Group
privacy@funpass.com.mx
Mazatlán, Sinaloa, México