ParkAgent Privacy Policy

Version 1.0

This Privacy Policy explains how Vacation Rental Property Solutions, Inc. ("VRPS," "we," "us," or "our") collects, uses, discloses, retains, and protects Personal Information when individuals access or use the ParkAgent platform and related websites, mobile experiences, administrative portals, payment workflows, parking-authorization services, vehicle-registration tools, communications, integrations, APIs, and support services (collectively, the "Services"). This Policy applies only to ParkAgent. It does not describe the practices of any other VRPS product or any Customer, property owner, association, parking operator, rental manager, security provider, or third party that maintains a separate privacy notice.

PLEASE READ THIS POLICY CAREFULLY. By using the Services, you acknowledge the practices described in this Policy. Where consent is required by Applicable Law, we will request it separately and will not treat this Policy alone as consent. This Policy should be read together with the VRPS Platform Terms of Use, which govern your use of the Services and incorporate this Policy by reference.

Article 1: Scope, Roles, and Key Concepts

1.1 Scope of this Policy

This Policy applies when VRPS determines the purposes and means of processing Personal Information through ParkAgent and when VRPS processes Personal Information on behalf of a Customer. The role VRPS performs can vary by workflow, contract, and applicable law. For example, VRPS may act as a service provider or processor when handling parking-program data under a Customer's instructions, and may act as an independent business or controller for account security, billing administration, fraud prevention, legal compliance, and operation of our own websites and support channels.

1.2 Customers and Participating Properties

ParkAgent is commonly deployed for a property owner, condominium or homeowners' association, rental manager, municipality, commercial lot operator, or another organization (each, a "Customer"). Customers establish many of the parking rules and operational purposes for which ParkAgent is used. A Customer may collect Personal Information independently, provide information to us, direct us to process information, or receive information from ParkAgent. The Customer's own privacy notice may also apply.

1.3 No Application to Separate Products

This Policy is intentionally product-specific. It governs ParkAgent only. A separate product, website, or service may be governed by a different privacy policy even if offered by VRPS or accessed by the same organization.

1.4 Personal Information

"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It does not include information excluded from the definition under Applicable Law, such as properly deidentified or aggregated information.

1.5 Our Privacy Principles

ParkAgent is designed around data minimization, purpose limitation, role-based access, documented retention, reasonable security safeguards, and accountability. We seek to collect only information reasonably needed to administer parking, complete transactions, communicate with users, support Customers, protect the Services, and comply with law.

Article 2: Information We Collect

2.1 Information You Provide Directly

Depending on how you use ParkAgent, you may provide:

• name, email address, mobile telephone number, mailing address, or other contact details;
• account credentials, authentication information, and communication preferences;
• vehicle details, including license plate number, state or jurisdiction, make, model, color, vehicle type, and identifying notes;
• reservation, stay, unit, owner, tenant, resident, visitor, vendor, claim-code, permit, or access information;
• parking selections, requested dates and times, permit quantities, pricing acknowledgments, and transaction details;
• support requests, dispute information, proof of payment, photographs, documents, and correspondence;
• information submitted through Customer, owner, rental-manager, security, patrol, or administrative workflows; and
• any other information you choose to submit through the Services.

2.2 Information We Receive from Customers and Integrations

We may receive information from Customers and systems they authorize, including property-management systems, reservation systems, access-control systems, owner or resident records, enforcement providers, security teams, LPR systems, payment providers, and other integrations. This may include reservation dates, unit identifiers, guest or owner names, contact information, parking entitlements, vehicle limits, permit status, and rule-eligibility information.

2.3 Transaction and Payment Information

When parking or another paid service is purchased, we collect transaction details such as amount, currency, property, dates, tax, fees, refund status, payment status, processor transaction identifiers, and limited payment metadata. Payment-card information is generally collected and processed directly by an independent payment processor. VRPS does not intend to store full payment-card numbers or card-verification codes in ParkAgent. For parking Transactions processed through the Services, VRPS acts as the merchant of record and collects, holds, and remits the applicable amounts and Taxes before disbursement to the Customer or another disclosed beneficiary; the transaction details and payment metadata described above are processed in connection with that role.

2.4 Device, Log, and Usage Information

We and our providers may automatically collect IP address, device type, operating system, browser type, application version, language, timestamps, referral information, pages or screens viewed, links selected, session activity, error logs, API activity, authentication events, feature usage, and diagnostic or performance information.

2.5 Location and Property Context

ParkAgent may process a property's address, parking-zone location, lot or space identifiers, entry and exit points, and other location context needed to administer parking. The Services may also infer approximate location from IP address. ParkAgent does not intend to collect continuous precise device geolocation unless a specific feature clearly requests it and any legally required permission is obtained.

2.6 License Plate Recognition Information

Where a Customer enables LPR, ParkAgent may receive or process license plate characters, plate jurisdiction, date and time of capture, camera or location identifier, confidence score, vehicle image or cropped plate image, direction of travel, match status, and associated permit or authorization information. The exact data depends on the LPR provider, Customer configuration, and operational purpose.

2.7 Communications Information

When we send or receive SMS messages, emails, push notifications, or support communications, we may process the destination address or telephone number, message content, delivery status, timestamps, consent or opt-out records, and related carrier or provider metadata.

2.8 Cookies and Similar Technologies

Our websites and web-based Services may use cookies, local storage, software development kits, pixels, and similar technologies to maintain sessions, remember preferences, support security, understand use, and improve performance. A separate Cookie Notice or in-product consent tool may provide additional detail where required.

2.9 Information We Create or Infer

We may generate status records, risk indicators, duplicate-detection signals, audit events, eligibility results, permit matches, exception flags, operational analytics, and other inferences derived from information processed through ParkAgent. We do not use ParkAgent data to make decisions producing legal or similarly significant effects on individuals unless specifically disclosed and permitted by law.

Article 3: How We Use Personal Information

3.1 Provide and Operate ParkAgent

We use Personal Information to create accounts; validate reservations, owners, residents, visitors, vendors, and vehicles; issue and manage parking authorizations; process payments and refunds; maintain whitelists; provide portals and patrol tools; facilitate support; and deliver requested functionality.

3.2 Administer Customer Parking Programs

We process information to apply Customer-configured eligibility criteria, vehicle limits, permit rules, parking inventory, dates, pricing, and operational instructions. Customers remain responsible for the legality and substance of their rules and instructions.

3.3 Communicate with Users

We use contact information to deliver confirmations, receipts, registration links, parking instructions, alerts, service notices, security messages, support responses, policy updates, and other transactional or operational communications. Marketing communications, if any, will be handled under applicable consent and opt-out requirements.

3.4 Payments, Accounting, and Taxes

We use transaction information to authorize and reconcile payments, calculate or apply taxes and fees, issue refunds, manage disputes and chargebacks, prevent duplicate transactions, prepare financial records, and comply with accounting and tax obligations.

3.5 Security, Fraud Prevention, and Abuse Detection

We use information to authenticate users, manage permissions, log sensitive administrative activity, detect suspicious transactions, investigate misuse, prevent unauthorized access, maintain backups, respond to incidents, and protect users, Customers, VRPS, and third parties.

3.6 Support, Quality, and Product Improvement

We use support records, diagnostics, and usage information to troubleshoot issues, monitor reliability, test changes, improve user experience, plan capacity, train authorized personnel, and develop or evaluate ParkAgent features. Wherever reasonably practicable, we use aggregated or deidentified information for analytics and development.

3.7 Legal and Corporate Purposes

We may use information to comply with law, respond to valid legal process, enforce agreements, establish or defend legal claims, cooperate with regulators, complete audits, conduct due diligence, manage insurance matters, and support a merger, financing, reorganization, sale, or other corporate transaction.

3.8 Other Disclosed Purposes

We may use information for another purpose disclosed at the time of collection or with consent where required.

Article 4: Legal Bases and Processing Instructions

4.1 United States Operations

For U.S. users, ParkAgent processes Personal Information as reasonably necessary to provide requested services, perform contracts, comply with legal obligations, protect legitimate interests, and carry out purposes disclosed in this Policy. Certain state laws may provide additional rights described in Article 14.

4.2 Where Consent Is Required

We rely on consent where Applicable Law requires it, including for certain communications, cookies, sensitive data, or new uses materially different from those originally disclosed. Consent may be withdrawn as permitted by law, but withdrawal does not affect prior lawful processing and may prevent us from providing a requested feature.

4.3 Customer Instructions

When VRPS acts as a processor or service provider, we process Personal Information under the applicable Customer agreement and documented Customer instructions, subject to obligations we independently must satisfy under law. Requests concerning Customer-controlled data may be directed to the Customer for verification or response.

Article 5: How We Disclose Personal Information

5.1 Customers and Authorized Users

We disclose information to the Customer associated with the applicable Property and to administrative, rental-management, owner, security, patrol, enforcement, accounting, or support users authorized by that Customer. Access is intended to be limited by role, property, workflow, and legitimate operational need.

5.2 Service Providers and Processors

We disclose information to vendors that host infrastructure, process payments, deliver SMS or email, provide customer support, monitor security, store backups, provide analytics, support LPR, maintain integrations, or otherwise help operate ParkAgent. These providers are expected to process information under contractual and security obligations appropriate to their role.

5.3 Parking, Security, and Enforcement Providers

Where authorized by the Customer, ParkAgent may disclose permit status, vehicle information, LPR matches, rule status, and related records to security, patrol, booting, towing, or enforcement providers for parking administration. VRPS does not independently authorize enforcement merely by disclosing system status.

5.4 Payment and Financial Providers

We disclose transaction and limited identifying information to payment processors, banks, card networks, fraud-prevention providers, accounting providers, and tax services as needed to complete and administer transactions.

5.5 Legal, Safety, and Compliance Disclosures

We may disclose information when we reasonably believe disclosure is required by law or legal process; necessary to protect rights, safety, property, or security; needed to investigate fraud or abuse; or appropriate to respond to an emergency. We evaluate requests for data and may require appropriate legal process.

5.6 Corporate Transactions

Information may be disclosed in connection with financing, due diligence, merger, acquisition, restructuring, bankruptcy, sale of assets, or a similar transaction, subject to customary confidentiality safeguards where appropriate.

5.7 At Your Direction

We disclose information when you request or direct us to do so, or when you use a feature designed to transmit information to a third party.

5.8 Aggregated and Deidentified Information

We may disclose information that has been aggregated or deidentified so that it cannot reasonably identify an individual, and we will not attempt to reidentify such information except as permitted by law, including to test our deidentification processes.

5.9 No Sale for Money

VRPS does not intend to sell Personal Information for monetary consideration. Some privacy laws define "sale" or "sharing" more broadly. ParkAgent is not designed to disclose Personal Information for cross-context behavioral advertising. If our practices materially change, we will update this Policy and provide legally required choices.

Article 6: LPR and Vehicle Data

6.1 Purpose Limitation

LPR and vehicle information is processed to validate parking authorization, assist Customer-authorized parking administration, identify potential exceptions or violations, investigate disputes, maintain system integrity, and support safety or legal obligations. It is not intended for generalized tracking of individuals.

6.2 Accuracy and Human Review

LPR technology can misread plates or produce incomplete results because of lighting, weather, plate condition, angle, obstruction, jurisdictional formats, or other factors. A confidence score or system match is not a guarantee of accuracy. Customers and enforcement providers should use appropriate review and escalation procedures before taking material enforcement action.

6.3 LPR Images and Good-Scan Controls

Where supported, ParkAgent may be configured to retain only captures meeting defined quality or confidence criteria, deduplicate repeated images, or transmit only approved matches to an authorization list.

6.4 Retention

LPR images are deleted 90 days after capture. Other LPR records, including plate reads and match records, are retained according to the ParkAgent Data Retention Policy, Customer configuration, contractual obligations, and Applicable Law. A longer period may apply to any LPR record where required for a documented dispute, investigation, legal hold, contractual requirement, or law.

6.5 Law-Enforcement Requests

VRPS does not provide routine direct access to LPR data for law-enforcement purposes. We may disclose responsive records when required by valid legal process or in a legally recognized emergency, subject to applicable restrictions and contractual obligations.

Article 7: SMS, Email, and Other Communications

7.1 Transactional Communications

We may send messages needed to provide ParkAgent, including registration links, one-time codes, parking confirmations, receipts, support updates, expiration reminders, security notices, and changes affecting an active parking session or account.

7.2 SMS Consent and Opt-Out

Where required, ParkAgent will present SMS consent language before enrollment. Message frequency varies. Message and data rates may apply. Users may reply STOP to supported messages to opt out and HELP for assistance. Opting out of SMS may limit our ability to provide features that depend on text messaging, but it will not be treated as withdrawal from unrelated communications where another lawful channel is available.

7.3 Carrier and Provider Data

SMS and email delivery may involve telecommunications carriers and messaging providers that process telephone numbers, message content, routing data, delivery status, and abuse-prevention information under their own terms and privacy practices.

7.4 Marketing

ParkAgent is primarily designed for transactional and operational communications. If VRPS or a Customer uses ParkAgent for marketing, the sender is responsible for satisfying applicable notice, consent, identification, and opt-out requirements. VRPS may impose platform rules restricting marketing use.

Article 8: Cookies, Analytics, and Online Tracking

8.1 Essential Technologies

We use technologies necessary for authentication, security, session management, payment workflow, user preferences, and core functionality. Disabling them may prevent portions of ParkAgent from working.

8.2 Analytics and Performance

We may use analytics and performance tools to understand feature usage, diagnose errors, measure availability, and improve the Services. We seek to configure these tools consistently with data minimization and applicable consent requirements.

8.3 Advertising Technologies

ParkAgent is not intended to use Personal Information for cross-context behavioral advertising. The public marketing website may use limited marketing or attribution technologies only as disclosed in the applicable cookie interface or notice.

8.4 Browser and Universal Opt-Out Signals

Where required by Applicable Law and technically supported, we will recognize valid universal opt-out preference signals for processing subject to those signals. Because ParkAgent is not designed to sell Personal Information or use it for targeted advertising, such signals may have limited application to core service data.

Article 9: Data Retention and Deletion

9.1 Retention Principles

We retain Personal Information only for as long as reasonably necessary for the purposes described in this Policy, including to provide ParkAgent, complete transactions, support Customers, protect security, resolve disputes, enforce agreements, satisfy legal obligations, and maintain appropriate business records. Retention is based on data type, sensitivity, operational need, legal requirements, Customer instructions, and risk.

9.2 Indicative Retention Framework

The following is an intended framework subject to engineering validation and the controlling Data Retention Policy:

9.3 Deletion, Anonymization, and Financial Records

When deletion is appropriate, we may delete, aggregate, or deidentify information. Where financial, tax, audit, fraud, or transaction records must be retained, we may remove or tokenize unnecessary direct identifiers while retaining the minimum record needed for legal and business purposes.

9.4 Backups and Legal Holds

Information deleted from active systems may remain temporarily in encrypted or access-restricted backups until overwritten under the backup lifecycle. We may suspend deletion when information is subject to a legal hold, investigation, pending dispute, security incident, or legal obligation.

9.5 Customer-Directed Retention

Where VRPS processes information as a processor or service provider, retention and deletion may be governed by the Customer agreement and documented instructions. VRPS may direct a user to the Customer when the Customer controls the relevant record.

Article 10: Security

10.1 Security Program

We maintain administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, loss, misuse, alteration, or disclosure. Safeguards may include access controls, authentication, encryption in transit and at rest where appropriate, logging, monitoring, secure development practices, vulnerability management, backups, incident response, vendor oversight, and workforce training.

10.2 Role-Based Access

Access to Personal Information is intended to be limited to authorized personnel and Customer users based on job role, property assignment, workflow, and legitimate need. Administrative access may be logged, particularly for sensitive functions and views.

10.3 No Absolute Security

No method of transmission, storage, or security control is completely secure. We cannot guarantee that unauthorized persons will never defeat safeguards or that the Services will always be free from vulnerabilities.

