We take user privacy seriously. This Privacy Policy explains how ParkSmart Inc. ("ParkSmart," "Company," "us," "we," or "our") collects, uses, discloses, retains, and otherwise processes personal information relating to individuals who visit our websites, interact with our online services, contact us, use our products or applications, receive services at locations that use our technology, or otherwise engage with us as customers, end users, employees of customer organizations, business contacts, or licensees.

Scope and role

This Privacy Policy applies to personal information collected online and offline by ParkSmart in connection with our websites, hosted software, permit and validation tools, payment interfaces, support channels, and marketing activities.

In some circumstances, ParkSmart acts directly as the business or controller for personal information. In other circumstances, such as when ParkSmart provides services to a property owner, parking operator, or other client, ParkSmart may process personal information on behalf of that client under a contract. In those cases, the client may provide additional privacy notices that apply to the client's own handling of personal information.

How do we collect and use information?

We collect personal information from several sources. First, we collect information directly from you, for example when you visit our website, request information, create an account, pay for parking, register a permit, submit a form, sign up for updates, respond to a survey, or otherwise communicate with us. We also collect information automatically from your device or browser through cookies, SDKs, pixels, server logs, tags, and similar technologies when you interact with our websites, applications, or other online services.

In addition, we receive personal information from our customers, licensees, and business partners, including property owners, parking operators, employers, merchants, validation partners, landlords, and municipalities that authorize parking or provide information needed for us to administer services on their behalf. We may obtain information from service providers and other vendors, such as payment processors, hosting and infrastructure providers, analytics providers, communications vendors, identity verification providers, and fraud‑prevention services. We may also collect information from public sources and social media when you interact with our public pages or otherwise make information about yourself publicly available. Finally, we may receive personal information in connection with corporate transactions involving our business, such as mergers, acquisitions, reorganizations, or asset transfers.

We may collect, use, disclose, and otherwise process personal information for a variety of business and commercial purposes. These include providing parking, payment, permitting, validation, auditing, reporting, enforcement, software, and account management services, as well as operating, maintaining, securing, debugging, improving, and personalizing our websites, applications, platforms, and related services. We use personal information to create, authenticate, service, and administer accounts, permits, validations, transactions, and customer relationships, and to process payments, refunds, invoices, receipts, and related financial records.

We also process personal information to detect, investigate, prevent, and respond to fraud, abuse, security incidents, unauthorized access, and other unlawful or harmful activity. In the context of parking operations, we use information to monitor parking compliance, verify permits and validations, determine parking session duration, process notices or citations, support lot and facility management, and maintain accurate operational records. We may use your information to communicate with you about our services, transactions, support requests, updates, and other business related matters, including permitted marketing communications.

Personal information is further used to perform analytics, measure website and campaign performance, and understand how users interact with our services so that we can improve and develop our offerings. We may process personal information to comply with law, regulation, legal process, and law enforcement requests, to satisfy contractual obligations, and to support internal governance, risk, and compliance functions. We also use information to establish, exercise, or defend legal claims and to maintain records relevant to disputes, investigations, audits, and litigation holds. Finally, we may process personal information for other purposes that are disclosed to you at the time of collection or that you otherwise authorize or consent to.

We may use personal information to create aggregated or deidentified data for analytics, research, or other permitted purposes. When we maintain information in deidentified form, we commit to maintaining that information in deidentified form and will not attempt to reidentify it except as permitted by law.

Categories of personal information collected

Depending on how you interact with us, we collect different types of personal information. This may include identifiers and contact information, such as your name, email address, telephone number, mailing address, account username, customer number, employer‑provided identifier, and invoice number. It may also include vehicle and parking information, such as license plate numbers, vehicle details, parking permit data, parking stall numbers, parking session details, validation records, citations or notices, and parking locations. In connection with payments, we receive payment and transaction information, including billing details and payment status from our payment processors. When you use our websites or applications, we collect internet and network activity data, including IP address, device identifiers, and information about how you navigate our pages. In certain cases, we may receive geolocation data, audio, electronic, or visual information (such as support communications or license plate images), professional or employment‑related information, and inferences drawn from this data to help operate and improve our services.

Here is a chart outlining how we collect and use information and for what purposes.

