Privacy Policy for Valzy Captain

1. Scope of this Policy

This Privacy Policy applies to the Valzy Captain application, our website, support channels, OTP login system, QR and token-based valet workflows, vehicle tracking features, vehicle condition image capture, location capture features, push notifications, and related operational services.

Valzy Captain is used by drivers, venue staff, and administrators to coordinate vehicle parking, retrieval, verification, and operational communication.

2. Information We Collect

We collect only the information necessary to provide and operate the service. Depending on how you use the app, we may collect:

• Phone number used for OTP login and account access
• Vehicle registration number and related vehicle identifiers
• Vehicle condition images captured during parking, handover, or verification
• QR code scans and valet token information
• Foreground location data captured when a parking action is confirmed
• Device information such as device type, operating system, and app version
• Usage and operational data such as timestamps, workflow status, and service logs
• Communication records related to service alerts, notifications, and support

We do not intentionally collect information that is unrelated to app operation.

3. OTP Login and Account Access

Valzy Captain uses OTP-based authentication. Your phone number is used to verify your identity, access your account, and support operational communication.

We use this information only for:

• account login and verification
• service-related communication
• security and fraud prevention
• operational workflow management

4. How We Use Your Information

We use the information we collect to:

• authenticate users through OTP
• operate valet parking and vehicle retrieval workflows
• scan QR codes and valet tokens
• identify and match vehicles correctly
• capture and store vehicle condition images
• record parking location coordinates when a parking action is confirmed
• send push notifications and operational updates
• assign and manage tasks for drivers, venue staff, and admins
• maintain service logs and records
• troubleshoot technical issues
• prevent misuse, fraud, or unauthorized access
• comply with legal, regulatory, operational, and security obligations
• resolve disputes and verify service activity

5. Camera Permission

We request camera access because it is necessary for the core functioning of Valzy Captain.

Camera access is used for:

• scanning Valzy QR codes and valet tags
• AI-assisted vehicle number plate reading
• capturing vehicle condition photographs before parking or handover
• supporting operational verification and liability documentation

Images and scanned information are used only for valet operations, verification, safety, and dispute resolution.

6. Push Notification Permission

We request push notification permission so we can send real-time operational alerts, even when the app is not open.

Push notifications may be used for:

• vehicle retrieval requests
• driver assignment updates
• workflow alerts
• operational notices
• service coordination messages

Push notifications are used only for service-related and operational communication.

7. Foreground Location Permission

We request foreground location access only when a parking action is confirmed in the app.

We use location data to:

• capture the exact place where a vehicle is parked
• help authorized staff locate the vehicle later
• support retrieval in large parking lots, garages, and multi-level parking areas

Important points:

• we do not continuously track your location in the background
• we do not monitor your location all the time
• location is collected only when you actively confirm a parking action in the app

Location data is used only for parking and retrieval operations.

8. Vehicle Photos and Storage

Vehicle condition photographs captured in the app are stored securely in AWS S3 for operational verification, liability management, and dispute resolution.

These photos may be linked with the relevant vehicle, parking event, or service record.

9. Storage and Security

User data is stored securely on AWS-hosted infrastructure.

We use reasonable technical and organizational safeguards to protect data, which may include:

• access controls
• role-based permissions
• secure cloud storage
• authentication safeguards
• restricted staff access
• operational logging
• monitoring and abuse prevention controls

No system is perfectly secure, but we take commercially reasonable steps to help protect your data from unauthorized access, misuse, alteration, disclosure, or destruction.

10. Third-Party Service Providers

We may share limited data with trusted third-party service providers only when necessary for core platform functionality.

These may include:

• WhatsApp Business API, for service communication and notifications
• Firebase Cloud Messaging, for push notifications
• Expo Analytics, for app analytics, diagnostics, and performance monitoring
• AWS, for hosting, storage, and infrastructure

We share only the minimum information needed for these services to function properly.

These providers may process data according to their own terms and privacy policies, but only to the extent needed to provide their services to us.

11. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

In general:

• account and operational data are retained while needed to provide the service
• vehicle condition images and workflow records may be retained for verification, safety, audit, dispute resolution, legal, or regulatory reasons
• data may be retained until you request deletion, unless we are required to retain it for legal, security, compliance, or fraud prevention purposes

When data is no longer needed, we will take reasonable steps to delete, anonymize, or securely archive it.

12. No Background Tracking

Valzy Captain does not continuously track your location in the background.

We only collect location when you actively confirm a parking action in the app.

13. No Sale of Personal Data

We do not sell, rent, or trade personal data.

We do not use your personal data for third-party advertising or behavioral profiling.

14. Children’s Privacy

Valzy Captain is intended for users aged 18 and above and is not designed for children.

We do not knowingly collect personal data from children.

If we learn that we have collected personal data from a child without appropriate authorization, we will take steps to delete it as required by law.

15. Your Rights and Choices

Subject to applicable law, you may request:

• access to your personal data
• correction of inaccurate or incomplete data
• deletion of your personal data
• withdrawal of consent where processing is based on consent
• a copy of relevant service information where applicable
• redress of complaints or grievances

To exercise these rights, contact us using the details below.

16. Account Deletion and Data Deletion Requests

If you have an account with Valzy Captain, you may request deletion of your account and associated personal data.

You can submit a deletion request by contacting:

If you provide a web deletion page, users should also be able to request deletion through that page.

When we process a valid deletion request, we will delete the associated account data and personal information from our systems, except where retention is required for legal compliance, fraud prevention, security, dispute resolution, or other lawful purposes.

Some information may remain in backups for a limited period until those backups are overwritten or deleted under our normal backup cycle.

17. Legal Disclosures

We may disclose information if we believe it is necessary to:

• comply with applicable law, regulation, court order, or lawful request
• respond to government or law enforcement requests
• protect the rights, safety, property, or security of Valzy, our users, or others
• detect, prevent, or investigate fraud, abuse, or security incidents
• enforce our policies and operational safeguards

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, or operational practices.

When we make material changes, we will update the “Last Updated” date above and may provide additional notice through the app, website, or other service channels where appropriate.