1. Scope of This Policy

This Privacy Policy applies to all users of the Prked platform, including:

• Guests/Renters — individuals who search for and book parking, storage, or docking spaces;
• Hosts — property owners who list spaces on the platform;
• Visitors — anyone who browses prked.com without creating an account;
• B2B Operators — third parties accessing the platform via API for parking management purposes.

This Policy covers both of Prked’s user-facing platforms: (1) the web application accessible at https://prked.com, and (2) the Prked iOS mobile application available on the Apple App Store.

By using either platform, you represent that you are at least 18 years of age and agree to this Privacy Policy in its entirety. If you do not agree, you must discontinue use of the Platform immediately.

3. Information We Collect

We collect information in three ways: (a) information you provide directly, (b) information collected automatically, and (c) information received from third parties.

3.1 Information You Provide Directly

Account Registration

When you create an account, we collect:

• First and last name
• Email address
• Phone number (required for SMS verification)
• Password (stored using industry-standard cryptographic protections)
• How you heard about Prked (referral source)

You may sign up using email/password, Google Sign-In, or Apple Sign-In (“Sign in with Apple”). If you use a social login, we receive the profile information that provider shares with us pursuant to your authorization, which may include your name, email address, and profile identifier. Apple’s “Hide My Email” feature results in a relay email address being shared rather than your actual email.

We require both a primary sign-in method (email/Google/Apple) and a verified phone number before treating your account as fully onboarded. Phone verification is conducted via SMS one-time passcode.

Profile Information (Optional)

iOS app users may optionally provide a profile biography, school or workplace information, and a profile photo. This information is displayed publicly on your profile.

Booking and Reservation Information

When making a reservation, Guests provide:

• Vehicle license plate number (for parking bookings)
• Vehicle make, model, year, and color
• Boat registration number (for docking bookings)
• Description of stored items (for storage bookings)
• Custom notes or special instructions
• Booking dates, times, and duration type (hourly, daily, weekly, or monthly)

Payment Information

All payment processing is handled by our payment processor. When you add a payment method or set up payouts, you enter your financial information directly into the payment processor’s secure interface. Prked does not receive or store your raw card numbers, bank account numbers, or full Social Security Numbers. We receive and store only:

• A tokenized reference to your payment method
• The last four digits and brand of your payment card (for display purposes)
• Your default payment method preference
• Transaction history including charge identifiers, amounts, statuses, and timestamps

Host Listing Information

Hosts who create listings provide:

• Full property address
• Space type, dimensions, and number of available spaces
• Listing title, description, and access instructions
• Photos (up to 8 per listing)
• Amenities and features (e.g., security camera, EV charging, climate control)
• Pricing and availability schedule
• Vehicle size restrictions and parking rules

Ownership Verification Documents

To verify ownership or authorization over a listed property, Hosts upload supporting documents, which may include:

• Utility bills
• Lease agreements
• Property deeds
• Insurance policies
• Government-issued identification (driver's license or passport)

These documents are stored securely and are reviewed by Prked administrators. Hosts also complete identity verification through our payment processor, which requires legal name, date of birth, SSN or Tax ID, and government photo ID — all of which are collected and stored exclusively by the payment processor under its KYC obligations. Prked stores only verification status, never the underlying identity data.

Communications and Support

When you contact our support team or submit a support request, we collect the content of your messages and any attachments you provide, as well as your contact information.

3.2 Information Collected Automatically

Location Data

• iOS App: With your permission, the iOS app accesses your device's GPS location (“When In Use” authorization) to show listings near you and support navigation. Your last searched location may be cached locally on your device.
• Web App: If you grant permission, your browser provides approximate GPS coordinates for proximity-based search.
• Address Input: When you type an address, we use mapping and geocoding services to validate and convert addresses to geographic coordinates. This address data is transmitted to our mapping service provider.
• Listing Coordinates: The coordinates and full address of each Host's listed property are stored in our database and used for proximity search queries.
• IP-Based Geolocation: We may approximate your general location from your IP address for analytics and security purposes.

We do not collect or store persistent real-time device location tracking. Location is accessed only when actively using search features.

