What information do we process, and why?
Last updated: August 13, 2026
Account and identity
When you sign in with ChatGPT, the hosting service provides a site-specific stable user ID, your email address, and—when available—your display name. EYB Passage does not see or store your password.
Free fit review
Your company name, product name, optional public product or catalogue URL, uploaded product files, Canada objective, and consent time are used to create an account-owned project and prepare the initial fit review. Public URLs may be read after security checks, and text in supported files may be used for automated extraction.
Projects and documents
Project fields, source excerpts, tasks, cost assumptions, buyer research, and package selections are stored in a private D1 database. Uploaded PDF, JPG, PNG, WEBP, TXT, and CSV files are stored in a private R2 document store. Files are not public, are not indexed by search engines, and cannot be downloaded without owner and project checks.
Limits of automated extraction
Information found in a source is not treated as a verified product fact. The system shows the excerpt, source, and open gaps; it does not issue a compliance decision without producer evidence, official records, or qualified review where required.
Optional visual AI review
A JPG or PNG file is sent to NVIDIA's API for text extraction only when you select the separate consent box during upload. Files without that consent are not sent to this AI service. The NVIDIA access key is stored encrypted on the server; AI output is saved as a suggestion requiring review and is never written automatically into verified product fields.
Package selection and payment
The service level, scope, and displayed price are saved to your account. When payment is enabled, Stripe Checkout or PayPal is used. EYB Passage does not see or store card numbers, bank-account numbers, or a PayPal password. The provider order/session ID, amount, currency, and payment status are stored to confirm the order and support audit and refunds.
Usage and security records
Request time, action type, project identifier, and limited technical access records may be processed for security, abuse prevention, reliability, and auditability. We do not create advertising profiles or use behavioural advertising cookies.
Retention
Active project data is kept while the work continues and as needed to operate the service. Retention rules are configured for up to 730 days for anonymous experiment events, 365 days for audit records, and 365 days for archived enquiries. A longer period required for law or security is assessed separately.
Service providers and sharing
Data is processed by the hosting, identity, database, and private file-storage infrastructure. Documents are shared with an independent expert, carrier, laboratory, or other third party only when the work requires it and you approve the step.
Your choices
From the account page, you can download a copy of your structured data and request permanent deletion of account-owned projects and files after active tests are closed. For access, correction, or privacy questions, contact info@eybpassage.com.
Contact
EYB Passage · 108 Hartsmere Drive, Stittsville, Ontario K2S 2G1, Canada · info@eybpassage.com · +1 873 688 0905