Privacy Policy

1. Who we are

NextPass provides an access control and attendance platform that manages doors, controllers and the entry and exit records of the people who pass through them. This policy explains what personal data we handle and why.

Where NextPass runs on your own site under your administration, you are the controller of the data about your people and NextPass acts as a processor on your behalf. See our Data Processing Addendum for those terms.

2. Data we process

Identity and credential data: names, personnel IDs, department, job position, and the card, fingerprint template or car sticker used to recognise a person at a door.

Access and attendance events: entry and exit passages per door, timestamps, controller and door identifiers, and the derived attendance, leave and work-hours records.

Account and usage data: administrator accounts, roles, audit-trail entries and the technical logs needed to keep the platform and its controllers in sync.

3. Why we process it

To operate access control — deciding whether a card, fingerprint or sticker may open a given door within its time window — and to record the passages that result.

To produce attendance, leave and reporting outputs from those passages, and to keep the physical controllers synchronised with the platform.

To secure the service, maintain the audit trail, and meet legal and contractual obligations.

4. Retention

Access and attendance events are retained for the period configured by your organisation, after which they are deleted or anonymised. Credential data is kept for as long as the person is active and removed when access is revoked.

5. Your rights

Individuals may request access to, correction of, or deletion of their personal data. Because NextPass typically acts as a processor, please direct these requests to the organisation that operates your site; we will support them in responding.

6. Contact

For privacy questions about NextPass, contact us at info@nextleap.al.