Contents
Mattermind, LLC ("we," "us," "our") operates the PassportIQ platform at https://app.passportiq.app. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using PassportIQ, you agree to this Privacy Policy.
When you register, we collect your organization name, work email address, and password (stored as a bcrypt hash — we never store your plaintext password), and your user role within your organization.
The core of PassportIQ is the data you create about your battery products: model specifications, serial numbers, manufacturing dates, chemistry, capacity, state of health readings, lifecycle events, recycled content, hazardous substances, and other technical attributes. This data is processed solely to generate battery passport pages and analytics for you.
Payments are handled by Stripe. When you subscribe, Stripe collects your payment card details directly. We receive only a customer token and summary (last 4 digits, card brand, expiry). We never store your full card number or CVV.
We collect information about how you interact with the platform — features used, actions taken, and timestamps — to improve the Services and diagnose issues.
Standard server logs include IP addresses, browser type, device type, and referring URLs, used for security, fraud prevention, and infrastructure monitoring.
| Purpose | Legal basis |
|---|---|
| Provide the PassportIQ platform and generate battery passport pages | Contract performance |
| Process subscription payments and send billing receipts | Contract performance |
| Send account notifications (password resets, trial expiry, subscription status changes) | Contract performance / Legitimate interest |
| Serve public passport pages to regulators, authorities, recyclers, and end users as required by EU Battery Regulation 2023/1542 | Legal obligation / Contract performance |
| Improve the platform and diagnose technical issues | Legitimate interest |
| Fraud detection and security | Legitimate interest |
| Comply with legal obligations (tax records, law enforcement requests) | Legal obligation |
We do not use your data for advertising or sell it to third parties.
Digital Battery Passports (DPPs) created in PassportIQ are designed to be publicly accessible. When someone scans a battery's QR code or visits a passport URL, they can view technical information about that battery including model specifications, serial number, manufacturer identity, chemistry, capacity, state of health, lifecycle events, and compliance status.
This is intentional and required by law. EU Battery Regulation 2023/1542 requires battery passport data to be accessible to regulators, market surveillance authorities, notified bodies, recyclers, and end users throughout the battery's operational lifetime. By using PassportIQ to create battery passports, you acknowledge and agree that this data will be publicly accessible.
The economic operator (manufacturer, importer, or authorized representative) bears regulatory responsibility for the accuracy of passport data. PassportIQ facilitates this obligation.
To request deletion of your account and data, contact info@mattermindtech.com.
In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
To exercise any of these rights, contact info@mattermindtech.com. We will respond within 30 days.
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.
Mattermind, LLC acts as the data controller for personal data you provide when managing your account. For battery passport data made publicly accessible to fulfill EU Battery Regulation requirements, the economic operator (you, as manufacturer or importer) bears data controller responsibility for the accuracy of that data.
Data transfers from the EU/EEA to the United States are subject to the EU-U.S. Data Privacy Framework and applicable standard contractual clauses.
PassportIQ is a business-to-business platform intended for individuals who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.
We may update this Privacy Policy periodically. When we make material changes, we will update the "Last updated" date and send an email notification to registered users. Continued use of PassportIQ after a policy update constitutes acceptance of the revised policy.
For privacy questions, data requests, or concerns: