1. Who We Are

Parkly ("we", "our", "us") operates the Parkly website at parkly.co.in and the Parkly mobile apps (collectively, the "Platform") — a parking discovery service and QR vehicle alert service built for Indian cities. Parkly connects drivers with parking space owners but does not process parking rental payments between them.

2. Information We Collect

Account information

• Name, email address, and phone number when you register
• Hashed password (we never store your plain-text password)

Vehicle and QR data

• Vehicle registration number, type, make, and model when you purchase a QR sticker
• WhatsApp number if provided for QR alert delivery
• Shipping address (address line, city, state, pincode) used only to deliver the physical QR sticker

Parking listings

• Address, contact phone, rates, and amenities you provide when listing a space

Usage and transaction data

• Parking unlocks, platform pass purchases, and QR sticker purchases
• Alert events sent to your vehicle's QR code (alert type, timestamp; sender is anonymous)

Technical data

• IP address (used only for rate limiting and security purposes)
• Standard server logs (request paths, response codes)
• Authentication token stored in your browser's localStorage (web) or the app's secure storage (mobile) — used only to keep you signed in

Mobile app permissions

• Location — used only to show parking spaces near you. Requested in-app; you can deny or revoke it at any time in your device settings. We do not store continuous location history.
• Camera — used only to scan QR alert stickers. Image frames are processed on your device; we do not upload or retain them.
• Push notifications — used to deliver QR alerts, account activity, and important service messages. You can disable them at any time in your device settings.

3. How We Use Your Information

• To provide the parking discovery and QR alert services
• To deliver QR alerts to your registered messaging number (e.g. WhatsApp) or via push notifications when your vehicle is scanned
• To process payments via Razorpay
• To send OTP verification messages
• To prevent abuse and enforce rate limits
• To improve the platform based on aggregate usage patterns

We do not sell your personal data to third parties.

4. Information Shared With Third Parties

• Razorpay — payment processing. Subject to Razorpay's Privacy Policy.
• Mappls (CE Info Systems Pvt Ltd) — geocoding and place search for parking discovery. Your approximate coordinates and search query are transmitted only when you actively search; we do not maintain a search history.
• Google Sign-In (Google LLC) — optional one-tap sign-in. If you choose Google, your name and email address are shared with us per Google's consent screen. Subject to Google's Privacy Policy.
• Messaging and verification providers — to deliver QR alerts, one-time passwords (OTPs), and transactional messages you have opted into, your phone number or email address is shared with our communication providers — including the WhatsApp Business Cloud API (Meta) and our SMS and email delivery providers — solely to send those messages.
• Infrastructure and operational providers — we rely on reputable third-party providers for cloud hosting, database and file storage, content delivery and security, push-notification routing, error monitoring, and product analytics. These providers process data only to operate, secure, and improve the Platform on our behalf, under contractual confidentiality and data-protection obligations. For analytics and error monitoring, only minimal or pseudonymous identifiers are used.

When a user unlocks a parking space, their purchase is recorded. The parking owner's contact details are revealed to the purchasing user as the service they paid for. We do not sell your personal data to any third party.

Some of these providers may store or process data on servers located outside India. Where this occurs, such transfers are carried out in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023, and only with providers bound by appropriate data-protection obligations.

5. QR Alert Anonymity

When someone scans your vehicle QR code and sends an alert, their identity is not collected or stored. Alerts are anonymous by design. Only the alert type, a freeform note, and timestamp are recorded.

6. Data Retention

• Account data is retained while your account is active
• QR alert links are active for 5 years from sticker activation; after expiry the link no longer functions, and the associated vehicle data is retained only as needed for the historical and legal/financial record
• Emergency alerts are retained for 90 days; other alerts for 30 days, then deleted automatically
• Payment records are retained as required by law

7. Your Rights (Digital Personal Data Protection Act, 2023)

As a Data Principal, you have the right to:

• Access a summary of the personal data we process about you and the purposes of processing
• Correct, complete, or update inaccurate or incomplete personal data
• Request erasure of your personal data, subject to legal retention requirements
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
• Withdraw consent at any time for processing that relies on your consent
• Raise a grievance about our handling of your data (see §11)

To exercise any right, email us at support@parkly.co.in. We will acknowledge your request within 72 hours and act on it within 15 days. Deletion of your account removes your profile, vehicles, and QR stickers; payment records required for legal or tax compliance are retained for the period mandated by Indian law.

8. How to Delete Your Account and Data

You can permanently delete your Parkly account and associated personal data at any time, free of charge. You do not need to contact us first — deletion is self-serve.

From the Parkly app or website (self-serve)

• Open Profile → Settings → Delete Account
• Confirm by typing DELETE and entering the one-time password (OTP) we send to your registered phone or email
• Your account is closed immediately upon confirmation

By email

If you cannot access the app, email support@parkly.co.in from your registered email address (or quoting your registered phone number) with the subject line "Delete my account". We verify your identity and complete the deletion within 7 days.

What is deleted

• Your name, email address, phone number, and password
• Your vehicles and their registration numbers
• Your QR stickers are permanently retired — a retired sticker can no longer send alerts, and re-registering the same vehicle later requires a new sticker
• Your parking listings are removed from search
• Your push-notification token and Google Sign-In link

What is retained, and for how long

• Payment and tax records, which Indian tax and accounting law requires us to keep, are retained for the statutory period and then erased. These records are used only for legal and accounting compliance and for no other purpose.
• A minimal record (such as a partial phone number) is kept solely as proof of deletion in our audit log.

After the legal retention period passes, any remaining records are permanently scrubbed of personal identifiers.

9. Security

We protect your data with industry-standard safeguards, including encryption in transit (HTTPS), hashing of passwords and sensitive tokens, short-lived sign-in sessions, and access controls with rate limiting on sensitive operations. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

10. Children

Parkly is not intended for users under 18. We do not knowingly collect data from minors.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 (and its rules) and the Digital Personal Data Protection Act, 2023, the Grievance Officer for Parkly is:

Ekansh Bansal
Email: legal@parkly.co.in

Write to the Grievance Officer with the subject line "Grievance" for any complaint relating to the Platform or to the processing of your personal data. Acknowledgement is provided within 24 hours of receipt, and grievances are resolved within 15 days.

12. Changes to This Policy

We may update this policy. Continued use of the platform after changes constitutes acceptance. Material changes will be communicated via email where possible.