Privacy Policy
Effective date: 1 July 2026
MOD Mission Critical LLC (“PaasPort”, “we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect when you use the PaasPort marketplace and account platform (the “Service”), how we use it, and the choices you have.
1. Information We Collect
Information you provide
- Account data — full name and email address when you register.
- Quote and order data — product selections, quantities, service terms, and any notes you include when submitting an estimate.
- Communications — messages you send to our sales or support team.
Information collected automatically
- Usage data — pages visited, filters applied, products viewed, timestamps, and referring URLs.
- Device data — browser type, operating system, and IP address.
- Authentication logs — sign-in events, including provider (email/password or Google OAuth).
Information from third parties
If you choose to sign in with Google, we receive your name and email address from Google in accordance with your Google account privacy settings.
2. How We Use Your Information
We use your information to:
- Create and manage your account.
- Process and respond to quote requests and orders.
- Send transactional emails (account confirmation, quote status updates, invoices).
- Improve the Service through aggregate usage analysis.
- Comply with legal obligations, including fraud prevention and financial record-keeping.
- Contact you about relevant products or features where you have not opted out.
We do not sell your personal information to third parties, and we do not use it to serve third-party advertising.
3. Legal Basis for Processing (EEA / UK)
If you are located in the EEA or the United Kingdom, we rely on the following bases:
- Contract — processing necessary to provide the Service you requested.
- Legitimate interests — improving the Service, fraud prevention, and direct marketing to existing customers.
- Legal obligation — compliance with applicable laws.
- Consent — where required, for example certain marketing communications.
4. Data Sharing
We share your information only in the following circumstances:
- Service providers — Google Firebase (authentication and database hosting), Google Maps (mapping), Cloudflare (bot protection), and email delivery providers, each acting under appropriate data-processing agreements.
- Infrastructure providers — where necessary to provision ordered services, we share the minimum required information (e.g., contact details for data-centre access badges).
- Legal requirements — if required by law, court order, or governmental authority.
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
5. Data Retention
We retain your account information for as long as your account is active. Quote and order records are retained for seven (7) years to meet financial and legal compliance requirements. You may request deletion of your account at any time (see Section 7); we will delete personal data except where retention is required by law.
6. Security
We implement industry-standard security measures including encryption in transit (TLS), access controls, and regular security reviews. Authentication is managed by Google Firebase, which uses industry-standard hashing for passwords. No system is completely secure; please notify us immediately at privacy@modmc.net if you suspect a breach.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data — you can update your name directly from your Profile page.
- Delete your account and associated personal data.
- Restrict or object to certain types of processing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email us at privacy@modmc.net. We will respond within 30 days (or sooner where required by law). You also have the right to lodge a complaint with your local data protection authority.
8. Cookies
We use strictly necessary cookies and local storage for session management and authentication. We do not use tracking or advertising cookies. You can configure your browser to block cookies, but this may affect the functionality of the Service.
9. International Transfers
Your data may be processed in countries outside your own, including the United States, where our service providers (including Google Firebase) operate. Where required, we rely on Standard Contractual Clauses or equivalent mechanisms approved by the relevant supervisory authority.
10. Children
The Service is intended for business users and is not directed at anyone under 18 years of age. We do not knowingly collect personal data from minors.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or via a notice on the Service. The updated policy will be effective from the date stated at the top of this page.
12. Contact
For privacy-related questions or requests, contact our privacy team at privacy@modmc.net or write to:
MOD Mission Critical LLC
Privacy Team
legal@modmc.net