Privacy Policy — Share Your Park

Last updated: 16 June 2026 · Effective date: 16 June 2026

This Privacy Policy explains how Share Your Park (“Share Your Park”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you use the Share Your Park mobile application and website (together, the “Service”). Share Your Park is a marketplace that connects people who want to rent out a parking spot (“Owners”) with people looking to book one (“Customers”).

By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service. We are the Data Fiduciary for the personal data we process about you under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

1. Information we collect

We collect only what is needed to operate the Service.

Information you provide

Data	Why we collect it
Phone number	Account sign-up and sign-in via one-time password (OTP).
Email address	Sign-in via OTP and account communications.
Name	To create your profile and identify you to the other party in a booking.
Vehicle details	To help Owners identify the vehicle that will use the spot.
Parking spot details & photos (Owners)	To list a spot — address, location, pricing, availability, and images.
Identity / KYC documents (optional)	If you choose to get verified, you may submit a government ID such as Aadhaar, PAN, Passport, or Driving Licence, and a reference number.
Support communications	Anything you send us when you contact support.

Information collected automatically

Data	Why we collect it
Precise location (GPS)	Required to discover parking spots near you and to place your listed spots on the map. The Service will not show nearby spots without an active location permission.
Device & push token	A Firebase Cloud Messaging (FCM) token to send booking and account notifications.
Diagnostic / crash data	Limited technical data to detect and fix crashes and errors.

Payment information. If paid features (such as identity verification) are enabled, payments are processed by our payment partner, Razorpay. We do not collect or store your full card, UPI, or bank credentials. Razorpay handles payment details directly under its own privacy policy; we receive only a payment status and reference.

2. How we use your information

Create and manage your account and authenticate you (OTP sign-in).
Show nearby parking spots and enable Owners to list spots.
Facilitate booking requests, approvals, and the rental relationship.
Reveal the other party’s contact details only after a booking is approved or active, so a Customer and Owner can coordinate.
Process payments and, where applicable, identity verification.
Send transactional notifications (booking status, account updates).
Provide customer support and respond to your requests.
Detect, prevent, and address fraud, abuse, security incidents, and technical problems.
Comply with legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

3. How information is shared

Between Owners and Customers: personal contact details (phone/email) are withheld until a booking reaches the APPROVED or ACTIVE state. Before that, the other party sees only limited, non-identifying booking information. Spot listings (location, photos, price) are visible to users browsing the Service.
Service providers (processors): Supabase (authentication and database hosting); Razorpay (payment processing, only if payments are enabled); Google Firebase / FCM (push notifications); Sentry (crash and error monitoring — we send only a user identifier, never your phone number or email); and our cloud / object-storage and hosting providers (to store spot photos and KYC documents and host our servers).
Legal and safety: we may disclose information if required by law, court order, or government request, or to protect the rights, safety, and security of our users, the public, or the Service.
Business transfers: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred, subject to this Policy.

4. How we protect your information

Encryption in transit: all traffic between the app/website and our servers uses HTTPS/TLS.
Encryption at rest: personally identifiable details such as phone number, email, and vehicle information are encrypted using AES-256-GCM. KYC documents are encrypted at rest and access is restricted to authorised review.
Access controls and data minimisation: access to personal data is limited and authenticated, and we collect only the data we need.

No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard safeguards.

5. Data retention

We keep your personal data only as long as needed to provide the Service and for legitimate business or legal purposes: account data while your account is active; booking records for the period required for dispute resolution, taxation, and legal compliance; and KYC documents only as long as needed to maintain your verification status and meet legal obligations, after which they are deleted or anonymised.

6. Your rights

Subject to applicable law (including the DPDP Act), you may access, correct or update, and delete your personal data; withdraw consent at any time (which may limit your use of the Service); nominate another individual to exercise your rights in the event of death or incapacity; and raise a grievance with us and, if unresolved, with the Data Protection Board of India. You can manage your profile and delete your account from within the app, or contact us using the details below.

7. Permissions we request

Location — required to find and display nearby parking spots. You can revoke it in device settings, but spot discovery will not function without it.
Notifications — to deliver booking and account updates. Optional; you can disable them at any time.
Camera / Photos / Files — only when you upload spot photos or KYC documents.

8. Children’s privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

9. International data transfers

Our service providers may process data on servers located outside India. Where this happens, we take steps to ensure your data continues to be protected consistent with this Policy and applicable law.

10. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice (such as an in-app message). Your continued use of the Service after changes take effect means you accept the updated Policy.

11. Contact & Grievance Officer

For any questions about this Privacy Policy, to exercise your data rights, or to raise a grievance under the DPDP Act and the Information Technology Act, 2000, contact:

Share Your Park — Grievance Officer
Email: contactus@onflotech.com

We will acknowledge complaints within 24 hours and resolve them within the timeframe prescribed by law.