IdleSpots, Inc. — Privacy Policy
This Privacy Policy explains how IdleSpots, Inc. ("IdleSpots," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the IdleSpots mobile apps, the website at idlespots.com, and related services (together, the "Platform"). It also explains the choices and rights you have, including rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").
This policy applies to Drivers (people who book parking), Hosts (people who list parking), Building Partners (property owners and managers who work with us), and visitors to our website. It also serves as our notice at collection for California residents.
IdleSpots, Inc. is a Delaware corporation based in Los Angeles, California. It operates an online marketplace that connects people who have unused parking spaces with drivers who need parking. For CCPA purposes, IdleSpots is the "business" responsible for your personal information.
Questions about privacy: [email protected] | 310-991-2017 | IdleSpots, Inc., Attn: Privacy, 16530 Ventura Blvd, Suite 516, Encino, CA 91436.
Account information: name, email address, phone number, password, and profile photo (optional).
Identity verification information (Drivers): an image of your government-issued ID, your ID number, date of birth, and a selfie or facial image. This information is collected through our identity verification provider, which may use facial recognition technology to compare your selfie with your ID photo. You will be asked for your consent before this happens.
Vehicle information: make, model, year, color, and license plate of vehicles you register.
Payment information: card details, billing address, and, for Hosts, bank account details. These are collected and stored by Stripe. IdleSpots does not store full card numbers.
Tax information (Hosts): legal name, address, and taxpayer identification number (such as an SSN or EIN). These are collected through Stripe so that required tax forms such as Form 1099-K can be issued.
Listing information (Hosts and Building Partners): spot address, photos, description, price, availability, rules, and access instructions.
Communications: messages, reviews, support requests, problem reports, damage claims, and photos you send us or other Members through the Platform.
Device and usage information: device type, operating system, app version, IP address, device identifiers, crash and diagnostic data, pages and features used, and searches.
Location information: precise location from your device, if you allow it, to show nearby parking, guide you to your spot, and support check-in and gate access. We also derive approximate location from your IP address. You can turn off precise location in your device settings. Some features, such as automatic gate opening on arrival, may not work without it.
Booking and access records: booking history, check-in and check-out times, and logs of digital access credentials issued, used, and revoked at each property.
Camera footage: at properties where security cameras are installed, video (no audio) of vehicle arrivals, departures, and activity at the parking spot. See Section 7.
Cookies and similar technologies: see Section 8.
Identity verification provider (such as Persona or Stripe Identity): verification results and fraud-risk signals.
Stripe: payment and payout status, and fraud signals.
Gate and access-control providers (such as ButterflyMX and Nimbio): gate access events.
Building Partners and their property management systems (such as Yardi or RealPage), where integrated: building, space, and resident-authorization information needed to operate parking at that property.
Other Members: for example, reviews, problem reports, or damage reports that mention you.
Referral partners: how you found IdleSpots, if you came through a referral link.
To provide the Platform:
create and manage accounts;
show and match Listings;
process Bookings, payments, refunds, and Host payouts;
issue and revoke access credentials; and
send booking confirmations, reminders, and overstay alerts.
For safety, security, and enforcement:
verify Driver identities;
detect and prevent fraud and unauthorized access;
review footage and access logs when an incident, dispute, or damage claim is reported; and
enforce our Terms of Service.
For legal and tax compliance:
collect and remit parking taxes, such as the City of Los Angeles Parking Occupancy Tax;
issue tax forms to Hosts;
keep required records; and
respond to lawful requests.
To provide support: respond to questions and resolve problems.
To improve the Platform: analyze how the Platform is used, fix bugs, and develop features. This includes improving pricing, availability, and spot-occupancy tools using de-identified or aggregated data where practical.
To communicate with you: send service messages, and, with your consent where required, news and offers. You can opt out of marketing at any time.
We use sensitive personal information only for the purposes permitted by the CCPA. These are: providing the services you request, verifying identity, preventing fraud, ensuring security, processing payments and payouts, and complying with law. We do not use it to infer characteristics about you or for advertising.
Automated tools: We use automated systems to:
rank and match Listings to your search; and
flag potentially fraudulent activity or failed identity checks.
If an automated check results in your account being blocked or a Booking being refused, you can contact [email protected] to request human review.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. We do not knowingly sell or share the personal information of consumers under 16. We disclose personal information only as follows:
With Hosts and Building Partners, when you are a Driver: your first name, the vehicle details you registered, and your booking window and access activity at their property. This lets them confirm that the right vehicle is in the right spot.
With Drivers, when you are a Host: the spot address, spot number, access instructions, and your first name and profile photo, if provided.
With Building Partners: booking, revenue, and access reports for their own properties. Building Partners do not receive Drivers' ID numbers, ID images, or payment card details.
With service providers who process information on our behalf under contracts that limit their use of it. These include:
Stripe (payments, payouts, tax forms, and identity verification);
Persona (identity verification);
ButterflyMX, Nimbio, and other access-control providers;
Amazon Web Services (hosting and storage);
Google Firebase (push notifications, crash reporting, and app analytics);
Mapbox (maps);
our customer support, email, and SMS providers.
For legal reasons: to comply with a subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or protect our rights. We review government requests and disclose only what we believe is legally required, unless there is an emergency involving risk of serious harm.
In a business transfer: as part of a merger, acquisition, financing, or sale of assets, subject to this policy. We will notify you if your information becomes subject to a different privacy policy.
With your direction or consent.
In the past 12 months, we collected the following categories of personal information as defined by the CCPA, from the sources described in Section 2, for the purposes described in Section 3. We disclosed each category for business purposes to the recipients listed below. We sold or shared none of them.
