1. Introduction

Alina Visitor Parking is a visitor parking registration and management service for residential properties. The service is developed and operated by Urgent Developer (Dan Chang). This Privacy Policy explains how personal information is collected, used, disclosed, and protected when you use the service.

This policy covers the website alinaparking.com and the Alina Visitor Parking Android app (package com.alinaparking.visitor). The Android app opens the website inside the app. It requests no device permissions and does not collect any information beyond what the website collects.

Properties such as strata corporations, condominium corporations, and building management companies use the service to manage parking. Their authorized staff can see the information for their building.

For visitor parking activity in British Columbia, we intend this policy to reflect the Personal Information Protection Act (British Columbia) and other applicable Canadian privacy requirements. Depending on how the service is operated or where information is processed, other privacy laws may also apply.

2. Information We Collect

The information we collect depends on how you use the service.

Visitors

Visitors register a parking pass without creating an account. When you register a pass, we collect:

• Required: your licence plate, phone number, email address, and vehicle make and model.
• Optional: your vehicle colour and the state or province of your plate.
• Visit details: the building and unit you are visiting, the parking duration you request, the pass start and end times, and the pass confirmation code.

If the unit uses an access PIN, you enter it to register. We check the PIN but do not store it with your pass.

We do not collect visitors' names.

Residents

Resident accounts are by invitation only. Each account is created from a link issued by building management, and there is no public sign-up. For residents, we collect:

• Your name, email address, and unit.
• Your password, which is stored only as a hash.
• The licence plates and vehicles you register.
• The guests and passes you create.
• The version of this Privacy Policy you accepted.

Property management and security staff

Staff accounts are created by an administrator. For staff, we collect account details (name, email address, role, and a hash of the password) and records of the actions they take in the service, such as patrol logs, violations, and audit entries.

Technical information

For visitors, residents, and staff, we automatically record the IP address and browser user agent. These are stored with pass records, QR code registration records, resident registrations, and audit logs. We use them for security, abuse and fraud prevention, troubleshooting, and keeping an audit trail.

When rate limiting is enabled, IP addresses are also used as short-lived counters in Upstash Redis. These counters expire within one hour.

What we do not collect

• We do not collect payment card information.
• We do not collect your precise location.
• We do not collect advertising IDs or device identifiers.
• We do not send SMS text messages. Service messages are sent by email only.

3. Patrol Photos and Plate Recognition

This section applies only to authorized patrol staff. Staff can take a photo of a vehicle's licence plate in the web app to look up the vehicle. Using the camera is optional, and staff can type the plate instead. The camera is used only inside the browser, and only after the browser asks for permission.

• When the staff member is online, the photo is sent to our server. If the cloud recognition service is configured, our server sends the photo to Plate Recognizer, a third-party licence plate recognition service, to read the plate text. Otherwise, the photo is processed with Tesseract OCR software on our own servers.
• When the staff member is offline, recognition runs on their device, and the photo is kept in a queue on that device until it can be uploaded. Once our server confirms the upload, the queued item and its photo are removed from the device. A scan that is started but not finished stays on the device until the staff member resumes it.
• We extract the licence plate text and a confidence score. The photo itself is stored in our database with the patrol check record. Photos attached to a parking violation are stored with that violation.
• Only authorized staff of the property can see these photos. Visitors and residents cannot see them.
• Patrol lookup photos are kept for 90 days after the patrol check and then deleted. Photos attached to a parking violation are kept while the violation is open and deleted 365 days after the violation is resolved.

4. How We Use Your Information

We use personal information for the following purposes:

• Parking passes: to issue, validate, and manage parking passes.
• Parking enforcement: to support parking enforcement for the property.
• Service emails: to send pass confirmations, reminders, and password reset emails.
• Security: to prevent abuse, troubleshoot problems, and keep an audit trail.
• Analytics: to understand how the service is used, in aggregate.
• Legal obligations: to comply with applicable law and respond to lawful requests.

We do not use personal information for advertising or unrelated marketing, and we do not sell it.

5. Analytics, Cookies, and Local Storage

We use Vercel Web Analytics to understand how the service is used. It records aggregate page views and basic interaction data, such as the page visited, the referring page, the browser, operating system, and device type, and the country. It is not used for advertising or cross-site tracking.

We use only the following cookies, which are strictly necessary or functional:

• A sign-in session cookie, which keeps you signed in for up to 7 days.
• A language cookie (NEXT_LOCALE), which remembers your language.

