Privacy policy

1. Information we collect

We receive information from you, the valet staff serving you, and the devices and services used to operate the app. Depending on the features you use, this includes:

• Contact and messaging information. Your phone number, WhatsApp messages you send to ValetPass, and records of service messages and connection requests.
• Vehicle and visit information. License plate, vehicle description, condition photos, parking position, key-holder number, visit times, retrieval requests, handoff records, and incident reports and photos.
• Location information. The parked vehicle location recorded from a staff device and the latest location of the assigned staff member during an active retrieval. Device location requires browser permission.
• Payments and feedback. Parking fees, tips, payment method, payment status and references, waivers, ratings, and feedback recorded for a visit. Screens labeled as demo payments simulate a payment and do not move money or collect wallet credentials.
• Staff accounts and activity. Staff names, email addresses, account credentials in protected form, assigned venues, roles, and records of operational actions.
• Technical information. Browser and device details, network information such as IP addresses, request and error logs, security checks, and notification subscription details where enabled.

Optional plate recognition runs on the staff device to help read a license plate from an image. Photos selected for the valet record are uploaded separately and stored with the visit.

2. How we use information

We use this information to create and manage valet visits, connect customers to their private passes, send service messages, locate and retrieve vehicles, verify handoffs, and record payments and feedback. We also use it to manage staff access, investigate incidents, answer support requests, prevent misuse, and maintain the service.

WhatsApp messages relate to your valet service, such as connection links, private passes, and visit updates. You can ask staff to use an available QR or in-person alternative if you do not want to connect through WhatsApp.

3. Who receives information

Authorized ValetPass and venue staff can access information needed for their assigned work. Your private pass displays selected visit information to anyone holding its link, so keep that link private.

We also use service providers to operate the app:

• Cloudflare hosts the app and stores its records and uploaded photos.
• Meta / WhatsApp processes phone numbers, service message content, and related messaging information when WhatsApp is used.
• Google Maps receives map requests and relevant location information when map features are used.
• Browser notification services deliver alerts to staff who enable push notifications. Our email provider processes messages sent to our contact address.

These providers may process information outside the country where you use ValetPass. Their own privacy policies also describe how they handle information. A venue may keep separate records outside ValetPass; contact the venue about those records.

We may disclose information when required by law or when necessary to address fraud, resolve a dispute, or protect people, vehicles, and the service.

4. Cookies, device storage, and permissions

The app uses a sign-in cookie for staff sessions and browser storage for preferences, unfinished check-ins, recent operational information, and photos waiting to upload. Some files and page content are cached to help the app work on unreliable connections. Clearing site data removes these local copies and can discard unfinished work.

Camera, location, and notification access can be managed through your browser or device settings. Declining a permission may limit the related feature. The ValetPass app does not include advertising pixels.

5. How long information is kept

After your vehicle is handed back, your private pass remains available for optional tips and ratings for up to 24 hours. Your visit is scheduled for deletion sooner once both a successful tip and a rating are recorded, or when you choose “Finish and delete my visit.” Skipping either tip or rating does not extend the 24-hour limit.

Deletion removes the visit’s phone and vehicle details, private access links and codes, parking location, photos, message records, feedback comments, and incident notes from the app’s active records. Uploaded photos are also deleted from private storage. Automatic cleanup runs regularly; temporary service failures are retried. Your private pass is no longer available after the visit is removed.

We keep grouped payment amounts, counts, ratings, and service-time measures for reporting, without customer identifiers, individual visit IDs, payment references, photos, or free-text notes. Staff completion counts are grouped separately for operational reports.

Live retrieval tracking stores the latest position rather than a route history. That live position is removed when the vehicle is marked ready, delivered, or cancelled. The saved parking location is a separate part of the visit record.

These automatic rules apply to visits completed after this policy takes effect. Earlier records and visits that have not reached confirmed handoff can be addressed through a privacy request.

Offline staff devices may still hold recent information or queued photos until they reconnect or their local data is cleared. Copies saved by you or a venue, WhatsApp conversations, and emails are not erased by closing a ValetPass visit. Service providers may retain technical logs and backup copies under their own retention rules. Cloudflare’s database recovery history can retain prior records for up to 30 days, depending on the hosting plan. Active-record deletion does not instantly erase that recovery history.

6. Access, correction, and deletion requests

To ask about your information, request a copy, correct an error, or request deletion, email ryadjtaleb@gmail.com with the subject ValetPass privacy request.

Include the phone number used for the visit and its approximate date and venue. Staff can identify their account using its email address. We may need to verify your identity before giving access to or deleting information.

We will review your request and explain the action taken. Once a visit is deleted, we cannot reconstruct its personal details from the grouped reporting totals. Staff accounts and messages sent to our contact email are handled separately from automatic visit deletion. Your rights may also depend on the laws that apply to you.

7. Protecting information

ValetPass uses secure connections, staff access controls, private photo storage, and protected access links to limit access to information. Staff permissions are tied to their role and venue. Please contact us if you believe a private pass or staff account has been accessed without permission.

8. Changes and contact

We may update this policy as the service changes. The current version will be available on this page with its updated date.

ValetPass
Privacy contact: ryadjtaleb@gmail.com