1 · Acceptance
Creating an account, signing in, or otherwise using productpasses.com means you accept these terms and our Privacy policy. If you're using the service on behalf of an organisation, you confirm you have authority to bind that organisation.
2 · What the service does
productpasses.com lets you create EU Digital Product Passports (DPPs) for your products, publish them at productpasses.com/p/<slug>, and print scannable QR codes that link back to them. We provide templates aligned with the EU Ecodesign for Sustainable Products Regulation (ESPR), AI-assisted drafting, and hosting. We do not provide legal certification or formal compliance attestation — that responsibility remains with you as the product manufacturer or importer.
3 · Your account
- You're responsible for keeping your sign-in credentials secure. Notify us immediately of any unauthorised access.
- One person per account. Workspaces may have multiple seats once that feature ships (see Pricing).
- You must be 16 or older to create an account.
4 · Acceptable use
You agree not to:
- Publish passports for products that don't exist, that you don't make/import, or that are illegal in the EU.
- Use the service to mislead consumers about a product's properties, origin, or composition.
- Reverse-engineer, scrape at scale, or attempt to disrupt the service.
- Upload content you don't own the rights to (photos, logos, text).
We may suspend or terminate accounts that violate these clauses. We'll always email you first unless there's an immediate-harm situation.
5 · Your content
You retain full ownership of everything you upload — product details, photos, templates you save, the lot. By using the service, you grant us a non-exclusive licence to host, display, and serve that content as the product requires (e.g., rendering your passport on the public page). The licence ends when you delete the content.
AI-generated draft text is yours to keep and edit freely. You remain responsible for verifying that any AI-drafted claims (materials, origin, certifications) are accurate before publishing.
6 · Plans, lifetime cap, billing, cancellation
- Free plan: up to 5 lifetime passport activations, no card required. AI-assisted creation included.
- Paid plans: Solo (€9/mo, 100 lifetime), Studio (€29/mo, 1,000 lifetime), Foundry (€89/mo, unlimited). Billed via Stripe; subscriptions renew monthly or yearly.
- Lifetime activation cap: each unique passport consumes one slot the first time it's activated. Deactivating does not free the slot. This is because we are required by ESPR (clause 6a) to keep published passports accessible for up to 10 years even after you deactivate them. The slot stays reserved against your plan's cap until you choose to force-delete the passport.
- Force-delete: permanent removal of a passport. Frees the lifetime slot and consumes one of your plan's yearly force-delete budget (Free 2/yr, Solo 10/yr, Studio 50/yr, Foundry unlimited). The budget resets every 12 months from your first force-delete. Draft passports (never activated) can be deleted freely outside this budget.
- Cancellation: cancel any time via Settings → Billing (Stripe-hosted portal). Cancellation takes effect at the end of the current billing period; no pro-rata refunds. Your existing passports continue to serve publicly even after cancellation — see clause 6a.
- VAT: EU customers see VAT applied per Finnish rules. Non-EU and EU B2B with valid VAT ID can be charged reverse-charged where applicable.
- Price changes: we'll give 30 days' notice by email before changing the price of an active subscription.
6a · ESPR retention & passport lifecycle
The EU Ecodesign for Sustainable Products Regulation (ESPR) requires Digital Product Passports to remain accessible for the product's useful life — typically 5 to 10 years depending on category, with 10 years as the maximum we commit to. Because of that, "deactivating" a passport does not delete it. The passport stays publicly resolvable to anyone who scans the QR code for the retention period applicable to its category, even if you have cancelled your subscription.
The only way to make a published passport unreachable before the retention period ends is to force-delete it, which is metered (see clause 6) and triggers a withdrawal notice at the public URL. We may decline force-deletes that would breach an enforcement investigation, a regulator's preservation notice, or any other legal hold we are aware of at the time.
Our retention commitment is the longer of (a) 10 years from activation, (b) the product service life set in the applicable ESPR delegated act for that product's category, or (c) the duration of any enforcement / litigation hold. After all three expire, we may move the passport to cold storage, reduce data fidelity, or — only with prior notice and a regulator-cooperative path — remove it.
7 · Availability & backups
We aim for 99.9% monthly uptime but make no formal SLA on the Free plan. Public passport pages are served from a CDN cache and remain reachable even during admin-area incidents. We back up the database daily; we don't guarantee recovery of content you have deleted yourself.
8 · Liability
To the maximum extent permitted by Finnish law, our total liability for any claim is limited to the fees you paid us in the 12 months before the claim. We are not liable for indirect or consequential damages (lost revenue, lost data, regulatory fines, etc.). Nothing in these terms limits liability we cannot legally limit (gross negligence, wilful misconduct, mandatory consumer protection).
9 · ESPR / regulatory compliance
ESPR-aligned templates are our best-effort interpretation of the regulation as it stands. They are not a substitute for legal advice. You remain the responsible economic operator for your products. If a regulator queries a passport you published, we'll cooperate fully with you on records, retention, and history — but the regulatory accountability is yours.
10 · Third-party services
The service depends on infrastructure providers (Supabase, Vercel, Stripe, Resend, Anthropic, Sentry). We choose them carefully and stay EU-hosted where possible (see Privacy policy), but outages or changes at those providers can affect us and, briefly, you.
11 · Termination by you
You can cancel your subscription any time (see clause 6). Cancellation drops your workspace to the Free tier, your existing passports remain accessible per clause 6a, and you can re-subscribe at any time.
If you want to delete your workspace entirely — email us from a verified workspace-owner address, or use the in-product flow under Settings → Account. We will request explicit confirmation because deletion is largely irreversible. We treat full workspace deletion as a bulk force-delete: it is subject to the same lifetime / retention rules in clause 6a, and we may decline or delay where a regulator hold applies. Otherwise we permanently remove your workspace and remaining passports within 30 days (subject to billing-records retention noted in the privacy policy).
12 · Termination by us
We may terminate for material breach (clause 4), for non-payment after a 14-day grace period, or if continuing service becomes legally impossible. You'll get notice and an export window unless the situation involves immediate harm.
12a · Service continuity and data export
ESPR Article 12 expects DPP service providers to plan for continuity. We meet this by guaranteeing that every workspace owner can export a complete copy of their passports at any time, from Settings → Company profile → Export your data, or by calling GET /api/export/workspace.
The export is a single JSON document containing every passport's full state plus photo URLs, including GTINs when set. The format is open (JSON-LD compatible) so any ESPR-aligned DPP provider can ingest it. We don't charge for exports and we don't rate-limit them. You can move to another provider at any time, including if productpasses.com ever ceases to operate.
13 · Governing law & disputes
These terms are governed by Finnish law. Disputes are resolved in the Helsinki District Court, unless mandatory consumer protection law grants you a different forum.
14 · Changes
We'll update these terms occasionally. Material changes trigger an email to existing customers at least 30 days before the new terms take effect. Continued use after that date is acceptance.
15 · Contact
Questions or formal notices: open the chat assistant on any productpasses.com page and use “Email us” · Digikamu Oy, Helsinki, Finland.