Privacy policy
For car owners
ValetGuy is software that valet parking companies use to look after the cars they park. This page explains what information is recorded when your car is parked with ValetGuy, why, who can see it and when it is deleted.
Who is responsible
The valet company that parks your car decides how it uses ValetGuy and is responsible for your information. ValetGuy (the software provider) stores and processes it on the company's behalf and does not use it for anything else.
What is recorded
About your car and ticket:
- Plate number, make, model and colour; mileage and fuel level if the attendant records them.
- Photos of the car at check-in, when parked and at handover, with the time and place they were taken; the parking spot and key hook.
- The ticket's history: who checked the car in, parked it, brought it back and when.
- If you give them: your phone number (to send you the ticket link), your name and a PIN or the phone you used to open the ticket (to prove the car is yours), your language, and your rating and comment.
Why
To run the valet service (park, find and return your car, tell you when it is ready), to document the car's condition so that damage claims can be settled fairly, and to keep the service secure.
Your information is not sold and is not used for advertising.
How long it is kept
- Your photos, plate, phone number and name are kept on our servers for only 7 days after the car is returned or the ticket is cancelled, then deleted. The rest of the ticket (ticket number, times, vehicle make and colour, history) is deleted after 30 days (at the latest 35 days, once the company’s backup has covered the records). If the company has marked a dispute about the ticket, it is kept until the dispute is resolved, then 7 more days.
- If a damage claim is open, the company can keep that ticket until the claim is resolved.
- Your ticket link stops working 7 days after the car is returned.
- The company receives a daily backup of its records (without photos, plates, phone numbers or names), kept for up to one year; the company may also save them to its own cloud storage (iCloud Drive, Google Drive or OneDrive) or device, where they are its responsibility. To handle a damage claim it may export that ticket’s photos: each export is recorded and watermarked, and giving the photos to anyone else (an insurer, a lawyer, the police) needs your consent or request.
Who can see it
- Attendants and managers only while on duty at that site, on their registered phone, and the company's owner.
- Staff phones do not keep photos once your car has left, and photos cannot be shared out of the app by staff.
- On the ticket page, only the phone that opened the ticket first sees the details and photos.
- Service providers that run the system for us: Supabase (database and storage), Cloudflare (the ticket page) and Apple (notifications).
Your choices and rights
You can ask the valet company to show, correct or delete the information about you, subject to the law that applies to them. The company handles the request in ValetGuy and can contact us if needed.
Security
Information is encrypted in transit, access is limited by role and shift, and photos are kept in private storage that is only reachable through short-lived links. If a breach affecting your information occurs, the company and we will notify you as the law requires.
Changes
If this policy changes, the new version is published on this page with its date.
For valet companies and their staff
This part covers the people who use the ValetGuy app: the owner of a valet company, its managers and its attendants. ValetGuy is provided by Goodsvalu Inc. (“we”).
Who is responsible
We are responsible for the account of an owner who signs up. Staff are invited by their valet company, which decides how it uses ValetGuy and is responsible for their work records; we store and process those records on the company's behalf.
What is collected
- Account: your email address (to sign in with a one-time code), the name you enter, your role and the sites you work at.
- Your phone: an identifier the app creates (an account is signed in on one phone at a time), the token Apple provides for notifications, and the app's language.
- Work records: clock-in and clock-out times and sites, who approved or ended a shift, and what you do with each car (check-in, parking, retrieval, hand-over), with your name.
- Photos you take of cars, with the time and place they were taken.
- If the owner subscribes: the plan, its status and renewal date. Payment is handled by Apple; we never see card details.
- No advertising, tracking or analytics tools are used.
Why
To run the service: sign-in, the job board and notifications, shifts and attendance records, the owner's backups and the subscription. This information is not sold and is not used for advertising.
How long it is kept
- Account information: as long as the account exists.
- Attendance records, and staff names in the records of each car: as long as the company's organization exists, because employers may have to keep them by law. The cars' own records follow the rules for car owners above.
- The owner's daily backups (tickets, attendance with staff names, photo-export log): one year on our servers; the owner may also save them to their own cloud storage or device.
- Server logs: up to 7 days.
- Free-trial check: when an organization is created, a one-way hash of the phone's app identifier and of the owner's email (the originals can't be recovered from it), so the 7-day trial is given once per phone and email. Kept for one year, even if the account is deleted.
Who can see it
- The owner sees the whole organization; managers see the sites of their shift; attendants see their own shifts, and the cars of their site while on duty.
- Service providers: Supabase (sign-in, database and storage, in Tokyo, Japan), Resend (sign-in emails), Apple (notifications and App Store payments), RevenueCat (subscription status) and Cloudflare (the car owner's ticket page).
On the phone
The app keeps its data in storage that is excluded from iCloud and computer backups. Photos are removed from staff phones once the car has left, and signing out removes the organization's data from the phone.
Deleting your account
In the app: Settings › Delete account. When an owner deletes the account, the whole organization is deleted: sites, cars, photos, attendance records, staff memberships and backups. When a staff member deletes theirs, the sign-in is deleted, and the company keeps its attendance and car records with their name.
Deleting the account doesn't cancel an App Store subscription: cancel it in Settings › Apple Account › Subscriptions.
Contact
Questions and requests about this policy: wecare@goodsvalu.com.