Privacy Policy

1. Information We Collect

Personal Information

When you use ValetPark, we collect the following information:

• Contact Information: Mobile phone number, email address, name
• Vehicle Information: Car number, make, model (optional)
• Account Information: Username, password (encrypted), user type (client/driver)
• Verification Data: OTP codes, QR codes, session tokens

Automatically Collected Information

• Usage Data: Session timestamps, parking duration, service interactions
• Device Information: IP address, browser type, device type, operating system
• Location Data: Approximate location (when you use our service)
• Cookies: Session cookies for authentication and user experience

2. How We Use Your Information

We use your personal information for the following purposes:

Service Delivery

• Create and manage your parking sessions
• Match clients with valet drivers
• Send SMS notifications and OTP verification codes
• Generate QR codes for secure pickup verification
• Process parking requests and status updates

Communication

• Send service-related SMS messages via WhatsApp Business API
• Provide customer support and respond to inquiries
• Send important service updates and notifications
• Share parking session status and pickup ready alerts

Security and Safety

• Verify user identity through OTP authentication
• Prevent fraud and unauthorized access
• Monitor for suspicious activity
• Maintain audit logs for security purposes

Service Improvement

• Analyze usage patterns to improve our service
• Track session metrics and performance
• Develop new features and enhancements
• Conduct quality assurance and testing

3. Information Sharing and Disclosure

We DO NOT sell your personal information.

We may share your information only in the following limited circumstances:

With Service Providers

• Twilio: For SMS OTP delivery (phone number only)
• WhatsApp Business API (via n8n): For parking notifications and updates
• Cloud Hosting: For secure data storage and application hosting

Within the Service

• Drivers see client phone numbers only for active parking sessions
• Clients see driver information only when using the service
• Session information is shared between matched clients and drivers

Legal Requirements

• When required by law or valid legal process
• To protect rights, property, or safety of ValetPark and users
• In connection with fraud prevention or security issues

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction. Users will be notified via email and/or prominent notice on our website.

4. WhatsApp Business API Integration

ValetPark uses the WhatsApp Business API to provide convenient parking management through WhatsApp messages.

WhatsApp Data Usage

• We send your phone number to WhatsApp to deliver service messages
• Messages include parking status, OTP codes, and pickup notifications
• We do NOT access your WhatsApp contacts or other messages
• You can opt-out of WhatsApp notifications at any time

Third-Party Integration

• WhatsApp messages are processed through Meta's WhatsApp Business Platform
• Meta's Privacy Policy applies to WhatsApp message delivery
• We use n8n workflow automation to manage WhatsApp interactions
• All communications follow WhatsApp Business Policy guidelines

5. Data Security

We implement industry-standard security measures to protect your information:

Technical Security

• SSL/TLS encryption for all data transmission
• Password hashing using Django's secure encryption
• Token-based authentication for magic links
• Secure session management with CSRF protection
• OTP expiration after 10 minutes

Operational Security

• Regular security audits and updates
• Access controls and user authentication
• Secure development practices
• Employee confidentiality agreements

Data Storage

• Data stored in secure PostgreSQL/SQLite databases
• Regular backups and disaster recovery
• Server security and monitoring
• Restricted access to production systems

6. Data Retention

We retain your information for as long as necessary to provide our services:

• Active Accounts: Retained while account is active
• Session Data: Retained for 90 days after completion
• OTP Codes: Automatically deleted after expiration (10 minutes)
• Inactive Accounts: Deleted after 2 years of inactivity
• Audit Logs: Retained for 1 year for security purposes

You can request deletion of your data at any time. See Section 8 below.

7. Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

• Request a copy of your personal data
• Download your parking session history
• Review information we have about you

Correction and Updates

• Update your profile information anytime
• Correct inaccurate data
• Change your contact preferences

Deletion and Opt-Out

• Delete your account and associated data
• Opt-out of non-essential communications
• Stop using our service at any time

Communication Preferences

• Choose to receive notifications via SMS or WhatsApp
• Opt-out of marketing communications (we don't send marketing currently)
• Manage notification settings in your account

8. Data Deletion Request

You have the right to request deletion of your personal information at any time.

How to Request Data Deletion

1. Visit our Data Deletion Request Page
2. Fill out the deletion request form with your registered phone number
3. We will process your request within 30 days
4. You will receive confirmation via SMS/WhatsApp once completed

What Gets Deleted

• Your account and login credentials
• Personal information (name, phone, email)
• Vehicle information and parking history
• QR codes and session tokens
• All associated data and records

What We Retain

For legal and security reasons, we may retain:

• Anonymized transaction records for accounting
• Security logs (without personal identifiers) for fraud prevention
• Data required by law to retain

9. Children's Privacy

ValetPark is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information immediately.

10. International Data Transfers

ValetPark operates primarily in India. If you are accessing our service from outside India:

• Your information may be transferred to and stored in India
• We comply with applicable data protection laws
• Appropriate safeguards are in place for cross-border transfers

11. Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

Essential Cookies

• Session management and authentication
• Security and CSRF protection
• Required for service functionality

Performance Cookies

• Track service usage and performance
• Help us improve the platform
• Analyze user interactions

You can disable cookies in your browser settings, but this may affect service functionality.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our data practices
• New features or services
• Legal or regulatory requirements
• User feedback and improvements

When we make material changes:

• We will update the "Last Updated" date at the top
• We will notify active users via SMS/WhatsApp
• Continued use of the service constitutes acceptance of changes

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information:

Data Protection Officer: For privacy-related inquiries, contact us at info@techarion.com with subject line "Privacy Request"