We do not use advertising or cross-site tracking cookies.

Staff patrol mode also keeps an offline cache and pending uploads in the browser's local storage on the staff member's device.

6. Consent

By acknowledging the privacy notice and submitting a visitor parking registration, or by accepting this policy when you create a resident account, you consent to the collection, use, and disclosure of your personal information for the purposes described in this policy.

You may ask questions about these practices or seek to withdraw consent, subject to legal or contractual restrictions and reasonable notice. If required information cannot be used for parking administration, we may be unable to issue or maintain a pass.

7. Service Providers and Disclosure

We use the following service providers to run the service. They process personal information on our behalf:

• Vercel: hosts the website and app servers (server functions run in the US East region) and provides Vercel Web Analytics.
• Neon: hosts our Postgres database.
• Resend: sends transactional email, such as pass confirmations, reminders, and password reset emails.
• Plate Recognizer: reads licence plates from patrol photos, when configured.
• Upstash: provides Redis for rate limiting with IP-based counters, when configured.
• Sentry: collects error and crash diagnostics, when configured. Personal details such as email addresses, phone numbers, licence plates, passwords, and tokens are removed before anything is sent, and no session recordings are made.

Because these providers operate outside Canada, personal information may be stored or processed in other countries, including the United States, and may be subject to the laws of those countries.

We also disclose personal information to:

• Property management and authorized staff: strata, condominium, building management, and security personnel responsible for parking at the building.
• Legal authorities: where required or permitted by applicable law.

We do not sell personal information.

8. Data Retention

We keep personal information as follows:

• Patrol lookup photos: kept for 90 days after the patrol check, then deleted.
• Violation photos: photos attached to a parking violation are kept while the violation is open and deleted 365 days after the violation is resolved.
• Visitor pass records (including the IP address and user agent stored with them), violation records, resident accounts, staff accounts, and audit logs: kept while the building uses the service and the account remains active, unless deletion is requested (see Section 10). They may also be kept as needed to handle open violations, disputes, or legal obligations.
• Records used to make a decision that directly affects an individual may be retained for at least the minimum period required by applicable law.
• Rate-limit counters: expire within one hour.
• Analytics: aggregate data is kept by Vercel under its own retention practices.

9. Data Security

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information and the nature of the service.

• All traffic to and from the service is encrypted with HTTPS (TLS).
• Access controls intended to limit personal information to authorized users.
• Security measures to protect the web service and related systems from unauthorized access or misuse.
• Operational processes for reviewing incidents, misuse, and service activity.

No method of storage or transmission is completely secure, but we work to protect personal information against unauthorized access, use, disclosure, or loss.

10. Your Rights and Deleting Your Data

Subject to applicable law, you may have the right to:

• Access: request access to your personal information.
• Correction: request correction of inaccurate personal information.
• Withdrawal of consent: ask to withdraw consent, subject to legal or operational limits.
• Deletion: request deletion of your account and personal information.
• Questions or complaints: contact us about our privacy practices or make a complaint if you believe your information has been handled improperly.

To request deletion, see our account deletion page. In short:

• Residents and staff: email getalinaparking@gmail.com from the email address on your account.
• Visitors: email getalinaparking@gmail.com and include the licence plate and pass confirmation code.

We acknowledge requests within 7 days and complete them within 30 days.

Deleting an account removes the account and its personal details, registered plates, passes, and photos. Some records may be kept where needed for open violations, disputes, or legal obligations, and audit entries are anonymized.

For any other request, contact us using the details in Section 12. Where applicable, we will respond within the time required by law.

11. Strata/Condominium Parking Rules

The visitor parking rules enforced through this Service are established by the strata/condominium corporation that manages the property you are visiting, not by us. Enforcement actions are carried out by the property's authorized management or security personnel in accordance with applicable property rules and law.

This Service facilitates the administration of visitor parking but does not independently determine or resolve all enforcement disputes. Questions about a specific property's parking rules should be directed to that property's management.

12. Contact Us

If you have questions about this Privacy Policy, would like to request access, correction, or deletion, or have a concern about how personal information is handled, please contact us. You can also contact the management of the property you are visiting or live in.

You may also contact the Office of the Information and Privacy Commissioner for British Columbia at www.oipc.bc.ca. If federal privacy law applies to your situation, you may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version and revise the Last updated date. Material changes will apply to future uses of the service after the updated notice has been presented.