Category of Data	Examples of Data	How We Collect It	Business / Commercial Purposes
Identifiers and contact information	Name, email address, telephone number, mailing address, account username, customer or employer ID This information may include data under Cal. Civ. Code §1798.80(e))	You provide this information when you contact us, create an account, register a permit, or pay for parking through our services	To provide and administer our services, communicate with you, manage accounts and permits, respond to inquiries, maintain records, and comply with legal and contractual obligations
Vehicle and parking information	License plate number, issuing state, vehicle description, parking stall number, parking session dates and times, permit or validation details, citation identifiers	You provide this information when you register a vehicle or permit or pay for parking; it may also be captured by license plate recognition (LPR/ALPR) technology at certain locations	To operate parking programs, verify permits and validations, determine parking duration and fees, monitor compliance, manage occupancy, support enforcement, handle disputes, and maintain operational audit logs
Payment and transaction information	Payment card details processed by our payment processor, billing address, amount paid, payment status, receipt information, and transaction history We use Stripe for processing payments. See Stripe's Privacy Policy at https://stripe.com/us/privacy	You provide payment details to our payment processor; we receive limited transaction information and references	To process payments and refunds, provide receipts, reconcile accounts, detect and respond to fraud, maintain financial records, and comply with tax, accounting, and other legal requirements
Internet or network activity data	IP address, device identifiers, browser type, operating system, cookie identifiers, pages viewed, referring URLs, clickstream data	Automatically collected through cookies, pixels, SDKs, server logs, and similar technologies when you visit our websites or applications	To operate and secure our websites and applications, debug and improve performance, understand use of our services, personalize certain content, and where permitted, support analytics and advertising activities
Geolocation data	Approximate location derived from IP address; more precise location where you enable location-based features	Derived from your device, your use of location-based features, or LPR/ALPR systems at participating locations	To display relevant parking locations, verify parking sessions, support enforcement, and maintain accurate operational records, subject to applicable law
Audio, electronic, or visual information	Customer support communications, images or video of parked vehicles or license plates, system logs	You provide it when you contact us, and it may be collected at locations that use LPR/ALPR or other technology	To provide support, investigate incidents, verify events, protect our services and users, and comply with legal, regulatory, and security obligations
Professional or employment-related information	Employer name, work email, role, parking authorization status, job application data	Provided by you or your employer, or submitted in job applications or vendor onboarding	To administer employer and property-managed parking programs, verify eligibility for certain parking products, and evaluate job or vendor applications
Inferences and aggregated/deidentified data	Preferences, usage patterns, occupancy trends, risk indicators derived from the information above	Derived by us or our service providers from other data we collect	To analyze and improve our services, develop new features, optimize operations, and generate insights, generally in aggregated or deidentified form where appropriate

When do we disclose information?

As part of our business, we disclose information as follows and for the purposes outlined above, which include business purposes to provide and improve the services we offer and comply with legal and contractual obligations, as well as commercial purposes in the limited circumstances outlined.

• Services providers, contractors, and processors that provide hosting, payment processing, cloud storage, customer support, identity verification, communications analytics, security, maintenance, auding, and related services.
• Customers, clients, property owners, operators, employers, merchants, and licensees that use our services to administer parking, permits, validations, authorizations, occupancy, and related operations.
• Parties involved in a corporate transaction such as a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets.
• Advertising, analytics, and technology partners involved in site analytics, campaign measurement, and advertising functions.
• Disclosure of Device Data. For information about our use of cookies and other technologies, see further below. Such disclosure is for business purposes, i.e., to provide the Services.
• Government entities, regulators, law enforcement, and parties to legal process when disclosure is reasonably necessary to comply with law or protect rights, safety, and property.
• Other parties with your direction or consent.

When required by law, ParkSmart enters into contracts with processors, contractors, or service providers that restrict their retention, use, and disclosure of personal information and require appropriate privacy and security measures.

How do we use cookies and similar technologies?

We and our partners may use cookies, pixels, tags, SDKs, web beacons, local storage, and similar technologies to collect information about your interactions with our websites, applications, and communications. These technologies help us operate our services, remember your preferences, understand how our sites are used, and, where applicable, support analytics, advertising, and security functions.

