The short version. To run an operator account we need your business identity (KYC), a bank account for payouts, and basic operational info about your lot (address, photos, capacity). We share what's strictly necessary with Stripe (payments & KYC), tax authorities (where required), and sub-processors that help us run the platform. We don't sell your data, ever. You can request a copy or deletion at any time.
01Overview
This Operator Privacy Notice explains how Park Ministry, Inc. ("Park Ministry," "we," "us") collects, uses, and shares information from operators ("you") who use the Service to list parking lots, issue passes, and receive payouts.
This notice is specific to operators. Buyers (people who purchase passes) are covered by the separate Buyer Privacy Policy.
Park Ministry operates exclusively in the United States. If you reside outside the US, do not use the Service.
02What we collect
We collect information in three buckets.
A. Information you give us
- Business identity: legal business name, DBA, EIN or SSN (sole proprietors), business address, business phone.
- Owner / officer identity (KYC): name, date of birth, last 4 of SSN, government-issued ID image. Required by federal law and our payments partner Stripe.
- Banking: routing number and bank account number for payouts. Stored by Stripe, not by us.
- Lot information: address, capacity, photos, hours of operation, accepted payment types, ADA compliance details.
- Communications: messages you send to support, sales, press, or trust & safety.
B. Information we generate
- Transaction history: passes sold, refunds processed, payouts remitted.
- Operational chronology: scanner activity (pass scanned at gate, time, lot, attendant device), session logs.
- Performance data: sell-through rate, refund rate, response time on disputes, attendance patterns.
C. Information from third parties
- From Stripe: KYC verification status, payout failures, chargeback notices.
- From identity / fraud vendors: sanctions list checks, business verification (e.g., Persona, Plaid).
- From venues or partners: if a venue confirms or revokes your authorization to operate on their property.
03How we use it
We use operator information to:
- Run the Service: list your lot, sell passes, route Buyers, settle payouts.
- Verify identity and prevent fraud: comply with KYC obligations, screen against sanctions lists, detect suspicious activity.
- Process payments and remit Form 1099-K filings to the IRS where required.
- Provide support: when you contact us, we use your account context to resolve the issue faster.
- Improve the product: aggregate and anonymized telemetry helps us understand which features matter, where the gate process bottlenecks, and what to build next.
- Send transactional and operational notifications (payouts, refunds, upcoming events, security alerts) by email and in-app.
- Send occasional marketing communications about new features, with your consent and an unsubscribe link in every message.
04Legal basis (US privacy laws)
Park Ministry operates exclusively in the United States. This notice is designed to comply with the California Consumer Privacy Act / California Privacy Rights Act ("CCPA/CPRA") and similar state-level privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA).
Although operator data is mostly business contact information (often not subject to CCPA's consumer protections), we apply CCPA-style rights to operator personal information that overlaps with consumer information, such as the personal identity data we collect for KYC.
We do not rely on GDPR legal bases. Park Ministry is not directed at users in the European Economic Area, the United Kingdom, or other jurisdictions outside the United States. If you are located outside the US, do not use the Service.
06How long we keep it
We retain operator data only as long as needed:
- Account & transactional records: at least 7 years from account closure, to satisfy US tax and financial recordkeeping requirements.
- KYC documents (ID images, etc.): 5 years after account closure, per our payments partner's regulatory obligations.
- Lot listing content (photos, descriptions): archived 90 days after delisting, then deleted unless you request retention.
- Marketing preferences: until you unsubscribe.
- Support tickets: 24 months from resolution.
- Server logs & security telemetry: 13 months.
Data subject to a legal hold (active investigation, dispute, regulatory request) is retained for the duration of the hold.
07Your rights (CCPA & similar laws)
Subject to verification of your identity, you have the following rights with respect to your personal information:
- Right to know: what personal information we have collected, used, disclosed, and (if applicable) sold.
- Right to access: a copy of the specific pieces of personal information we hold about you, in a portable format.
- Right to delete: deletion of personal information, subject to exceptions for tax, legal, and fraud-prevention obligations.
- Right to correct: correction of inaccurate personal information.
- Right to opt out of sale or sharing: we do not sell operator personal information; this right is automatically respected.
- Right to limit use of sensitive information: KYC identity documents are used only for verification and fraud prevention, never for marketing or profiling.
- Right to non-discrimination: we will not retaliate or degrade Service quality for exercising these rights.
To exercise any right, email legal@parkministry.com from the email on your account, or use the in-app "Privacy & data" page in your operator settings. We respond within 45 days (extendable once by 45 more days for complex requests, with notice).
You may designate an authorized agent in writing. We may require additional verification of you and your agent before honoring an agent-submitted request.
09Children's privacy
Park Ministry is not directed to children under 18. You must be at least 18 to create an operator account. If you believe we have inadvertently collected information from someone under 18, contact legal@parkministry.com and we will delete it promptly.
10International transfers
Park Ministry stores all operator data on servers located in the United States. We do not offer the Service in the European Economic Area, the United Kingdom, Canada, or other countries outside the US.
If you access the Service from outside the US, you do so at your own risk and you acknowledge that your information will be processed in the United States under US law, which may differ from the privacy laws of your jurisdiction.
11Security
We use industry-standard safeguards to protect operator information.
- TLS 1.2+ in transit, AES-256 at rest for sensitive fields.
- KYC documents stored by Stripe, never on Park Ministry servers in their original form.
- Bank account numbers tokenized, we see only the last 4 digits.
- Two-factor authentication available soon.
- Role-based access controls inside the company; payouts and refunds require dual approval at scale.
- Annual penetration test by an independent security firm.
No system is 100% secure. If we ever experience a breach affecting your information, we will notify you within the timeline required by applicable law (typically 30–60 days).
12Changes
We may update this notice from time to time. Material changes will be communicated at least 30 days before the effective date, by email and in the operator dashboard. The "Last updated" date at the top of this page shows the most recent revision.
13Contact
Privacy questions, data requests, or formal complaints:
Park Ministry, Inc. : Privacy team
Email: legal@parkministry.com
Mail: 2248 Broadway #2196, New York, NY 10024, United States
If you are a California resident and feel we have not adequately addressed a concern, you may contact the California Attorney General at oag.ca.gov/privacy.