10.4 User Responsibilities

Users must protect credentials, use accurate contact information, avoid sharing one-time codes, maintain secure devices, and promptly report suspected unauthorized access. Customers are responsible for managing their authorized users, roles, offboarding, and property-specific security procedures.

10.5 Incident Response and Notification

We maintain processes to investigate suspected security incidents, contain risk, preserve evidence, and provide notices required by law or contract. Timing and content of notice depend on the nature of the incident, available facts, legal requirements, and the role of the Customer.

Article 11: Children and Eligibility

11.1 General Audience

ParkAgent is intended for adults and authorized users administering or obtaining parking. It is not directed to children under 13, and we do not knowingly collect Personal Information directly from children under 13 through a consumer registration workflow.

11.2 Minors

A parent, guardian, property representative, or rental manager may provide information concerning a vehicle or reservation associated with a minor driver where lawful. If we learn that Personal Information was collected directly from a child in violation of law, we will take reasonable steps to delete or otherwise address it.

Article 12: Your Choices and Controls

12.1 Account and Vehicle Information

Users may be able to review or update certain account, contact, vehicle, and permit information through ParkAgent. Some records may be locked after a transaction, expiration, accounting close, or enforcement event to preserve integrity.

12.2 Communications

Users may use provided unsubscribe or opt-out mechanisms for optional communications. Transactional, security, legal, and service messages may still be sent where permitted and necessary.

12.3 Cookies

Browser settings and available consent tools may allow users to manage non-essential cookies. Essential technologies cannot always be disabled without affecting the Services.

12.4 Customer Rules

Privacy choices do not create parking eligibility or override Customer rules. Deleting information needed to validate an active authorization may end or impair the associated parking privilege.

Article 13: Privacy Requests

13.1 Available Requests

Depending on where you live and whether an applicable law applies, you may have the right to request access, confirmation, correction, deletion, portability, restriction, or an appeal; to opt out of certain sales, sharing, targeted advertising, or profiling; or to withdraw consent.

13.2 Submitting a Request

Requests may be submitted through the support form at https://www.vrpsinc.com/support/ or by emailing support@vrpsinc.com. Please identify the relevant Property, account, reservation, transaction, or telephone number so we can locate responsive records.

13.3 Verification

We may request information reasonably necessary to verify identity, authority, and residency. We will not provide sensitive records if we cannot verify the request or if disclosure would adversely affect another person's rights, reveal security information, or violate law.

13.4 Authorized Agents

Where permitted, an authorized agent may submit a request. We may require evidence of authority and may separately verify the individual's identity or confirm the instruction directly.

13.5 Customer-Controlled Data

If the relevant information is controlled by a Customer, we may forward the request, direct the requester to the Customer, or assist the Customer under our contract. The Customer may be responsible for the substantive response.

13.6 Exceptions

Privacy rights are subject to legal exceptions. We may retain or decline to disclose information where necessary for security, fraud prevention, transaction completion, tax and accounting, legal claims, free expression, another person's rights, internal uses compatible with reasonable expectations, or another permitted purpose.

13.7 Non-Discrimination

We will not unlawfully discriminate against an individual for exercising an applicable privacy right. Different service levels may result when information is necessary to provide a requested parking authorization or service.

Article 14: U.s. State Privacy Disclosures

14.1 Applicability

Comprehensive state privacy laws generally apply only when statutory thresholds and other conditions are met. This Article provides supplemental disclosures where applicable and does not concede that VRPS is subject to every listed law for every processing activity.

14.2 Categories of Personal Information

During the preceding 12 months, ParkAgent may have collected the categories described below. The exact categories depend on the user, Customer configuration, and enabled features.

14.3 Sources and Purposes

The categories of sources, purposes, and recipients are described in Articles 2, 3, and 5. We do not intend to use or disclose sensitive Personal Information to infer characteristics about an individual beyond what is reasonably necessary to provide ParkAgent, maintain security, or fulfill another disclosed and permitted purpose.

