Privacy Policy

1. Information We Collect

Personal Information

When you use NYC AutoPay, we collect the following personal information:

• Name and email address
• License plate number and vehicle registration state
• Vehicle class information
• Payment method information (processed securely by Stripe)

Usage Information

We automatically collect certain information about your use of our service:

• Log data (IP address, browser type, access times)
• Device information
• Service usage patterns
• Communication preferences

2. How We Use Your Information

We use your information to:

• Monitor NYC databases for parking tickets associated with your vehicle
• Process automatic payments for detected tickets
• Send email notifications about payments and account activity
• Provide customer support
• Improve our service and develop new features
• Comply with legal obligations
• Prevent fraud and ensure security

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

• Stripe: For payment processing and PCI compliance
• Supabase: For database and authentication services
• Resend: For email notifications
• NYC DOF: For ticket payment processing

Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

4. Data Security

We implement industry-standard security measures to protect your information:

• All data transmission is encrypted using HTTPS/TLS
• Payment information is processed by PCI DSS compliant Stripe
• Database access is restricted and monitored
• Regular security audits and updates
• Employee access is limited on a need-to-know basis

5. Payment Information

We do not store your full credit card information on our servers. Payment data is securely handled by Stripe, a PCI DSS Level 1 certified payment processor. We only store:

• Last 4 digits of your card
• Card brand (Visa, Mastercard, etc.)
• Stripe payment method ID for processing

6. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. We may retain certain information for longer periods for legal compliance, fraud prevention, and legitimate business purposes. When you delete your account, we will delete or anonymize your personal information within 30 days.

7. Your Rights and Choices

You have the right to:

• Access and update your personal information through your dashboard
• Delete your account and associated data
• Opt out of marketing communications
• Request a copy of your data
• Request correction of inaccurate information

To exercise these rights, contact us at privacy@nycautopay.com.

8. Cookies and Tracking

We use essential cookies to maintain your session and provide our service. We do not use advertising cookies or third-party tracking. You can disable cookies in your browser, but this may affect service functionality.

9. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will delete the information immediately.

10. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and share, and the right to delete personal information. We do not sell personal information.

11. International Users

Our service is primarily designed for NYC residents. If you access our service from outside the United States, your information will be transferred to and processed in the United States, which may have different privacy laws than your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. The updated policy will be effective when posted.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: