Parkify Technologies, LLC Privacy Policy

Privacy Policy

Effective Date: March 1, 2026

Last Reviewed: March 2026

This Privacy Policy ("Policy") is issued by PFY Holdings LLC d/b/a Parkify and its subsidiaries and affiliated entities (collectively, "Parkify, " "we, " "us, " or "our") and governs the collection, use, storage, disclosure, and deletion of personal information and vehicle data obtained through our parking management platform, including but not limited to our scan-to-pay payment systems, digital permitting portal, reservation systems, license plate recognition ("LPR") enforcement technology, automated gate arm control systems, and any associated mobile applications, websites, or digital interfaces (collectively, the "Platform"). This Policy applies to all individuals who interact with the Platform ("you, " "your, " or "Guest") in any capacity, including but not limited to: parkers, permit holders, vehicle operators, and visitors to any Parkify-enabled property.

BY ACCESSING OR USING THE PLATFORM IN ANY MANNER, INCLUDING BUT NOT LIMITED TO SCANNING A QR CODE, INITIATING A PAYMENT, APPLYING FOR OR HOLDING A PERMIT, ENTERING A PARKIFY-MANAGED FACILITY , OR PERMITTING YOUR VEHICLE TO BE SCANNED BY PARKIFY LPR TECHNOLOGY , YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS POLICY IN ITS ENTIRETY. IF YOU DO NOT AGREE TO THIS POLICY , YOU MUST REFRAIN FROM USING THE PLATFORM.

This Policy is incorporated by reference into Parkify's Terms of Service and all operator and property management agreements. This Policy does not govern the data practices of property owners, operators, or third-party service providers who independently collect data through their own systems.

1. INFORMATION WE COLLECT

Parkify collects personal information and vehicle data through automated, manual, and user-initiated processes. The categories of information we collect include, but are not limited to:

1.1 Identity and Contact Information

Full legal name
Email address
Telephone number(s)
Mailing or billing address
Date of birth (where required for identity verification or legal compliance)
Government-issued identification numbers, where voluntarily provided

1.2 Vehicle and License Plate Information

Vehicle license plate number(s), including full plate string and state/jurisdiction of issuance
Vehicle make, model, color, and year
Vehicle identification number (VIN), where provided
Images and video footage captured by LPR cameras containing vehicle and plate data
Entry and exit timestamps associated with specific license plates
Permit status linked to license plate

1.3 Payment and Financial Information

Credit card, debit card, or other payment method details (processed via PCI-DSS compliant payment processors; full card numbers are not stored by Parkify)
Transaction amounts, dates, times, and identifiers
Billing address associated with payment method
Refund and dispute records

1.4 Permit and Reservation Data

Permit type, duration, associated lot or zone designation
Reservation confirmation details, dates, and access credentials
Permit holder status, violations, and enforcement history

1.5 Technical and Device Data

IP address and geolocation data (at the city/region level)
Browser type, version, and operating system
Device identifiers and mobile advertising IDs, where applicable
Session duration, clickstream data, and Platform usage logs
Cookies and similar tracking technologies (see Section 9)

1.6 Facility and Operational Data

Gate arm activation and deactivation logs tied to your vehicle or credential
Facility access logs and timestamp data
Enforcement action records, including citation data and images
Customer service communications and support ticket records

1.7 Communications Data

Records of all communications between you and Parkify, including email, SMS, chat, and phone
Marketing preference selections and opt-out records
Survey responses and feedback submissions

2. HOW WE COLLECT INFORMATION

Parkify collects information through the following means:

2.1 Directly from You

When you scan a QR code to initiate a parking session or payment; complete a permit application or renewal; create an account or user profile on the Platform; make a reservation; contact Parkify customer support; respond to surveys; or otherwise voluntarily submit information through any Parkify interface.