Device and Technical Data

• IP address
• Browser type and version
• Operating system
• Device platform (iOS or web)
• Device identifiers used by our infrastructure services
• Pages visited and time spent on each page (web)
• Referral sources and campaign parameters from URLs
• Screen resolution
• App crash reports, device model, and OS version (iOS)

Search and Usage Data

• Search queries and search location inputs
• Listings viewed and bookings initiated
• Filters applied
• Onboarding completion status
• Referral codes used to sign up

3.3 Information Received from Third Parties

• Authentication Providers (Google / Apple): Profile information when you authenticate via Google Sign-In or Apple Sign-In.
• Payment Processor (Stripe): Verification status, KYC completion flags, payout eligibility, and outstanding requirements for Hosts going through identity verification.
• Review Services: Confirmation of review submissions when guests leave reviews through our review partners.
• Event Data Providers: Event names, venues, dates, and attendance forecasts used to surface relevant parking demand near events. No user personally identifiable information is sent to these services.

5. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 With Service Providers and Data Processors

We share personal information with vendors and service providers that perform services on our behalf. These parties are contractually obligated to use your information only as directed by us and in accordance with applicable law. Our key service providers are listed in Section 12.

5.2 Between Users of the Platform

When a reservation is created, we share certain personal information between the Host and the Guest necessary to complete the transaction. See Section 6 for a detailed breakdown of what is shared and with whom.

5.3 With Our Payment Processor

We share necessary information with our payment processor (Stripe, Inc.) to process payments, conduct identity verification for Hosts, manage payouts, and comply with financial regulations. Stripe acts as both a service provider and, with respect to certain KYC data, an independent data controller under applicable law. Stripe’s privacy policy governs their handling of your data: stripe.com/privacy.

5.4 For Legal Compliance and Protection

We may disclose personal information when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or lawful government request;
• Enforce our Terms and Conditions or this Privacy Policy;
• Protect and defend our rights or property;
• Prevent or investigate possible wrongdoing in connection with the Platform;
• Protect the personal safety of users of the Platform or the public;
• Protect against legal liability.

5.5 Business Transfers

If Prked undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control of your personal information, and will inform you of your choices.

5.6 With Your Consent

We may share your information with other parties when you have given us your explicit consent to do so.

5.7 Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, or business purposes.

7. Cookies, Tracking Technologies & Analytics

7.1 Cookies and Similar Technologies (Web)

When you visit prked.com, we and our third-party partners use cookies, web beacons (clear GIFs), pixel tags, and similar tracking technologies. Cookies are small data files stored on your browser that enable us to recognize you and provide a personalized experience.

• Authentication Session Cookie — Maintains your login session. Duration: browser session.
• Affiliate Attribution Cookie — Tracks affiliate attribution for commission purposes. Duration: 30 days.
• Analytics Cookies — Web analytics: tracks page views, sessions, and user behavior. Duration: set by analytics provider.
• Advertising Conversion Cookies — Tracks purchase completions and new listing creations to measure advertising effectiveness. Duration: varies.
• Web Beacons (Clear GIFs) — Used in emails and on the website to track email opens and page visits.

By continuing to use prked.com, you consent to the use of cookies as described in this Policy to the fullest extent permitted by applicable law. You may manage cookie preferences through your browser settings; however, disabling certain cookies may affect Platform functionality.

7.2 Do Not Track

Some browsers include a “Do Not Track” (DNT) feature. Because there is no uniform interpretation of how to respond to DNT signals, Prked does not currently alter its data collection practices in response to DNT signals from your browser. See Section 20 for more information.

7.3 Web Analytics

We use Google Analytics to analyze Platform usage. This service uses cookies and collects information about your use of the Platform, including pages visited, session duration, traffic sources, device and browser information, and approximate geographic location. You may opt out by installing the Google Analytics Opt-Out Browser Add-On.

7.4 Crash Reporting (iOS Only)

Our iOS app uses a crash reporting service to automatically collect and transmit crash reports when the app experiences an error. Data collected includes crash stack traces, device model, operating system version, and a device identifier. This data is used exclusively for debugging and improving app stability. Crash data is retained for approximately 90 days.

9. AI-Powered Features and Automated Processing

9.1 AI Content Generation

We use third-party artificial intelligence services, primarily from OpenAI and Google, to power certain features of the Platform. When these features are used, relevant data is transmitted to the AI provider as part of the request:

• AI listing generation — Listing address, space type, amenities, size, and any description you provide
• AI listing document verification — Listing details submitted for verification
• AI event and venue content generation — Event names, venue names, dates, and categories (no user PII)
• Search query optimization — Search terms entered by users
• Blog and FAQ content generation — Topic prompts (no user PII)
• Property revenue calculator — Property address and publicly available market data

Prked does not use your data to train AI models, and we use contractual protections where available to limit our AI service providers’ use of your data for model training purposes. We do not share sensitive financial or identification information with AI services.

