Privacy by Architecture
Last Updated: January 2025 · Compliant with the Digital Personal Data Protection (DPDP) Act, 2023 & IT Act India
1. Edge-First Data Minimization
Unlike legacy surveillance systems that stream raw camera footage to external cloud servers, ParkFast processes video frames strictly inside the local edge unit installed at the facility gate.
- Raw camera frames are permanently overwritten in device RAM immediately following license plate extraction.
- No face recognition, passenger photography, or driver biometrics are ever captured or stored.
- Only alphanumeric license plate characters are converted into salted one-way hashes for access whitelist verification.
2. Information We Collect and Process
Depending on your interaction with ParkFast, we process:
- Vehicle Identification: License plate number, entry/exit timestamp, assigned bay number, and duration of stay for billing calculation.
- Payment & Billing Data: Transaction tokens, UPI settlement references, and digital tax invoices. No debit/credit card numbers or CVVs are stored on our servers.
- Host & Driver Information (P2P Rental & Valet): Name, verified mobile number, and car registration details provided voluntarily during registration.
3. Facility Owner Whitelists & Local Storage
Residential societies, schools, and corporate campuses maintain their authorized resident, student, or employee whitelists directly in local SQLite storage. This data is governed by the facility's management committee and is not sold, rented, or distributed to third-party commercial entities.
4. Data Security & AES-256 Encryption
All telemetry data transmitted between edge cameras, local controllers, and optional cloud analytics dashboards is encrypted in transit using TLS 1.3 and at rest using AES-256 standard encryption.
5. Contact the Data Protection Officer
For data access requests, vehicle record deletion, or society privacy questions, please email our security officer at: privacy@parkfast.in.