Privacy Policy

1. Who we are and what this policy covers

ParkXero is a parking operations platform: monthly permits, enforcement, event parking and payments, delivered as a web application, branded payment pages and the ParkXero Mobile app. Two companies stand behind it:

• Parking NA, LLC ("Parking NA") builds and operates the ParkXero platform and its websites, including parkxero.com and my.parkxero.com.
• Twenty Nineteen Holdings, LLC ("Twenty‑19") develops and publishes the ParkXero Mobile app for iOS and Android under license from Parking NA, and operates twenty19.net.

In this policy, "we", "us" and "our" mean Parking NA and Twenty‑19 together. Both companies follow this policy, and either one can answer your questions about it. This policy applies to:

• the websites parkxero.com and twenty19.net;
• the ParkXero web application used by parking operators and their staff;
• the ParkXero Mobile app used by enforcement staff; and
• the ParkXero payment and permit pages that drivers use to pay a citation or buy a permit.

The same policy is published at parkxero.com/privacy and twenty19.net/privacy. It does not cover the parking operators who use ParkXero; each operator has its own privacy practices (see section 3).

2. The short version

• We collect what running a parking operation needs, and nothing more. There is no advertising, no advertising identifiers and no tracking of you across other companies' apps or websites, in the app or on our sites.
• License plates are read only to check that vehicles are complying with a parking zone's terms, by an officer in a lot the parking operator manages. Photos are stored only when a citation is issued; other plate reads are purged once the check is done, usually within a day. Nothing is sold or pooled into a shared surveillance database, and we refuse to let ParkXero be used for mass surveillance. Section 5 explains this in plain language.
• We do not sell personal information, and we never have.
• Card payments are handled by Stripe. Full card numbers never touch ParkXero's servers or the app.
• Crash reports from the app go to Google's Firebase Crashlytics with a user ID and device details, so we can fix bugs. That is the only data the app shares with an analytics-type service.
• The parking operator controls how long enforcement and permit records are kept and who can see them.

3. Who is responsible for your data

Parking operators, meaning the companies, property managers, campuses and municipalities that manage parking, are our customers. When their staff use ParkXero to issue a citation, sell a permit or take a payment, the resulting records are the operator's records. Under privacy laws the operator is the controller (or "business") of that information and we are its processor (or "service provider"): we handle the information on the operator's instructions and under our agreement with them, and we do not use it for our own purposes beyond running, securing and improving the service.

If you are a driver, permit holder or vehicle owner and you have a question about a citation, a permit or your data, please contact the parking operator first. Their name is on the citation, the permit or the signs at the lot. We help operators respond to these requests, and if you contact us we will forward your request to the right operator.

For our own websites, our business contacts, and the login accounts of the people who use our software, we are the controller and you can contact us directly (section 14).

4. What we collect, and why

4.1 If you visit our websites

• Contact form. Name, company, email, phone and your message, so we can reply. Submissions are stored in our systems and emailed to our team. The form is protected by Google reCAPTCHA, which may collect device and browsing information under Google's privacy policy.
• Server logs. IP address, browser type, pages requested and timestamps, used for security and troubleshooting and kept only briefly.
• Your light/dark theme choice, stored in your browser. We do not use advertising cookies or third-party analytics on parkxero.com or twenty19.net.
• Scheduling a demo takes you to OneCal, a third-party scheduling service that operates under its own privacy policy.

4.2 If you use the ParkXero web application (operator staff)

• Your account: name, work email, role, the operator you belong to, and your sign-in credentials. Passwords are stored as one-way hashes; we cannot read them.
• Your activity: what you do in the application (for example, who issued a citation or edited a permit), with timestamps and IP addresses. This audit trail exists for the operator's own accountability and for security.
• The records you create: permits, vehicles, citations, notes and payment records. These belong to the operator (section 3).
• Support: anything you send us when you ask for help.

4.3 If you use the ParkXero Mobile app (enforcement staff)

ParkXero Mobile is for authorized staff of a parking operator. There is no public sign-up: your operator creates your login and can remove it at any time. The table below is the same information we disclose in the Apple App Store and Google Play listings.

What the app does not do: it does not read your photo library, contacts or calendar (it only uses the camera live, while you are scanning); it does not collect payment card numbers (in-person card payments are taken by Stripe's certified readers and the Stripe software, which handles the card data end to end); it does not use advertising identifiers or product analytics; and it does not track your location when you are not using it.

