Privacy Policy

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

• Email address: For account creation and communication
• Name: To personalize your experience
• Password: Encrypted and stored securely by our authentication provider (Clerk)
• Profile photo: Optional, if you choose to add one

1.2 Parking Lot Photos

When you upload photos, we collect and process:

• Photo files: The actual parking lot images you upload
• GPS coordinates: Automatically extracted from photo EXIF metadata (if present)
• Timestamps: When and where the photo was taken (from EXIF data)
• Camera information: Device make, model, and settings (from EXIF data)
• File metadata: File name, size, format, and upload time

Important: Your photos may contain sensitive information including: vehicle license plates, people in parking lots, and location data. You are responsible for ensuring you have the right to photograph and upload these images.

1.3 Usage Data

We automatically collect:

• IP address: For security and fraud prevention
• Browser type and version: For compatibility
• Device information: Operating system, screen size
• Usage patterns: Pages viewed, features used, time spent
• Error logs: Technical errors and crashes (via Sentry, if implemented)

1.4 Payment Information

Payment data is processed by our payment provider (Lemon Squeezy). We do NOT store your credit card information. We only retain:

• Transaction IDs and amounts
• Payment status (successful, failed, refunded)
• Invoice details (for your records)

1.5 Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Authentication, session management (required)
• Analytics cookies: Usage analytics via PostHog (optional, requires consent)
• Preference cookies: Remember your settings and preferences

See our Cookie Policy for details.

2. How We Use Your Information

2.1 To Provide the Service

• Process your parking lot photos through our AI detection system
• Generate parking space detection and occupancy analysis
• Store and display your analysis results
• Extract GPS coordinates for timezone detection and location-based features
• Provide customer support

2.2 To Improve the Service

• Analyze usage patterns to improve features
• Train and improve our AI detection models (with aggregated, anonymized data)
• Monitor and fix technical errors
• Conduct research and development

2.3 Communications

• Send transactional emails (analysis complete, payment confirmation)
• Send service announcements and updates
• Respond to your inquiries and support requests
• Send promotional emails (only with your consent, opt-out available)

2.4 Legal and Security

• Comply with legal obligations and law enforcement requests
• Prevent fraud, abuse, and security incidents
• Enforce our Terms of Service
• Protect our rights and property

3. How We Share Your Information

We do NOT sell your personal information. We share data only as described below:

3.1 Service Providers (Third Parties)

We share data with trusted third-party services that help us operate:

• Clerk: Authentication and user management
• AWS S3: Photo storage (US East region)
• Modal.com: AI-powered parking detection processing
• Lemon Squeezy: Payment processing
• Resend: Email delivery (if implemented)
• Sentry: Error tracking and monitoring (if implemented)
• PostHog: Product analytics (if implemented, optional with consent)

These providers have access only to the data necessary to perform their services and are bound by confidentiality agreements.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Subpoenas, court orders, or legal processes
• Government or law enforcement requests
• Protection of our legal rights or safety of others

3.3 Business Transfers

If ParkingPercent is acquired, merged, or sold, your information may be transferred to the new owner as part of the transaction.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Storage and Retention

4.1 Where We Store Data

• Photos: AWS S3 (US East region)
• Database: PostgreSQL hosted in the United States
• Backups: Automated backups stored securely

International Users: By using our Service, you consent to the transfer and storage of your data in the United States.

4.2 How Long We Keep Data

• Active accounts: Data retained until you delete your account
• Parking lot photos: 30-90 days after upload (configurable in settings), then automatically deleted
• Analysis results: Retained until you delete them or your account
• Payment records: 7 years (for tax compliance)
• Deleted accounts: 30-day grace period, then permanently deleted
• Failed uploads: Automatically deleted after 7 days

5. Your Privacy Rights

5.1 GDPR Rights (EU/EEA Users)

If you are in the European Union or European Economic Area, you have the right to:

• Access: Request a copy of all your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing
• Withdraw Consent: Revoke consent for optional processing (e.g., analytics)

To exercise these rights, visit your Account Settings or contact support@parkingpercent.com.

5.2 CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know: What personal information we collect, use, and share
• Delete: Request deletion of your personal information
• Opt-Out: Opt out of the "sale" of personal information (Note: We do not sell your data)
• Non-Discrimination: Equal service regardless of privacy choices

5.3 How to Exercise Your Rights

• Data Export: Go to Account Settings → Download My Data
• Account Deletion: Go to Account Settings → Delete My Account
• Email: Contact support@parkingpercent.com

We will respond to your request within 30 days.

6. Data Security

We implement industry-standard security measures to protect your data:

6.1 Technical Safeguards

• Encryption in Transit: All data transmitted over HTTPS/TLS
• Encryption at Rest: Photos encrypted on AWS S3, database encrypted
• Secure Authentication: Passwords hashed and encrypted by Clerk
• Access Controls: Role-based access, principle of least privilege
• Regular Security Audits: Vulnerability scanning and testing

6.2 Organizational Safeguards

• Employee access limited to necessary personnel
• Confidentiality agreements with all staff and contractors
• Security incident response plan

6.3 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by law within 72 hours of discovery.

7. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it.

8. Privacy Considerations for Parking Photos

8.1 GPS Location Data

Many smartphone cameras automatically embed GPS coordinates in photo metadata. We extract this data to:

• Detect the correct timezone for your parking lot
• Show location on maps (if you enable this feature)
• Provide location-based analytics

Privacy Tip: You can disable GPS location extraction in your Account Settings. This will limit some features but protect your location privacy.

8.2 Sensitive Content in Photos

Your parking lot photos may contain:

• License plates: May be considered personal data in some jurisdictions
• People: Individuals visible in parking lots
• Private property: Buildings, signage, surroundings

Your Responsibility: You are responsible for ensuring you have the legal right to photograph and upload these images. We process photos solely for parking space detection and do not intentionally extract or store license plate numbers or identify individuals.

8.3 Photo Retention

To protect your privacy, photos are automatically deleted after your configured retention period (30-90 days). You can manually delete photos at any time.

9. International Data Transfers

ParkingPercent is based in the United States. If you access our Service from outside the U.S., your data will be transferred to and processed in the United States. By using our Service, you consent to this transfer.

For EU/EEA users, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission for data transfers outside the EEA.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes:

• Update the "Last Updated" date at the top of this page
• Notify you via email (to your registered email address)
• Display a prominent notice in the Service

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your data:

• Email: support@parkingpercent.com
• Privacy Officer: privacy@parkingpercent.com
• Website: parkingpercent.com

Data Protection Officer (EU)

If you are in the EU and have concerns about our data practices, you may contact your local data protection authority.