VicoPark Privacy Policy

What this covers

This policy explains what personal information Ucept LLC collects when you use VicoPark, why, who receives it, how long we keep it, and the choices and rights you have. Ucept LLC is responsible for this information.

What we collect from you

Account: your email address, and any name and display preferences you add. If you sign in with Google or Apple, we receive an account identifier and your verified email from that provider.

Vehicles: the make, model, colour, licence plate and its state or region, size, and height of the vehicles you save.

Reservations and payments: the spaces you book, when, the vehicle, the prices and charges, refunds, tips, and a record of what Stripe reports about your payments. Stripe holds your card details; we keep only a reference to the saved card.

Hosting: the address, location, details, hours, and photographs of spaces you list, and your payout status as Stripe reports it.

Stays: arrival and departure times, photographs taken at a stay (such as arrival or damage photos), and reports that a space was taken or a vehicle stayed too long.

Messages and support: messages between you and a host or customer, support cases, incident reports, reviews, and guest ratings.

Damage claims: a host’s report and photographs, and, if you dispute a claim, your account of it and any insurer and policy or claim number you choose to give.

Identity checks: where a booking requires one, Stripe checks a photo ID and a matching selfie. We receive and keep the result and the verified legal name; the document and selfie images stay with Stripe.

API keys and assistants: keys you create (we store only a one-way hash of each), their spend limits, and the assistants you connect.

Location: if you tap "Use my location", your device’s position, rounded to about 100 metres, is used to search near you. It is not saved to your account.

Technical information: the requests your device makes, network address, and approximate timing, used to run the service and limit abuse. Where a network address is used for sign-in limits it is stored only as a one-way hash. If you enable notifications, we store your browser push subscription or the native app’s Expo push token and installation identifier to deliver alerts.

Cookies and similar technology

We use only cookies that the service needs to work: to keep you signed in, to protect forms against cross-site request forgery, and briefly during Google or Apple sign-in. We also keep small settings in your browser, such as whether you dismissed a prompt.

The native app keeps sign-in credentials and an enabled notification registration in the operating system’s secure storage. Browser sign-in opens separately; browser cookies are not used as the native app’s API credentials.

We do not use advertising or tracking cookies. Our browser performance and error monitoring (Amazon CloudWatch) is separate from optional product usage counts and uses no cookies.

If optional usage sharing is available, it starts off. You can enable or disable it in Settings or the web Privacy Policy. We receive counts of selected actions, their app platform, and limited categories such as whether a search returned results. We do not include your account identity, destination, vehicle, precise location, payment details, or browsing history in these counts. Reports cover the last 30 days. The choice stays on this device; pending counts are held briefly in memory and cleared when you turn sharing off.

A random delivery reference prevents duplicate counts for 24 hours; it does not identify a visitor. A temporary tab-local sign-in marker lasts up to five minutes while returning from an external sign-in provider. Storage cleanup and backups can retain expired aggregate records beyond their reporting window. Infrastructure security logs remain separate from these optional counts.

How we use it

To create and secure your account; to show, take, and honour reservations; to take payment and pay hosts; to send the emails and alerts the service depends on; to review listings; to provide support and resolve problems, refunds, and claims; to detect and prevent fraud, abuse, and security threats; to improve the service; and to meet legal, tax, and accounting obligations.

Automated decisions

Some decisions are made automatically: listing photographs are screened by an automated service, and a clean listing may be approved without a person; a space may be paused automatically after repeated cancellations or reports; a booking may require an identity check first; and sign-in, search, and messaging are rate-limited. You can ask support to have a person review a decision that affects you.

What other users see

Hosts never see your name or email. For a booking at their space, a host sees the booking times, your vehicle’s description, and its licence plate: in full from about an hour before the stay until it ends, and otherwise only its last four characters. A host who checks a plate at their space learns only whether it has a booking and until when.

Customers see a space’s approximate area until a booking is confirmed; the exact address is then shown to that customer only.

Reviews are published without the author’s name. Messages show whether they came from the host or the guest, not a name.

Who we share it with

Service providers who process it for us, only to run the service: Stripe (payments, payouts, and identity checks); Amazon Web Services in the United States (hosting, storage, email delivery, address search, photo screening, and monitoring); Expo (native app updates and, when enabled, push delivery); your browser’s or operating system’s notification provider, for alerts you turn on; and Google or Apple, when you choose to sign in with them.

Assistants and API clients you connect, which receive what you ask them to access.

The other party to a reservation, limited as described above.

Authorities or others where the law requires it, or where we believe in good faith it is needed to protect someone’s safety, prevent fraud, or enforce our terms; and a successor if our business is merged or sold, under this policy.

We do not sell personal information, share it for targeted advertising, or let advertisers track you.

How long we keep it

Stay photographs are deleted about 30 days after the stay ends, and the vehicle’s licence plate on the booking is then reduced to its last four characters. Records of plate checks by hosts are deleted after 180 days. Emails sent to our support address are deleted from our mail store after 30 days.

Sign-in codes expire after 10 minutes. Sessions end after 90 days at most, or after 60 days without use.

Account, reservation, payment, and support records are kept while your account is open and afterwards for as long as we need them for financial, tax, safety, legal, and dispute-resolution purposes.

Security

Information is encrypted in transit and at rest, access by our staff is limited by role, and staff views of verified names are logged. No system is perfectly secure; if a breach affects your information we will tell you as the law requires.

Your choices and rights

You can view and correct your profile, vehicles, and notification preferences in settings; turn off optional emails there (notices about security, charges, refunds, subscriptions, and damage claims always send); ask us to remove saved cards; revoke API keys and assistants; sign out of all devices; export your data; and delete your account.

Deleting your account deactivates sign-in, ends your sessions, and erases your vehicles, push addresses, API keys, and saved cards. Records of completed transactions, claims, and support cases are kept as described above.

Depending on where you live, including under Texas and California law, you may have the right to know what personal information we hold about you and how we use it, to get a copy, to correct it, to have it deleted, and to opt out of its sale or use for targeted advertising (we do neither). To use a right that settings does not cover, email support@vicopark.com from your account’s address; we will verify the request and answer within 45 days. You may use an authorised agent, and we will not treat you differently for using your rights. If we decline, you may appeal by replying to our answer.

Children

VicoPark is for adults. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.

Where information is processed

We and our providers process information in the United States. By using the service from elsewhere you understand it will be processed there.

Changes to this policy

We will post any change here with a new date, and tell you by email or in the app before a material change takes effect.

Contact

Privacy questions and requests can be sent to support@vicopark.com. If you believe we hold information about you that is wrong, tell us and we will correct it.