2.2 Automatically and Passively

When your vehicle enters or exits a Parkify-managed facility, our LPR cameras automatically capture your vehicle's license plate and related data. Gate arm systems log access events in real time. Platform usage generates session and device data automatically. These automated processes occur whether or not you have previously interacted with Parkify.

2.3 From Third Parties

Parkify may receive information about you from property owners, operators, and managers who have deployed our Platform; payment processors and financial institutions; marketing and analytics partners; government and municipal databases for permit or vehicle verification purposes; and, where legally permissible, consumer data providers and identity verification services.

3. HOW WE USE YOUR INFORMATION

Parkify uses the information we collect for the following purposes. We process personal information only to the extent necessary and proportionate to each stated purpose:

3.1 Core Platform Operations

Processing and completing parking payments, including scan-to-pay and card-on-file transactions
Issuing, managing, validating, and revoking parking permits
Facilitating parking reservations and associated access credentials
Automatically operating gate arms and access control systems based on license plate recognition or permit verification
Enforcing parking rules and restrictions, including issuing citations and managing violations
Providing real-time parking availability and dashboard data to property operators

3.2 Account and Customer Management

Creating and managing your user account or Guest profile
Responding to inquiries, disputes, and customer service requests
Sending transaction confirmations, receipts, and service notifications
Verifying your identity and preventing unauthorized access to permit credentials

3.3 Marketing and Communications

Sending promotional offers, parking discounts, product announcements, and service updates by email, SMS, push notification, or other channels, subject to your communication preferences and applicable law
Conducting surveys and gathering feedback to improve the Platform
Personalizing marketing communications based on your Platform usage and history
You may opt out of marketing communications at any time as described in Section 8 of this Policy

3.4 Safety, Security, and Fraud Prevention

Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and abuse of the Platform
Monitoring for and responding to potential security incidents
Supporting law enforcement investigations where legally required
Maintaining the physical security of Parkify-managed facilities

3.5 Legal and Regulatory Compliance

Complying with applicable federal, state, and local laws and regulations
Responding to valid legal process, including subpoenas, court orders, and government requests
Establishing, exercising, or defending legal claims
Fulfilling our contractual obligations to property operators and partners

3.6 Analytics and Platform Improvement

Analyzing Platform usage trends to improve functionality and user experience
Conducting internal research and development
Generating aggregated, de-identified, or anonymized statistical reporting

4. DATA RETENTION — 120-DAY POLICY

IMPORTANT — PARKIFY DATA RETENTION STANDARD:
Parkify retains Guest personal information for a period of one hundred and twenty (120) calendar days from the date of your most recent interaction with the Platform (the "Retention Period"). Upon expiration of the Retention Period, your personal data will be permanently deleted or irreversibly anonymized from Parkify's active systems, unless an exception identified in Section 4.2 applies.

4.1 Calculating the Retention Period

For purposes of this Policy, "most recent interaction" means the latest date on which any of the following occurs:

A payment transaction is initiated or completed through the Platform
A permit is issued, renewed, accessed, or expires
A reservation is made, modified, or fulfilled
Your vehicle's license plate is captured by a Parkify LPR camera at any Parkify-managed facility
A gate arm event is triggered by your vehicle's credential or plate
You log into or access your Parkify account or user profile
You communicate with Parkify customer support or submit a request
You respond to a Parkify survey, promotion, or marketing communication
Any enforcement action, citation, or dispute is initiated or pending resolution

The 120-day Retention Period resets upon each qualifying interaction. If you have no qualifying interaction for 120 consecutive days, your personal data will be subject to deletion or anonymization as described above.

