Privacy Policy
GetPassive Ltd (Company No. 17245817), registered in England and Wales, is the data controller for personal data processed through the GetPassive website, developer dashboard, and bandwidth-sharing SDK. Contact: [email protected].
ICO Ref: [PENDING].
What we collect
- IP addresses and approximate country/region.
- Device identifiers generated or supplied for SDK operation.
- Bandwidth usage metrics, session timestamps, uptime, and traffic volume.
- Developer account, application, payout, and dashboard session details.
Why we use data
We process this data to operate the bandwidth-sharing network, authenticate SDK devices, calculate developer earnings, detect fraud and abuse, maintain security, and meet legal, accounting, and tax obligations.
Legal basis
- Consent: end-users must opt in through the SDK consent screen before bandwidth sharing is activated.
- Legitimate interests: operating and securing the network, calculating earnings, preventing abuse, and maintaining service reliability.
- Legal obligation: retaining accounting and payout records where required by law.
Processors and sharing
We use carefully selected processors including hosting providers on UK/EU infrastructure and Stripe for payments and payout processing. We do not sell personal data to third parties.
Retention
- Traffic session data: 90 days.
- Aggregated earnings and payout data: 7 years for legal and tax requirements.
- Device identifiers: retained until the SDK is removed or the developer/app integration is disabled, unless a longer period is required for security or legal reasons.
Cookies
The developer dashboard uses essential session cookies and local storage needed for sign-in and account security. We do not use advertising cookies on the dashboard.
Your rights
Under UK GDPR you may request access, correction, erasure, portability, restriction, or objection to processing. Email [email protected]. You can also complain to the UK Information Commissioner's Office.
Security
We apply access controls, audit logging, HTTPS, token-based authentication, and abuse monitoring to protect the service. No internet service can be guaranteed completely secure.