Who operates the service
Dynamax Vendmac operates Dynamax Vehicle Pass. Questions about this policy or personal information can be sent to jozcefhse@gmail.com.
Information we process
- Organization account details, including organization name, contact information, subscription status, and branding.
- Authorized-user details, including name, email address, role, login subject, access status, and recent login time.
- Gate, enrolled-reader, browser, and security information needed to verify trusted scan operations.
- Registered card identifiers, pass numbers, card status, entry and exit events, timestamps, gate context, and audit records.
- Technical and security logs, such as request identifiers and authentication results, used to protect and troubleshoot the service.
The service does not require a driver's name, licence number, vehicle registration number, phone number, or journey purpose for normal pass operations.
How we use information
We use this information to authenticate users, enforce organization roles, verify RFID or NFC pass activity, show live operational counts, provide reports, manage subscriptions, prevent fraud, investigate incidents, and improve service reliability.
Service providers
Cloudflare provides hosting, database, security, and access-control services. Google may provide sign-in. Paystack provides hosted billing and payment processing. Payment card details are entered into Paystack's systems and are not stored by Dynamax Vehicle Pass.
Organization responsibilities
Each subscribing organization controls the operational records and user accounts it creates. Organization administrators must add only authorized users, assign appropriate roles, secure enrolled gate devices, and handle requests concerning their organization's records.
Retention and security
Operational and audit records are retained for accountability, security, subscription administration, and legal obligations. We use access controls, tenant isolation, signed reader evidence, encrypted transport, and restricted administrative functions. No internet service can guarantee absolute security.
Your choices
Users may sign out, switch identity-provider accounts, and ask their organization administrator to correct or deactivate an application account. Privacy requests may also be sent to the contact address above. We may need to retain immutable audit or transaction records where required for security, contractual, or legal reasons.
Changes
We may update this policy as the service changes. The date at the top identifies the current version. Material changes will be communicated through the service or the organization contact where appropriate.