Payments
Card data is entered only in hosted fields from Stripe or Square, which keeps us in PCI SAQ A scope. The venue is the merchant of record.
Security and compliance
Valet touches money, personal data and text messages. Here is how we handle each. This page describes our design and is not legal advice.
Price display and tips
Guests see one total before payment, taxes are separate lines and tips are optional, labeled as tips, never taxed and routed to the venue.
Text messaging
Messages are transactional. We record consent before texting, include opt-out language and stop immediately when a guest replies STOP.
Personal data
Phone numbers are encrypted and masked in logs. Plates and photos are deleted on a schedule. Every human action in the portal is audited.
Access control
Role-based access, hashed passwords, MFA for our own staff and signed, expiring links for drivers.
Receipts and claims
Receipts carry the venue’s legal name, address and license details, and incidents follow a written claims workflow.
Want to see it on your curb?
Book a short walkthrough and we will set up a demo with your rate card.