4.4 If you are a driver, permit holder or vehicle owner

You may never use our software directly, but a parking operator may hold information about you in ParkXero:

• Enforcement records: license plate and state, vehicle description, photos, the location and time, the type of violation, the citation number and the officer's notes, created by the operator's staff.
• Permit and registration details: name, email, phone, plate(s), vehicle, and details such as your unit, space or employer and the permit dates, entered by the operator or by you when you buy a permit or register a vehicle.
• Payments: when you pay a citation or a permit online or in person, the payment is processed by Stripe. We receive a confirmation, the amount, the card brand and last four digits, and the record the payment applies to. We never receive or store the full card number.
• Disputes and correspondence about a citation or permit.

5. License plates and vehicle photos: what ParkXero does, and does not do

ParkXero uses automated license plate recognition (ALPR) for one purpose: to help parking operators audit their own parking zones and confirm that vehicles are complying with the posted terms and conditions, such as time limits, permit requirements and payment. We know that ALPR has become controversial, because some systems record every vehicle that passes a camera, keep those records indefinitely, and share them across a network of agencies and companies. ParkXero is not that kind of system, and we have deliberately designed it so it cannot be turned into one.

What happens

• Plates are read by an officer, in a lot the operator manages, during a compliance check. An officer working for a parking operator uses the app's camera on vehicles parked in a lot or zone that operator manages. Nothing is read from fixed cameras, from the public street or from passing traffic.
• The plate is read on the phone. The recognition software runs on the device itself, not on a server.
• The read answers one question: is this vehicle complying with the terms and conditions of this parking zone right now? It is checked against that operator's own permit, payment and time-limit rules, and nothing else.
• Images are stored on our servers only when a citation or violation notice is issued, and then only as evidence supporting that notice. In every other case the images are not stored at all.
• Plate reads that do not result in a notice are kept only as long as the compliance check needs them, for example long enough to tell whether a vehicle has overstayed a time limit, and are then purged. In practice that is usually one day or less.
• A citation is always issued by a person. The software helps an officer check; it does not ticket anyone automatically. When a notice is issued, the plate, the evidence photos, the location and the time become part of that record in the operator's ParkXero account, exactly like a handwritten ticket with a photo stapled to it.

What does not happen

• No long-term ALPR database. We do not believe there is any reasonable commercial purpose for long-term retention of plate reads or for tracking vehicles, so ParkXero does not do it. Plate data exists only in the account of the operator whose zone it was read in, and only for as long as described above.
• No pooling, no sharing, no "hot lists". Plate reads are never pooled across operators, never matched against outside watch lists, and never fed into any surveillance network. One operator cannot see another operator's records.
• No tracking of movements. ParkXero records a compliance check at a specific place at a specific moment. It does not follow vehicles between locations, build travel histories, or record vehicles that were simply driving by.
• Not sold, not licensed, not shared for marketing. We do not sell or license plate reads or vehicle photos, and we do not share them with data brokers, insurers, lenders, repossession services, advertisers or anyone else who is not providing the parking service.
• Not handed to law enforcement on request. We do not give plate data to law enforcement or government agencies because they ask. We disclose it only under a valid legal order that compels us to, and we tell the operator when we do unless the law forbids it. The operator, as the owner of its own records, may choose to share them.
• Not available for mass surveillance, full stop. We do not support or condone the use of ALPR technology for mass surveillance, and we refuse to let ParkXero be used for that purpose. The product is built to prevent it, and our agreements with operators prohibit it.

Citation evidence

Photos and plate data attached to a citation or violation notice are kept by the operator for as long as it needs them to manage the citation, its payment and any dispute, under our agreement with the operator. Operators can delete records, and when an operator leaves ParkXero its data is deleted.

Cloud recognition of citation evidence

When a citation or violation notice is issued, the evidence photo may be processed by cloud-based vehicle-recognition services to double-check the license plate read, confirm the state that issued the plate, and help identify the vehicle's make and colour. This happens only for photos that are already part of a citation or violation notice, and only so that the notice's evidence is accurate. These services return a result to ParkXero; they are not used to store, catalogue or track vehicles, and photos that are not attached to a notice are never sent to them.

6. How we use information

• To provide the service: sign people in, issue and manage citations and permits, take payments, print tickets, sync the mobile app, and produce the operator's reports.
• To support our customers: answer questions, troubleshoot and train.
• To keep the service secure: detect abuse, fraud and unauthorized access, and keep audit trails.
• To fix and improve the software, using crash reports and aggregate, de-identified usage statistics that do not identify any person or vehicle.
• To communicate: service notices to account holders, and, for business contacts who have asked to hear from us, product news you can unsubscribe from at any time.
• To meet legal obligations and to enforce our agreements.