These technologies may be used for the following purposes:

• Strictly necessary: to operate the website, enable core functions, maintain security, complete transactions, and remember privacy choices.
• Functional: to remember preferences, settings, and user experience choices.
• Analytics: to understand website traffic, usage, performance, and engagement.
• Advertising and targeted advertising: to deliver and measure ads, limit repeated ads, and support more relevant marketing on our site and on other sites or services.

For example, ParkSmart uses Google Analytics to help analyze how users interact with our websites and applications. Google Analytics may collect information such as your IP address, device identifiers, browser information, pages visited, and interaction data, which is transmitted to and stored by Google and used to provide us with reports and insights about site usage. You can learn more about how Google collects and processes data by visiting Google's Privacy Policy at https://policies.google.com/privacy and Google's technologies overview at https://policies.google.com/technologies/partner-sites.

We may also use other third‑party tools that place their own cookies or similar technologies on our services. These providers have their own privacy policies, and we encourage you to review them to understand their data practices. Where required by law, we will disclose the key third‑party cookies and tools used on our site and provide links to their privacy information in our cookie or privacy notices.

You can manage cookies through your browser and device settings and, where available, through our cookie management tools. Blocking or deleting certain cookies may affect site functionality. Where required by law, ParkSmart will honor applicable opt‑out requests and consent preferences for cookies and similar technologies used for advertising, sale, sharing, or targeted advertising, and will respect valid opt‑out preference signals to the extent required by applicable law. For more information and ways to opt out, see https://www.allaboutcookies.org/, and learn how more or opt-out of third-party cookies and mobile device ID practices.

Do we sell or share information?

We do not sell personal information for money. However, some disclosures involving advertising, analytics, cookies, pixels, software development kits, or similar technologies may be considered a "sale," "sharing," or "targeted advertising" under certain state privacy laws, depending on the facts and the law that applies.

Accordingly, where required by law, ParkSmart provides consumers the right to opt out of:

• the sale of personal information;
• the sharing of personal information for cross-context behavioral advertising; and
• the processing of personal data for targeted advertising.

ParkSmart also processes opt-out preference signals where required by applicable law and where the signal can be recognized as a valid request for that browser or device. For more information or to make a privacy request, please contact us.

License plate recognition and parking operations data

Purpose: In certain circumstances/locations, we may use LPR or ALPR technology (i.e., a visible camera on a vehicle), through our service provider, to capture license plate data for the Services, namely to register for a parking permit, pay for parking, validate paid and permitted license plates, and determine accurate parking fees. This purpose of this provision is to ensure respect for individuals' privacy and civil liberties.

Data Collection/Use: In these circumstances, the following data may be collected (but not necessarily accessed): vehicle license plate image, number, and state; and date, time, and location. We may use this data to identify abandoned vehicles, identify open parking spaces, permit gate entry/exit if applicable, respond to legitimate inquiries from law enforcement or court orders or legal process, or issue fees or notices. For example, data can be used to assess parking time limits.

Authorization: ALPR data is not available to employees for personal use. We use an independent third-party service provider, who collects and stores the data. Our authorized users include employees and contractors (if applicable) with an operational need to have access, i.e., the President and Vice President, Office Manager, Operations Manager, and Product Development, as well as parking supervisors, auditors, and IT staff if applicable. These individuals will be required to comply with the following training requirements: review of applicable legal requirements, review proper use of and access to the system, and review of escalation procedures as applicable.

Monitoring: The ALPR system will be monitored by the President and Vice President, or their designee(s), to ensure the security and accuracy of the information and compliance with applicable privacy laws, including by correcting any errors made known to them and to ensure that only authorized personnel with a legitimate business need be granted access. ALPR system audits shall be conducted on a regular basis. Logins and queries are stored and include the username, date, time, purpose, and query criteria. Data is stored for a legitimate purpose, as outlined to users and above. We will commit to monitoring and auditing the collection, access, and storage procedures.

Transfer of Data: The sale and unauthorized sharing or transfer of ALPR information is prohibited by Company policy. Violations will include disciplinary action up to and including termination. The process for sharing or transfer of ALPR information shall include at least a written request with the name of the requestor, the intended purpose of obtaining the information, and the lawful basis or other legal authorization for obtaining the information; the request shall be reviewed by the person authorized for monitoring the ALPR system or designee, with any approved request and contact information for the requestor retained on file in access logs. We take steps to ensure that ALPR data will not be sold or disclosed for commercial marketing or promotional purposes, disclosed without authorization, or disseminated to those not authorized. Subject to and as required by applicable laws, we may provide ALPR data to law enforcement or a governmental agency upon legitimate inquiry such as with a warrant, or with valid court order or legal process.