4.2 Exceptions to the 120-Day Retention Period

Parkify will retain personal information beyond the standard 120-day Retention Period only where one or more of the following circumstances apply:

Active or reasonably anticipated litigation, regulatory investigation, audit, arbitration, or government inquiry requires retention of specific records Legal Hold:
Applicable law, regulation, or regulatory directive requires retention for a specified period that exceeds the standard Retention Period (e.g., financial recordkeeping requirements under the Internal Revenue Code, PCI-DSS transaction records, or state-mandated retention schedules) Legal Obligation:
An unresolved dispute, unpaid citation, chargeback, or enforcement matter involving your account remains pending Dispute Resolution:
Retention is necessary to investigate, prevent, or respond to suspected fraud, security incidents, or abuse of the Platform Fraud and Security:
Our agreement with a property operator requires retention for a defined period Contractual Obligation:

Where an exception applies, Parkify will retain only the minimum data necessary for the stated purpose and will delete or anonymize the data as soon as the exception no longer applies.

4.3 Anonymized and Aggregated Data

Notwithstanding the foregoing, Parkify may retain aggregated, de-identified, or anonymized data derived from your information indefinitely, provided such data cannot reasonably be used to identify you individually. This retained data may be used for analytics, reporting, product development, and research purposes.

5. DISCLOSURE OF YOUR INFORMATION

Parkify does not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 Property Operators and Managers

Parkify provides parking management technology to property owners, operators, and managers ("Operators"). We may share operational data, including payment confirmation, permit status, enforcement records, and facility access logs, with the Operator of the specific facility at which you parked. Operators are subject to their own privacy practices and are not agents of Parkify. Parkify is not responsible for Operators' independent data handling.

5.2 Service Providers and Vendors

We engage third-party service providers to assist in operating the Platform, including but not limited to payment processors, cloud infrastructure providers, SMS and email delivery services, analytics providers, customer support platforms, and fraud prevention services. These providers access personal information only to the extent necessary to perform their contracted functions and are prohibited from using your data for any other purpose. All vendors are contractually required to maintain data security and confidentiality standards consistent with this Policy.

5.3 Legal Process and Government Requests

Parkify may disclose personal information in response to a valid subpoena, court order, law enforcement request, or other legal process. Where permissible, Parkify will make reasonable efforts to notify you of such requests prior to disclosure. We may also disclose information where we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or enforce our legal rights.

5.4 Business Transactions

In the event of a merger, acquisition, sale of assets, financing, or other corporate transaction involving Parkify, your personal information may be transferred to the successor entity, subject to the same or equivalent privacy protections. Parkify will provide notice of any such transaction and any material changes to privacy practices as required by applicable law.

5.5 Consent

Parkify may share your information with third parties for purposes not described in this Policy where you have provided explicit, documented consent. You may withdraw such consent at any time by contacting us as provided in Section 13.

5.6 No Sale of Personal Information

Parkify does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or other entities for monetary or other valuable consideration. Where "sale" is defined broadly under applicable state privacy law (including the California Consumer Privacy Act), Parkify's sharing of data with analytics and advertising partners for targeted marketing constitutes a disclosure for which you may have opt-out rights as described in Section 7.

6. LICENSE PLATE RECOGNITION (LPR) AND VEHICLE DATA

Parkify's LPR technology is a core component of our enforcement, access control, and permitting operations. The following specific terms govern the collection and use of vehicle and plate data:

LPR cameras at Parkify-managed facilities automatically capture license plate images and associated data upon vehicle entry, exit, and during patrols, without requiring action by the vehicle operator.
License plate data is used to: verify permit validity; process scan-to-pay sessions linked to a plate; trigger gate arm opening and closing; support enforcement and citation workflows; and generate facility access and occupancy data for Operators.
Images captured by LPR cameras may include surrounding vehicle or environmental data incidental to plate capture. Parkify takes reasonable steps to limit retention of such incidental imagery.
License plate data is subject to the 120-day Retention Period described in Section 4, unless an exception applies.
Parkify does not share license plate data with commercial third parties for purposes unrelated to parking operations without your consent or as required by law.
Where LPR data collection is regulated by state or local law (including, without limitation, state statutes governing the collection, use, and retention of automated license plate reader data), Parkify's practices are designed to comply with applicable requirements, including data minimization, access controls, and retention limits. California, Texas, and other states with specific ALPR statutes govern Parkify's practices in those jurisdictions.

