Legal

Privacy Policy

Effective date: July 20, 2026

1. Who We Are

getParkFlow is operated by BTech LLC, a New Mexico limited liability company, which is the data controller for personal information processed through the Service. This policy explains what we collect, how we use it, and your choices. The Service is directed to users in the United States.

2. Information We Collect

We collect: account info (email, hashed password); property profile info (name, address, contact name, contact phone, billing email, estimated spaces, accessibility acknowledgement); parking pass data (license plates, guest names, vehicle make/model, pass times); payment info (processed via Stripe - we never store full card numbers); email delivery events; and usage data (pages visited, error logs, IP address, and device/browser information used for security and rate limiting). When an authorized user uses ParkFlow Assistant, we also process the questions, generated answers, feedback, and limited account context needed to provide role- and plan-appropriate product support. Do not enter license plates, payment identifiers, access credentials, or other sensitive personal information into the Assistant.

3. How We Use Your Information

We use collected information to: provide and improve the Service; process parking pass creation and payments; send email confirmations and manager announcements; provide documented product-support answers through ParkFlow Assistant; respond to support requests; maintain security and detect and prevent fraud and abuse; and comply with legal, tax, and audit obligations.

4. Information Sharing and Sub-Processors

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share data only with service providers acting on our behalf and bound by confidentiality: Stripe (payment processing and subscription billing), Supabase (database, authentication, and hosting of application data), Resend (transactional and announcement email delivery), Vercel (application hosting, logging, and AI Gateway routing), OpenAI (generation of ParkFlow Assistant answers), and Anthropic (only when a manager uses the optional AI lot-import feature, which sends the uploaded layout or blueprint content for parsing). AI requests are configured to disallow prompt training. We may also disclose information to comply with law, respond to lawful requests from law enforcement, enforce our terms, protect rights and safety, or complete a business transaction. License plate, visitor, resident contact, and property profile information is accessible only to authorized getParkFlow users for the associated property or to platform operations.

5. Data Retention

We retain account and property data while your account is active. ParkFlow Assistant conversations and generated answers are scheduled for deletion 30 days after creation. Assistant usage totals and feedback may be retained longer in de-identified or account-linked form for security, cost control, and product-quality review. Parking pass records are retained for a reasonable period after expiry to support enforcement, audit, and dispute resolution. Payment, billing, audit-log, and email-event records are retained as long as needed to resolve chargebacks and disputes and to meet legal, tax, and accounting obligations. You may request deletion as described below, except where retention is required by law or legitimate security, fraud-prevention, financial, or audit needs.

6. Security

We implement industry-standard security including encrypted data transmission (HTTPS), hashed passwords, row-level security on our database, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use only essential cookies and similar technologies required for authentication and session management. We do not use advertising or third-party tracking cookies.

8. Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, and to appeal a denial of a request. To exercise these rights, email contact@getparkflow.app or use our contact page; we will respond within the time required by applicable law (generally within 45 days). We will not discriminate against you for exercising your rights. Because much of the data in the Service is entered by a property manager about residents and visitors, we may direct certain requests to the relevant property, which controls that data.

9. California Privacy Rights

If you are a California resident, the CCPA/CPRA gives you the right to know the categories and specific pieces of personal information we collect, the sources, and the purposes; to request deletion or correction; and to opt out of the sale or sharing of personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising, so there is no need to opt out, but you may still exercise your other rights as described above. We will not discriminate against you for exercising these rights. The categories we collect are identifiers, contact and account information, vehicle and license-plate information, commercial/payment information, and internet/usage activity, as described in Section 2.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a notice within the Service and update the effective date above. Continued use after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights, email contact@getparkflow.app or visit our contact page. You may also request the postal mailing address for BTech LLC by email.