Privacy Policy

This Privacy Policy explains how ParkDwell, Inc. (“ParkDwell,” “we,” “us”) handles personal information in connection with our parking management platform (the “Service”).

1. Two different roles — please read this first

ParkDwell acts in two distinct capacities, and your rights differ depending on which applies:

• As a controller, for information about the property operators and staff who hold ParkDwell accounts — account details, billing, and support history. We decide how that information is used.
• As a processor (service provider), for information about residents, guests, and parkers that a property enters into or generates through the Service. The property management company is the controller of that data; we process it on their documented instructions under our Data Processing Addendum.

If you are a resident or guest and want your data corrected or deleted, contact your property manager first. We will assist them, but we generally cannot act on their data without instruction. Sections 7 and 8 explain the exceptions.

2. Information we collect

Information you or your property provides

• Account and contact details — name, email address, phone number, role, and the property or unit you are associated with.
• Vehicle details — licence plate number and issuing state/region, and optionally make, model, and colour.
• Parking records — permits, spot assignments, reservations, guest passes, and waitlist entries.
• Payment information — processed by Stripe. We store a payment method reference, brand, last four digits, and expiry so you can recognise a saved card. We never receive or store full card numbers.

Information generated by using the Service

• Enforcement records — where a property runs enforcement: photographs of vehicles and their surroundings taken by patrol staff, licence plates read from those photographs, citation notices, and any appeal you submit.
• Access events — a log of gate open requests, including who requested them and whether they succeeded.
• Audit and security logs — a record of privileged actions, including the acting account, IP address, and browser user agent.
• Technical data — timestamps, error reports, and diagnostic information.

Information from connected systems

Where a property connects a property-management system, we may receive resident roster and lease-term records to keep parking records current.

3. How we use information

• Operate the Service — issue permits, assign spots, run waitlists, process bookings.
• Process payments and produce financial records, including payouts to properties.
• Send transactional messages — sign-in links, receipts, guest passes, payment reminders, parking notices, and property announcements.
• Operate enforcement on behalf of a property, where that property has enabled it.
• Maintain security, prevent fraud and abuse, and investigate incidents.
• Meet legal, tax, and accounting obligations.
• Improve the Service using aggregated or de-identified data. We do not sell personal information, and we do not use resident data to train third-party advertising models.

4. Legal bases (EEA/UK)

Where GDPR applies, we rely on: performance of a contract (providing the Service); legitimate interests (security, fraud prevention, service improvement); legal obligation (tax and accounting records); and consent, where required — for example SMS messaging, which we send only to people who have affirmatively opted in.

5. Who we share information with

We share information with the following categories of recipients:

• Your property — staff at the property you are associated with can see the parking records relating to you. Access is scoped by role.
• Subprocessors that provide infrastructure on our behalf. Our current list is published at parkdwell.com/subprocessors and includes providers for hosting, database and authentication, payments, email, SMS, licence-plate recognition, and error monitoring.
• Towing vendors, where a property dispatches a tow — limited to the vehicle and location details needed to perform it.
• Authorities or third parties, where required by law, or to establish or defend legal claims.
• An acquirer, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are defined under California law.

6. How long we keep information

• Account and parking records — for as long as your property maintains an account, and then per the deletion terms of our DPA.
• Financial records (charges, refunds, ledger entries) — retained for the period required by tax and accounting law, typically seven years, even after an account closes. This means a deletion request will not remove a payment record.
• Enforcement photographs and citations — per the property’s configured retention, and for as long as needed to resolve any dispute or appeal.
• Security and audit logs — retained on a rolling basis for security investigation.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to be free from discrimination for exercising these rights.

To exercise them: residents and guests should contact their property manager, who can act through their ParkDwell console. Operators can export their organisation’s data at any time from the admin console, and residents can export their own data from their account profile. You may also email us at privacy@parkdwell.com and we will route your request appropriately.

We will not discriminate against you for exercising these rights. If you are in the EEA or UK you also have the right to complain to your supervisory authority.

8. Security

We encrypt data in transit and at rest. Access to tenant data is enforced at the database layer, so records belonging to one property are not readable by another. Privileged actions are recorded in an audit log. Payment card data is handled by Stripe and never transits our servers. No system is perfectly secure, and we cannot guarantee absolute security.

9. International transfers

We and our subprocessors are located in the United States, and information is processed there. Where we transfer personal data out of the EEA or UK we rely on Standard Contractual Clauses, incorporated in our DPA.

10. Children

The Service is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

11. Changes

We may update this Policy. If we make a material change we will update the effective date above and, where the change significantly affects you, notify you through the Service or by email.

12. Contact

Questions about this Policy or our handling of personal information: privacy@parkdwell.com.

Questions? Email legal@parkdwell.com.