System: ParkSmart is the owner of ALPR equipment. ALPR data is stored in the databases of our service provider, Route1/Genetec. Some data may be processed by us if applicable, such as if data is necessary to process a transaction for our Services, and may be combined with other data. For information about Route1/Genetec's privacy practices, please visit their privacy policies.

Security: We and our service provider use administrative, operational, technical and physical safeguards to protect ALPR data from unauthorized access, use, destruction, and disclosure. For example, we use password-protected access to ALPR data. In addition, the database usage shall be monitored and audited. Operational measures include training authorized users on proper use and secure practices of ALPR data. Physical controls include having network equipment and servers containing ALPR data being maintained and accessed only by authorized personnel. Technical measures include encryption where applicable and necessary updates/patches. If a data breach occurs, proper data breach notifications will be made in accordance with applicable law.

Retention: ALPR data will be retained or stored as necessary based on the parking facility location for the collection purposes and uses. Specifically, license plate information and images collected using the ALPR system will remain on file for a period of ___ days, unless otherwise authorized or required by applicable laws, such as if there is a court order or legitimate law enforcement or legal process request requiring a longer period. Parking facilities may set specific ALPR retention policies upon written request and subject to applicable laws. For information about how third parties, including our service provider, retain ALPR records, please refer to their privacy policies.

How do we protect and transfer information?

Consistent with others in our industry, we take efforts to employ security measures for personal information, taking into account reasonable security procedures and accessible technology. These data protection measures include engagement of a cybersecurity vendor and cybersecurity audit, access and operational controls on an as-needed basis, and review of our processes. However, no system can be completely secure; and we cannot promise, and you should not expect, that your personal information will always remain secure. Your provision of personal information and use of parking facilities is at your own risk. The safety and security of your information also depends on you. Take steps to safeguard your passwords and other data and notify us as soon as possible if you believe your account security or related information or device has been breached.

If you are visiting the services from a location outside of the United States, your connection will be through and to servers located in the United States. By using the services, you consent to the transfer of personal data to the United States and its storage and use as specified herein.

How long do we retain information?

We retain personal information for the length of time necessary to fulfill the purposes outlined in this Privacy Policy, unless a different retention period is requested by you or required or permitted by law. For example, we will retain your personal information for as long as it is needed to provide you with the Services or fulfill a legal or contractual obligation. We may also aggregate, deidentify, or anonymize personal information as applicable for use in analytics.

We use the following criteria to determine how long we retain personal information: (a) our relationship with you, such as if there is an open contract or account or a pending transaction or request; (b) legal obligations to retain personal information for certain purposes, such as to maintain transaction records; and (c) other obligations or considerations relating to the retention of data, such as contract requirements, litigation holds, investigations, or statutes of limitation. For more information about our retention policy for ALPR data specifically, please see above.

What are your privacy rights?

Even though some privacy laws may not formally apply to our business, we take your privacy seriously and aim to give you meaningful choices about how your personal information is used and shared. If you would like to submit a privacy request or have questions about this Privacy Policy, please contact us using the information below and include your name and the email address or other identifier you use with our services so that we can verify and process your request.

You can make a privacy request to us directly or through your authorized agent; if an authorized agent is making a request on your behalf, the agent should provide their name and contact information, such as an email address, in addition to your information. There may be situations where we cannot grant your request; for example, if you make a request and we cannot verify your identity, or if you request deletion of data that we have a legal obligation to keep. Where we deny your request, we will take steps to inform you of the denial and provide an explanation of our actions and the reasons for the denial.

Applicable privacy laws have different requirements and depend on various factors, such as where you live and the data at issue. If applicable, the following privacy rights may apply to you.