14.4 Sale, Sharing, and Targeted Advertising

VRPS does not intend to sell Personal Information for money or share Personal Information for cross-context behavioral advertising. We do not process ParkAgent Personal Information for targeted advertising as that term is commonly defined under comprehensive state privacy laws. If a public marketing site uses technology that constitutes sale, sharing, or targeted advertising under applicable law, we will provide the legally required notice and opt-out mechanism.

14.5 California

California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, correct, delete, and receive information about categories of collection, use, and disclosure; rights to opt out of sale or sharing; and rights concerning certain sensitive Personal Information. ParkAgent's intended practices are described above. The final publication version should include metrics or additional disclosures if VRPS becomes subject to requirements mandating them.

14.6 Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, and Other States

Residents of states with applicable comprehensive privacy laws may have rights to access, correct, delete, obtain a portable copy, opt out of sale, targeted advertising, or certain profiling, and appeal a denied request. Rights and exceptions vary by state. We will process verified requests as required by the law applicable to the requester and the relevant processing activity.

14.7 Appeals

Where required, a requester may appeal a denied privacy request by replying to the denial or using the support form at https://www.vrpsinc.com/support/. We will provide a written response within the legally required period and information about how to contact the appropriate regulator when required.

Article 15: International Users

15.1 U.S.-Based Services

VRPS is based in the United States, and ParkAgent is currently intended primarily for U.S. properties and users. Personal Information may be processed and stored in the United States and other locations where providers operate.

15.2 No General Representation of International Compliance

This Policy does not represent that ParkAgent is configured for use in every country. Before deploying ParkAgent for users subject to non-U.S. privacy laws, VRPS and the Customer should complete a legal and technical readiness review and, where needed, adopt appropriate contractual addenda, transfer mechanisms, notices, and consent workflows.

15.3 EEA, United Kingdom, and Switzerland

If ParkAgent is intentionally offered to individuals subject to the GDPR or similar laws, supplemental disclosures should identify the controller, lawful bases, data-protection rights, transfer mechanisms, supervisory authority, and any appointed representative or data-protection officer. Those disclosures are reserved for a future international addendum unless counsel confirms current applicability.

Article 16: Third-Party Services and Links

16.1 Independent Services

ParkAgent may link to, embed, or integrate third-party services. Their privacy practices are governed by their own notices, and VRPS is not responsible for their independent processing except to the extent required by law or contract.

16.2 Customer Websites and Property Communications

A Customer may present ParkAgent through its website, QR code, reservation message, rental portal, signage, or other channel. Information collected outside ParkAgent is governed by the party operating that channel.

Article 17: Automated Processing and Artificial Intelligence

17.1 Operational Automation

ParkAgent may use rules, scoring, matching, deduplication, anomaly detection, forecasting, or other automated methods to support parking authorization, fraud prevention, inventory management, and service quality. These tools are intended to assist operations, not to replace appropriate human review where a material adverse action is contemplated.

17.2 Model Development

VRPS will not use identifiable Customer or user data to train a general-purpose artificial intelligence model unless the use is permitted by contract and law and appropriately disclosed. We may use deidentified, aggregated, synthetic, or operational data to test and improve algorithms and system performance.

17.3 Future Significant Decisions

Before deploying automated processing that produces legal or similarly significant effects, VRPS will evaluate applicable notice, consent, risk-assessment, opt-out, and human-review requirements.

Article 18: Business Transfers and Organizational Changes

18.1 Continuity of Privacy Obligations

If VRPS undergoes a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, Personal Information may transfer as part of the transaction. The recipient will be subject to applicable law and the commitments in effect unless users receive legally required notice of a material change.

Article 19: Changes to This Policy

19.1 Updates

We may update this Policy to reflect changes in ParkAgent, law, security practices, providers, or business operations. The revised Policy will display a new effective date. We will provide additional notice or request consent when required by law.

Article 20: Contact Information

20.1 Privacy Contact

Questions or privacy requests may be directed to:

Vacation Rental Property Solutions, Inc. Attn: Privacy 358 St. Louis Street, Mobile, AL 36602 Email: support@vrpsinc.com