Privacy Notice

This notice explains how BMEC Services LLC ("we", "us"), the provider of ParkUSA, handles personal data. We are the data controller for personal data processed through the Service.

Data we collect and why

• Account data (name, email, login credentials) — to create and run your account (contract).
• Reservation data (lot, times, vehicle/contact details, phone number if you opt in to SMS) — to provide reservations, confirmations and QR passes (contract; consent for SMS).
• Lot operator data (lot address, capacity, pricing, notification contacts, agreement details) — to list lots and send capacity alerts (contract).
• Search and location data (destination addresses you enter) — to show nearby parking and pricing (contract).
• Usage and device data (IP address, browser, device identifiers, logs) — for security, fraud prevention and improving the Service (legitimate interests).
• Support messages — to respond to your requests (legitimate interests).

We may also process data where required to meet a legal obligation.

Who we share data with

• Service providers who host and operate the Service (hosting, database, email and SMS delivery, mapping).
• Paddle, our Merchant of Record, for sales, subscription management, payments, tax compliance and invoicing.
• The lot operator for your reservation, limited to what they need to honour it.
• Professional advisers (legal, accounting).
• Authorities where required by law.

We do not sell your personal data.

Retention

We keep account data while your account is active and reservation records for as long as needed for accounting and legal purposes (generally up to 7 years). Data no longer needed is deleted or anonymised.

Your rights

Depending on where you live (including under US state privacy laws such as the CCPA, and GDPR if applicable), you may have the right to access, correct, delete or port your data, object to or restrict processing, withdraw consent, and complain to a supervisory authority. We respond within 30 days. To exercise your rights, contact us.

International transfers

Data is primarily processed in the United States. Where data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level data permissions.

Cookies

We use only essential cookies and local storage needed to keep you signed in and run the Service. We do not use advertising cookies. You can clear these through your browser settings, though some features may stop working.

Contact

BMEC Services LLC — see our contact page.