Privacy Policy
Effective date: November 7, 2026
1. Who We Are
getParkFlow is operated by BTech LLC, a New Mexico limited liability company, which is the data controller for personal information processed through the Service. This policy explains what we collect, how we use it, and your choices. The Service is directed to users in the United States.
2. Information We Collect
We collect: account info (email, hashed password); property profile info (name, address, contact name, contact phone, billing contact email, estimated spaces, accessibility acknowledgement); parking pass data (license plates, guest names, vehicle make/model, pass times); payment info (processed via Stripe - we never store full card numbers); email delivery events; and usage data (pages visited, error logs, IP address, and device/browser information used for security and rate limiting). If you allow analytics cookies, Google Analytics also processes public marketing page visits, button clicks, successful contact requests, account creation and property setup milestones, referring website origins, and browser/device information to help us understand website traffic. Without cookies, Vercel Web Analytics also counts visits to those same public pages and signup, recording the page, the referring website, and general browser, device, and country information. We exclude account portals and parking checkout from both. During property signup, we send only account creation and setup milestones, not form field contents. We remove query strings and URL fragments from the page and event URLs we send, except standard campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term) that tell us which of our own posts or links a visit came from. When an authorized user uses ParkFlow Assistant, we also process the questions, generated answers, feedback, and limited account context needed to provide role- and plan-appropriate product support. Do not enter license plates, payment identifiers, access credentials, or other sensitive personal information into the Assistant. In the ParkFlow mobile app, we also collect: photos you choose to take or upload for tow records, security reports, resident tow requests, plate photos at checkout, and parking site plans (stored privately and shown only to authorized users of that property); a push notification token for your device if you allow notifications, and your notification choices; and, if you sign in with Apple or Google, the name and email address they share with us (Apple may share a private relay address). Addresses typed while setting up a property are sent to Google Places to suggest matches. The app does not track your location and does not use advertising identifiers.
3. How We Use Your Information
We use collected information to: provide and improve the Service; understand public website traffic (with Google Analytics only when you allow analytics); process parking pass creation and payments; send email confirmations and manager announcements; provide documented product-support answers through ParkFlow Assistant; respond to support requests; maintain security and detect and prevent fraud and abuse; and comply with legal, tax, and audit obligations.
4. Information Sharing and Sub-Processors
We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share data only with service providers acting on our behalf and bound by confidentiality: Stripe (payment processing and subscription billing), Supabase (database, authentication, and hosting of application data), Resend (transactional and announcement email delivery), Vercel (application hosting, logging, cookieless website analytics, and AI Gateway routing), Google Analytics (optional public website traffic measurement when you allow analytics cookies), OpenAI (generation of ParkFlow Assistant answers), Anthropic (only when a manager uses the optional AI lot-import feature, which sends the uploaded layout or blueprint content for parsing), Google (Sign in with Google and address suggestions through Google Places), Apple (Sign in with Apple, Apple Pay, and delivery of push notifications), and Expo (delivery of mobile push notifications). Card payments made in the app, including with Apple Pay, are processed by Stripe; we never receive full card numbers. AI requests are configured to disallow prompt training. We may also disclose information to comply with law, respond to lawful requests from law enforcement, enforce our terms, protect rights and safety, or complete a business transaction. License plate, visitor, resident contact, and property profile information is accessible only to authorized getParkFlow users for the associated property or to platform operations.
5. Data Retention
We retain account and property data while your account is active. ParkFlow Assistant conversations and generated answers are scheduled for deletion 30 days after creation. Assistant usage totals and feedback may be retained longer in de-identified or account-linked form for security, cost control, and product-quality review. Parking pass records are retained for a reasonable period after expiry to support enforcement, audit, and dispute resolution. Tow, report, and plate photos are kept with the record they belong to for the same reasons. Push notification tokens are removed when you sign out of the app or delete your account. Payment, billing, audit-log, and email-event records are retained as long as needed to resolve chargebacks and disputes and to meet legal, tax, and accounting obligations. You may request deletion as described below, except where retention is required by law or legitimate security, fraud-prevention, financial, or audit needs.
6. AI Assistants (MCP Connector)
Managers on plans that include it can connect an AI assistant they choose, such as Claude, ChatGPT, Codex or Cursor, to their getParkFlow account through our MCP connector. Connecting needs the manager's own sign-in and their explicit approval. The assistant then acts as that manager, with only the access their role already has, and can read and change the same parking information they can in the manager portal, including names, emails, phone numbers, units and license plates of residents, permit holders and visitors at their places. Information the assistant reads is sent to the AI provider the manager chose and is handled under that provider's own terms and privacy policy; that provider is chosen by the manager and is not our sub-processor. We do not receive the manager's conversations with their assistant, only the requests it makes to getParkFlow. For each change an assistant makes, we keep a record of what it did, at which place, when, whether it worked, and which assistant made it, so the manager can review it under Settings → AI assistants; these records are kept while the account exists and deleted with it. The connector cannot refund, pay out, change plans or team members, or delete data. A manager can disconnect an assistant at any time under Settings → AI assistants, which stops its access immediately.
7. Security
We implement industry-standard security including encrypted data transmission (HTTPS), hashed passwords, row-level security on our database, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Cookies
We use essential cookies and similar technologies for authentication, session management, and remembering your cookie preference. If you choose Allow analytics, we also load Google Analytics and allow its analytics cookies on public marketing pages and during property signup. Choosing Essential only keeps Google Analytics disabled. Vercel Web Analytics sets no cookies and does not follow you to other websites. You can change your choice using Cookie preferences in the footer of our marketing pages. We do not enable Google advertising personalization or Google signals in this integration.
9. Your Privacy Rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, and to appeal a denial of a request. You can delete your account yourself in the ParkFlow app (Account → Settings → Delete account) or in your account settings on the website. To exercise these rights, email contact@getparkflow.app or use our contact page; we will respond within the time required by applicable law (generally within 45 days). We will not discriminate against you for exercising your rights. Because much of the data in the Service is entered by a property manager about residents and visitors, we may direct certain requests to the relevant property, which controls that data.
10. California Privacy Rights
If you are a California resident, the CCPA/CPRA gives you the right to know the categories and specific pieces of personal information we collect, the sources, and the purposes; to request deletion or correction; and to opt out of the sale or sharing of personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising, so there is no need to opt out, but you may still exercise your other rights as described above. We will not discriminate against you for exercising these rights. The categories we collect are identifiers, contact and account information, vehicle and license-plate information, commercial/payment information, and internet/usage activity, as described in Section 2.
11. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us immediately and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a notice within the Service and update the effective date above. Continued use after changes take effect constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related questions or to exercise your rights, email contact@getparkflow.app or visit our contact page. You may also request the postal mailing address for BTech LLC by email.