PRIVACY POLICY
How BibPass protects your personal data, registration proof documents, and payment details.
1. STRICTLY PRIVATE REGISTRATION PROOF DOCUMENTS
When a Seller lists a bib, they are required to upload proof of race registration (e.g. RunSignup confirmation email, registration receipt PDF).
🔒 Private Bucket Security: Proof documents are stored in private, non-public AWS S3 buckets. They are NEVER indexed by search engines and NEVER exposed publicly to buyers or third parties.
Only authorized BibPass compliance administrators may access proof files via temporary 15-minute presigned URLs for verification purposes.
2. PAYMENT & BANK ACCOUNT ENCRYPTION
BibPass does not store credit card numbers, debit card details, or bank account numbers on our servers. All financial transactions and seller bank payouts are processed directly by Stripe Inc. through PCI-DSS Level 1 certified infrastructure.
3. INFORMATION WE COLLECT
- Account Credentials: Name, email address, password (stored strictly as salted bcrypt hashes).
- Marketplace Activity: Order timestamps, bib listings, transfer confirmation logs, and dispute claims.
- Communications: Messages exchanged regarding entry transfer completion.
4. DATA RETENTION & POST-RACE PURGE
Following completion of a race and expiration of the dispute window, participant registration proof screenshots are automatically scheduled for permanent deletion from our storage buckets within 30 days.