7. YOUR PRIVACY RIGHTS

Subject to applicable law and Parkify's verification procedures, you may have the following rights with respect to your personal information:

7.1 Right to Access and Know

You may request that Parkify provide you with a copy of the personal information we hold about you and information about how we use it. Requests will be fulfilled within the timeframe required by applicable law (generally 45 days, with an extension of up to an additional 45 days where reasonably necessary).

7.2 Right to Correction

You may request that Parkify correct inaccurate or incomplete personal information we hold about you. We will use commercially reasonable efforts to fulfill such requests subject to verification requirements.

7.3 Right to Deletion

You may request that Parkify delete your personal information. Parkify will fulfill deletion requests to the extent required by applicable law. Please note that certain information may be retained where required by legal obligation, for pending dispute resolution, fraud prevention, or other legitimate grounds identified in Section 4.2. Deletion requests will be acknowledged within 10 business days and fulfilled within the timeframe required by law.

7.4 Right to Opt Out of Marketing

You may opt out of receiving marketing communications from Parkify at any time by: clicking the "unsubscribe" link in any marketing email; replying STOP to any marketing SMS; adjusting your notification preferences in your Parkify account; or contacting us as provided in Section 13. Opting out of marketing does not affect Parkify's ability to send you transactional or service-related communications (e.g., payment receipts, enforcement notices).

7.5 Rights Under State Privacy Laws

Residents of California (CCPA/CPRA), Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive privacy laws may have additional rights, including the right to opt out of targeted advertising or profiling, the right to data portability, and the right to appeal a denied privacy request. Parkify will honor such rights to the extent required by the applicable law of your state of residence.

To exercise CCPA rights, submit a verifiable consumer request as described in Section 13. Parkify will not discriminate against you for exercising your CCPA rights. California's "Shine the Light" law (Cal. Civ. Code § 1798.83) may entitle California residents to request information about personal information shared with third parties for direct marketing purposes. California Residents:
To the extent Parkify collects "sensitive personal information" as defined by applicable state law, we use and disclose such information only for purposes expressly permitted by law or with your explicit consent. Sensitive Personal Information:

7.6 Right to Non-Discrimination

Parkify will not deny you services, charge you different prices, or provide a different level of service solely because you have exercised any privacy right described in this Section.

8. MARKETING COMMUNICATIONS AND OPT-OUT

Parkify may use your contact information to send you promotional offers, announcements, parking discounts, product updates, and other marketing materials by email, SMS/text message, push notification, or other channels. By providing your contact information and using the Platform, you consent to receipt of such communications, subject to the following:

Governed by the CAN-SPAM Act and applicable state law. Each marketing email will include a clear and conspicuous opt-out mechanism. Opt-out requests will be honored within 10 business days. Email Marketing:
Governed by the Telephone Consumer Protection Act (TCPA) and applicable state law. Standard message and data rates may apply. You may opt out at any time by replying STOP. HELP for assistance. Message frequency varies. SMS/Text Marketing:
Manageable through your device settings or Parkify account preferences. Push Notifications:

Transactional communications (e.g., payment receipts, permit confirmations, enforcement notices, and responses to your customer service inquiries) are not marketing and will be sent regardless of your marketing preferences.

9. COOKIES AND TRACKING TECHNOLOGIES

Parkify's web-based Platform uses cookies, web beacons, pixels, and similar tracking technologies to operate the Platform, personalize your experience, and analyze usage. Categories of cookies we use include:

Essential to the operation of the Platform (e.g., session management, payment processing). These cannot be disabled. Strictly Necessary Cookies:
Remember your preferences and settings to improve your experience. Functional Cookies:
Help us understand how Guests use the Platform. Data may be shared with analytics providers in aggregated or pseudonymized form. Analytics Cookies:
Used to serve you relevant advertising and track campaign effectiveness. You may opt out of marketing cookies through our cookie preference center or your browser settings. Marketing Cookies:

Your browser settings may allow you to refuse or delete cookies. Disabling certain cookies may affect your ability to use Platform features. Parkify honors Global Privacy Control (GPC) signals and similar browser-based opt-out mechanisms where required by applicable law.