9.2 Automated Decision-Making

Certain processes on the Platform are automated and may affect your experience or account:

• Reservation Status Transitions — Reservations automatically progress through states (confirmed → active → completed) on a scheduled basis.
• Payout Processing — Host earnings are automatically calculated and processed on a scheduled basis based on completed reservations.
• Service Fee Calculation — The renter service fee is automatically calculated based on reservation details in accordance with our pricing model.
• Account Actions — Certain administrative enforcement actions on an account automatically affect all listings and activity associated with that account.

Certain administrative decisions (such as listing verification approval or rejection) may be informed by AI analysis but are reviewed by a human administrator before a final determination is made. You may contact help@prked.com to request human review of any automated decision that has materially affected you.

11. Affiliate and Referral Programs

11.1 Affiliate Program

Prked operates an affiliate program that allows Hosts to earn a commission by referring new Guests to the Platform. When a user clicks an affiliate link, a 30-day browser cookie is set to track attribution. If you complete a booking within 30 days of clicking an affiliate link, the booking is attributed to that affiliate and they receive a commission.

Data stored about affiliates includes: affiliate identifier, account information, click and conversion counts, and linked payment account for commission payouts.

11.2 Referral Program

Hosts may refer other property owners to Prked via a referral link. When a new Host completes their first listing through a referral link, the referring Host receives a bonus. Attribution is recorded on the new user’s profile.

13. Data Storage and Security

13.1 Where Your Data Is Stored

Your data is stored primarily within Google Firebase infrastructure, hosted on Google Cloud Platform in the United States.

• User account data, listings, reservations, and payment records: Google Firebase database infrastructure
• Listing photos and property verification documents: Secure cloud storage
• iOS device (local): Your device may store your last searched location, notification preferences, and app settings. Authentication tokens are stored in the device's secure keychain.
• Payment card data, bank account details, SSN/Tax ID, and KYC verification data: Our payment processor's infrastructure exclusively (Stripe)

13.2 Security Measures

• Transport Encryption — All data transmitted between your device and our servers uses HTTPS/TLS encryption.
• Encryption at Rest — Data stored in our cloud infrastructure is encrypted at rest using provider-managed encryption.
• Password Security — Passwords are stored using industry-standard cryptographic protections and are not stored in recoverable form.
• Session Management — We use token-based session management for authenticated users.
• Payment Data Security — Prked does not process or store raw card numbers or bank account details. All payment data is handled by Stripe, which maintains PCI DSS compliance.
• Administrative Access Controls — Administrative access to user data is restricted to authorized Prked personnel.

Despite these measures, no security system is impenetrable. If you believe your account has been compromised, please contact help@prked.com immediately.

15. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• Right to Know / Access — Request a copy of the personal information we hold about you, including the categories of data, purposes of processing, and third parties with whom it is shared.
• Right to Correction — Request that we correct inaccurate or incomplete personal information.
• Right to Deletion — Request that we delete your personal information, subject to certain exceptions (e.g., legal obligations, unresolved disputes).
• Right to Data Portability — Receive a copy of the personal information you provided to us in a structured, machine-readable format.
• Right to Opt Out of Sale or Sharing — California residents have additional rights — see Section 16.
• Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.
• Right to Withdraw Consent — Where we process your information based on your consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at help@prked.com with the subject line “Privacy Rights Request.” We will respond within 45 days.

17. Children’s Privacy

The Platform is intended solely for users who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18. By using the Platform, you represent and warrant that you are at least 18 years old.

If we become aware that we have collected personal information from a minor under 18 without verification of parental consent, we will take immediate steps to delete that information. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at help@prked.com.

19. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you in accordance with applicable law:

• United States (Florida) — Under the Florida Information Protection Act (FIPA), we are required to notify affected Florida residents and the Florida Attorney General within 30 days of discovering a breach.
• Other US States — Various state breach notification laws may require notification within specified timeframes. We will comply with applicable state notification requirements.
• European Union (GDPR) — If GDPR applies, we will notify the relevant supervisory authority within 72 hours of becoming aware of a breach, and will notify affected data subjects without undue delay.

Notification will be provided via email to the address associated with your account, via prominent notice on our website, or via other legally recognized means.

21. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the “Last Updated” date at the top of this Policy. If we make material changes, we will provide notice through one or more of the following methods:

• Sending an email to the address associated with your account
• Posting a prominent notice on the Platform
• Displaying an in-app notification

Your continued use of the Platform following the applicable notice period constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must discontinue your use of the Platform.