• Access. You can access and obtain your data and ask us for certain information, including: the categories of personal information collected and used; the categories of the sources of data; the business or commercial purposes for collecting, selling, or sharing data if applicable; the categories of third parties to whom data is disclosed; and the specific pieces of personal information collected. You also have a similar right to data portability.
• Amend. You can amend, correct, or rectify your data if it is inaccurate.
• Delete. You can have your data deleted subject to certain legal limitations.
• Limit. You can limit the processing of your data, in particular any sensitive data, and limit use of automated decision making, such as profiling if applicable.
• Opt-Out. You have the right to opt-out of certain data practices. For example, you can unsubscribe from marketing communications (if any) by following the opt-out instructions in each message or by contacting us. You may also opt out of certain practices if applicable.
• Complaints. You have the right to make certain complaints, including for privacy concerns. We value your feedback and seek the opportunity to work with you on any issues. You have the right to no discrimination for asserting your privacy rights.
• Specific Laws. A number of U.S. states have their own privacy laws, and those laws may give you additional rights depending on where you live and how we interact with you. For example, if you are a California resident, you may have rights under California law, including the California Consumer Privacy Act (CCPA), and, under California's "Shine the Light" law, you may request information about certain types of personal information we share with third parties for their own direct marketing purposes, if any. Residents of other states or countries may have additional rights under local law, such as rights to access, correct, update, erase, or restrict certain processing of their personal information. This Privacy Policy is intended to describe, in one place, the categories of personal information we collect, the sources of that information, the purposes for which we use it, and the types of third parties with whom we disclose it so that it aligns with these requirements. When we collect and use personal information, we do so as needed to provide our services, to perform our contracts with you or with our customers, with your consent where required, and to pursue our legitimate business interests in ways that are consistent with applicable privacy laws and your rights.

Do we collect information about children?

ParkSmart's websites and consumer-facing online services are not directed to children under 13, and ParkSmart does not knowingly collect personal information online from children under 13 without the consent required by applicable law.

If ParkSmart learns that it has collected personal information online from a child under 13 in a manner not permitted by law, ParkSmart will take appropriate steps to delete that information. Our privacy practices are designed to fall outside of or otherwise comply with the Children's Online Privacy Protection Act (COPPA) and related laws.

How do we use or disclose sensitive information?

We treat sensitive personal information with extra care and only use or share it when it is reasonably necessary to provide and support the services you ask for, keep our services safe and reliable, prevent fraud or illegal activity, or protect people's physical safety. When the law requires us to get your permission before using sensitive personal information, we will do so in a clear, appropriate way, and we will not use this type of information to build a detailed profile about you or to infer new characteristics about you beyond these limited purposes.

Marketing communications

You may opt out of receiving promotional emails from ParkSmart by using the unsubscribe link in the email or by contacting us. Even if you opt out of promotional communications, ParkSmart may still send you transactional or relationship messages, such as receipts, support responses, service notices, security alerts, or legally required notices.

Do Not Track (DNT) and Global Privacy Control (GPC) signals

Some browsers offer a "Do Not Track" ("DNT") setting that sends a signal to websites that you do not want to be tracked. Because there is no common agreement on how to interpret DNT signals, our sites do not respond to DNT signals alone. You can still manage cookies and similar technologies using your browser settings and the options described in this Privacy Policy.

Some browsers and extensions support opt‑out preference signals, such as Global Privacy Control ("GPC"), that indicate you want to opt out of certain data uses, including "sale," "sharing," or "targeted advertising" under some state laws. When we recognize a valid opt‑out signal from your browser or device and applicable law requires it, we treat that signal as a request to opt out of those activities for that browser or device. You can also use the opt‑out links, cookie or privacy settings, and contact methods we provide to apply your choices more broadly.

External sites and services

Our websites and services may contain links to websites, applications, payment pages, integrations, or services operated by third parties. This Privacy Policy does not apply to third parties' independent privacy practices, and ParkSmart encourages you to review their privacy notices.

Change to this Privacy Policy

We will update this Privacy Policy when our privacy practices or laws change or as otherwise required or permitted by applicable law. Each time you use the services, the current version of this Privacy Policy will apply. Unless we receive your express consent, any materially revised Privacy Policy will apply only to information collected after the effective date of the revised Privacy Policy. You should review any updates. If you do not consent, you should cease using the services.

How can you contact us?

Please contact us with any questions or concerns! We can be reached at: info@parksmartinc.com.

ParkSmart, Inc.
1630 North Main Street #372
Walnut Creek, CA 94596

Last Updated: April 9, 2026