We do not use personal information to make automated decisions that have legal or similarly significant effects on you.

7. How we share information

With the parking operator. Enforcement, permit and payment records are the operator's records and are available to the operator's authorized staff.

With service providers who work for us under contracts that limit them to providing their service, protecting the information and not using it for their own purposes:

When the law requires it. We may disclose information to comply with a subpoena, court order or other valid legal process, or to protect the rights, property or safety of our customers, the public or ourselves. Where we can, we notify the operator concerned (see section 5 for plate data specifically).

If our business changes hands. If Parking NA or Twenty‑19 is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction. Whoever receives it must continue to honour this policy.

With your permission, for anything else.

We do not sell personal information and we do not share it for targeted advertising. We have not done so in the past twelve months.

8. How long we keep information

• Plate photos that do not result in a citation are not transmitted to or stored on our servers. Plate reads that do not result in a citation are kept only as long as necessary to check compliance with the parking zone's terms and conditions, then purged, usually within one day (section 5).
• Enforcement, permit and payment records are kept for as long as the parking operator's agreement with us requires, which is the operator's decision. Operators can delete records at any time, and when an operator closes its account its data is deleted.
• Staff login accounts are kept while the account is active and deleted within 90 days after the operator removes it.
• Data on the mobile device (the offline copy and queued uploads) is removed when you sign out of the app.
• Crash reports are kept by Firebase Crashlytics for 90 days.
• Website contact submissions are kept for up to two years so we can follow up.
• Server logs are kept for up to 90 days.

We may keep information longer when the law requires it, to resolve a dispute, or to enforce our agreements. Information that no longer identifies anyone may be kept as aggregate statistics.

9. Security

We protect information with encryption in transit (HTTPS) and at rest, role-based access controls so staff only see what their role needs, audit logs, hashed passwords, and monitoring. In-person card payments use Stripe's certified payment readers, so card data never passes through our software. Data on the mobile device is protected by the operating system's encryption, is excluded from cloud backups, and is removed at sign-out. No system is perfectly secure; if a breach affects your information we will notify you and the operator as the law requires.

10. Your choices and rights

Device permissions

You can turn the app's camera and location permissions off in your phone's settings at any time. Plate scanning and zone distances will stop working, but the rest of the app will not.

Your account

Staff logins are created by the parking operator, so there is no in-app sign-up or account deletion. To close your login, ask your operator to remove it; the operator, or we on the operator's behalf, will delete it. You can review and correct your own details inside the application.

Marketing

Every marketing email from us has an unsubscribe link. We will still send service notices to account holders.

Privacy rights

Depending on where you live, including under the privacy laws of many U.S. states and Canada's PIPEDA, you may have the right to know what personal information we hold about you, to receive a copy of it, to correct it, to delete it, and to opt out of its sale or sharing (we do none of the latter). We will not treat you differently for exercising these rights. To make a request, email us (section 14). We will verify your identity, may ask an authorized agent for proof of authority, and will respond within 45 days or tell you if we need longer. If we decline a request you may appeal by replying to our response, and you may also complain to your state attorney general or privacy regulator.

If your information is in a parking operator's records (section 3), we will pass your request to that operator and help them respond, because the decision is theirs to make.

Because we do not sell or share personal information for advertising, browser "Do Not Track" and Global Privacy Control signals do not change anything about how we treat you; we honour them where the law requires.

11. Children

Our software and websites are for businesses and adults. We do not knowingly collect personal information from anyone under 16, and the mobile app is only issued to adult staff. If you believe a child has given us personal information, contact us and we will delete it.

12. Where information is processed

ParkXero is operated from the United States and is offered to parking operators in the United States and Canada. Information is stored and processed in the United States. If you are in Canada or elsewhere, your information is transferred to the United States, where privacy laws may differ from those of your home jurisdiction, and it is protected by the safeguards in this policy and our agreements with operators.

13. Changes to this policy

When we change this policy we will update the effective date at the top. If a change materially reduces your rights or changes how we use plate data or photos, we will tell operators in advance and post a notice on our websites.

14. Contact us

Questions, requests and complaints about this policy or your information can be sent to privacy@parkxero.com. That address reaches both Parking NA, LLC and Twenty Nineteen Holdings, LLC. For ParkXero Mobile support, see twenty19.net/parkxero-mobile.

If your question is about a specific citation or permit, contact the parking operator named on it; they hold your records and can act on them fastest.