Identifiers (name, email, phone, account ID, IP address, device ID, license plate):
Disclosed to: service providers; Hosts and Building Partners (limited); legal authorities when required.
Customer records (Cal. Civ. Code 1798.80: billing address, bank and card information, driver's license number):
Disclosed to: payment, verification, and hosting providers.
Protected classification characteristics (age or date of birth from ID verification):
Disclosed to: our identity verification provider.
Commercial information (bookings, payments, payouts):
Disclosed to: service providers; Hosts and Building Partners (for their own properties).
Biometric information (facial geometry used to match a selfie with an ID photo):
Disclosed to: our identity verification provider only.
Internet or other network activity (app and site usage, diagnostics):
Disclosed to: hosting and analytics providers.
Geolocation data (precise and approximate):
Disclosed to: mapping, hosting, and access-control providers.
Audio, electronic, visual, or similar information (camera video, ID images, listing photos, support call records):
Disclosed to: hosting providers; Building Partners for incidents at their property; legal authorities when required.
Professional or employment information: not collected.
Inferences: limited to fraud-risk signals.
Disclosed to: verification and payment providers.
Sensitive personal information:
Includes: government ID numbers and images; SSN or EIN of Hosts; account login credentials; financial account information; precise geolocation; and biometric information for identity verification.
Disclosed to: the service providers needed for each purpose only.
We keep personal information only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required by law or needed for an active dispute or investigation:
Account information: while your account is open, and for 3 years after it is closed.
Identity verification results: 3 years after your last Booking or account closure, whichever is later.
ID images and selfies: deleted by our verification provider after verification is complete, or no later than 1 year after collection. Biometric data is deleted no later than when the purpose for collecting it has been satisfied.
Booking and access logs: 2 years from the date of each event.
Camera footage: 30 days from recording. Footage related to a reported incident, dispute, or legal request is kept until the matter is resolved.
Payment, payout, and tax records: 7 years, to meet tax and financial recordkeeping requirements.
Support communications: 2 years from the last communication.
At some participating properties, security cameras installed by IdleSpots or the property record video of parking spots. These cameras never record audio. Where cameras are present:
the Listing will say so; and
signage at the location will give notice of recording and link to this policy.
Footage is used to:
verify that the correct vehicle is parked;
investigate reported problems, damage, and safety incidents; and
enforce our Terms.
Access to footage is restricted to authorized staff, who review it only when there is a reason to. We share footage only as described in Section 4. If any camera system reads license plates automatically, we will operate it under a separate automated license plate recognition usage and privacy policy, as required by California law, posted on our website.
Essential: needed to sign you in, keep the Platform secure, and remember your choices. These cannot be turned off.
Analytics and performance: help us understand how the Platform is used and fix problems. These include Firebase Analytics and Crashlytics in our apps. You can opt out of analytics cookies in your browser settings or in the app's privacy settings.
We do not currently use third-party advertising cookies or pixels. If that changes, we will update this policy first and provide a "Do Not Sell or Share My Personal Information" option.
We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of any sale or sharing of your information.
Profile: update your information at any time in account settings.
Location: turn precise location on or off in your device settings.
Notifications: manage push notifications in your device settings, and marketing emails using the unsubscribe link.
Text messages: reply STOP to stop text messages or HELP for help. Booking details and access instructions remain available in the app.
Delete your account: in the app, go to Account Settings > Delete Account, or email [email protected]. We will delete or de-identify your information. The exception is information we must keep for the reasons and periods in Section 6, such as tax records or an open dispute.
If you are a California resident, you have the right to:
Know and access: the categories and specific pieces of personal information we have collected about you, its sources, our purposes, and the categories of recipients.
Delete: personal information we collected from you, subject to legal exceptions.
Correct: inaccurate personal information.
Opt out of sale or sharing: we do not sell or share personal information, but we will honor any opt-out request or GPC signal.
Limit use of sensitive personal information: we already use sensitive personal information only for the purposes permitted by law, as described in Section 3.
Non-discrimination: we will not deny service, charge different prices, or provide a different quality of service because you exercised these rights.
How to submit a request: email [email protected] or call 310-991-2017.
What happens next:
We will confirm receipt within 10 business days.
We will respond within 45 days. If we need more time, we may extend this by up to another 45 days and will tell you why.
To protect your account, we will verify your identity by matching information you provide with information we hold. For signed-in users, this may be done through your account.
Authorized agents: an authorized agent may submit a request for you with your signed permission. We may ask you to verify your identity directly.
Promotions and referrals: We may offer discounts or credits, for example for referring a friend. These offers involve using basic account information, such as your email and booking history, to apply the reward. Their value is reasonably related to the value of that information to our business. Participation is optional, and you may withdraw at any time by contacting us. The terms of each offer are shown when you join it.
Shine the Light: We do not disclose personal information to third parties for their own direct marketing purposes.
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. These include:
encryption in transit and at rest;
multi-factor authentication for administrative systems;
least-privilege access controls for staff;
regular security testing; and
an incident response plan.
No system is completely secure. If we learn of a security breach affecting your personal information, we will notify you as required by law. If you think your account has been compromised, contact [email protected] immediately.
The Platform is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has given us information, contact [email protected].
The Platform links to or works with third-party services, such as Stripe, Persona, Mapbox, and building access systems. Their own privacy policies govern how they handle information you give them directly. We encourage you to review those policies.
IdleSpots is based in the United States, and personal information is stored and processed in the United States.
We review this policy at least once every 12 months and update it when our practices change. When we update it, we will revise the "Last updated" date. If we make material changes, we will notify you by email or in the app before they take effect.
IdleSpots, Inc.
Attn: Privacy
16530 Ventura Blvd, Suite 516
Encino, CA 91436
Email: [email protected]
Phone: 310-991-2017