10. DATA SECURITY

Parkify implements and maintains commercially reasonable administrative, physical, and technical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption of payment card data in transit (TLS) and at rest, in accordance with PCI-DSS standards
Access controls limiting employee access to personal information on a need-to-know basis
Regular security assessments and vulnerability monitoring
Vendor security requirements and contractual data protection obligations
Incident response procedures for detecting and responding to potential data breaches

No data transmission over the internet or electronic storage system is completely secure. While Parkify uses commercially reasonable efforts to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, Parkify will notify affected individuals and applicable regulatory authorities as required by applicable law.

11. CHILDREN'S PRIVACY

The Parkify Platform is not directed to individuals under the age of 16. Parkify does not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without verifiable parental consent, we will take prompt steps to delete such information. If you believe we may have collected information from a minor, please contact us immediately using the information in Section 13.

12. CHANGES TO THIS POLICY

Parkify reserves the right to modify or update this Privacy Policy at any time. Material changes will be communicated by: posting the revised Policy on our website and Platform with an updated Effective Date; providing notice through your registered email address where we have it; and/or presenting a notice upon your next Platform interaction. Your continued use of the Platform following the posting of changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically. Non-material changes (such as clarifications or corrections) may be made without prior notice. The version of the Policy in effect at the time of a dispute shall govern.

13. HOW TO CONTACT PARKIFY — PRIVACY REQUESTS

To exercise any right described in this Policy, submit a privacy request, ask questions about our data practices, or report a concern, please contact Parkify's Privacy Team using the following channels:

PFY Holdings LLC d/b/a Parkify

Email: privacy@parkify.com

Website: www.parkify.com/privacy

Mail: Parkify, Attn: Legal, 6100 Lake Forrest Dr NE #440, Atlanta, GA 30328

For verifiable consumer requests under CCPA or other state privacy laws, Parkify may require you to provide sufficient information to verify your identity before processing your request. Verification requirements are designed to protect your information from unauthorized disclosure. Parkify will not use information collected for verification purposes for any other purpose.

If you are a resident of the European Economic Area or United Kingdom and believe your personal data has been processed unlawfully, you may have the right to lodge a complaint with your local data protection authority.

14. GOVERNING LAW AND DISPUTE RESOLUTION

This Policy and any disputes arising under it are governed by the laws of the State of Georgia, without regard to conflicts of law principles, except to the extent that federal law or the law of your state of residence requires otherwise. Any privacy-related claim not subject to mandatory arbitration under Parkify's Terms of Service shall be brought exclusively in the state or federal courts of competent jurisdiction in Georgia.

15. ADDITIONAL DISCLOSURES FOR SPECIFIC JURISDICTIONS

15.1 California

In addition to rights described in Section 7, California residents may have rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CCPA/CPRA), including the right to limit the use and disclosure of sensitive personal information, and the right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. Parkify has not sold personal information for monetary consideration. Parkify may share certain data with marketing analytics partners, which may constitute "sharing" under CPRA. You may opt out by contacting us as described in Section 13 or via a GPC-enabled browser.

15.2 Nevada

Nevada residents may request that Parkify not sell their personal information as defined under Nevada Revised Statutes Chapter 603A. While Parkify does not currently sell personal information, you may submit such a request to privacy@parkify.com.

15.3 Other State Residents

Residents of Virginia, Colorado, Connecticut, Texas, and other states with operative comprehensive privacy laws may exercise rights applicable under those laws by contacting us as provided in Section 13. Parkify will respond to requests in accordance with the requirements of applicable law.

This Privacy Policy is effective as of the date listed above and supersedes all prior versions.