Data protection
DRAFT — placeholder text pending review by New York counsel. Do not rely on it as legal advice.
Roles
The venue decides why drivers’ data is collected. VroomPark processes it on the venue’s behalf.
Security measures
Encryption in transit and at rest for phone numbers, role-based access, audit logging and secrets kept outside source code.
Retention
Automatic retention jobs remove message bodies, plates, photos and old phone numbers on a schedule.
Sub-processors
Payment processors, a messaging carrier aggregator and cloud hosting in the United States. [List to be maintained.]
Incidents
We keep a written incident response plan and notify affected parties as the law requires.
Requests
To exercise a data right, write to hello@vroompark.example.