ParkAfrica ('we', 'our', or 'us') operates a cloud-based parking management platform available at parkafrica.io and related subdomains. This Privacy Policy describes how we collect, use, store, and share personal information when you use our services, whether as a parking operator (company) or as an end user (subscriber).

By accessing or using ParkAfrica, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform.

We are committed to protecting your personal data in accordance with applicable data protection laws, including the Rwanda Data Protection Law (Law No. 058/2021) and other relevant regional legislation.

We collect the following categories of personal information:

Account and identity data: When you register as a company or subscriber, we collect your name, email address, phone number, and organisation details.

Parking and usage data: We collect information about parking lot configurations, space assignments, occupancy events, access logs, and subscription details.

Payment data: We collect billing information necessary to process subscription payments. Full payment card details are handled by our certified payment processors and are never stored on our servers.

Technical data: We automatically collect IP addresses, browser type, device identifiers, operating system, referring URLs, and session information when you use our platform.

Analytics data: We use Vercel Analytics and Google Analytics to understand how users interact with our platform. These tools collect anonymised usage data including page views, session duration, and navigation paths.

Communications data: If you contact our support team, we retain records of that correspondence.

We use your personal data for the following purposes:

• To create and manage your account
• To provide, operate, and improve the ParkAfrica platform
• To process subscription payments and issue receipts
• To send transactional emails (booking confirmations, payment receipts, expiry reminders)
• To send SMS notifications related to your parking activity
• To enforce our Terms of Service and Acceptable Use Policy
• To detect and prevent fraud or security incidents
• To comply with legal obligations
• To analyse platform usage and improve performance
• To respond to support requests

We do not use your personal data for automated decision-making that produces legal effects without human review.

Vercel Analytics: We use Vercel Analytics to measure performance and usage patterns on our platform. Vercel Analytics is privacy-friendly and does not use cookies or collect personally identifiable information. Data is aggregated and anonymised.

Google Analytics: We use Google Analytics 4 (GA4) to understand user behaviour across our website and application. Google Analytics uses cookies to collect information such as how often users visit, which pages they view, and what site they used prior to visiting ours. We use this data only to improve our platform. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

We do not sell analytics data to third parties.

We do not sell your personal data. We may share your data in the following limited circumstances:

Service providers: We share data with trusted third-party providers who help us operate the platform, including cloud hosting providers, email delivery services (Brevo), analytics providers, and payment processors. These providers are contractually bound to protect your data.

Company operators: If you are a subscriber, your parking operator (the company whose lot you have subscribed to) can see your subscription details, vehicle information, and access logs relevant to their lot.

Legal requirements: We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights or the safety of others.

Business transfers: If ParkAfrica is involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data is subject to a different privacy policy.

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained for the duration of your account plus 12 months after deletion
• Payment records are retained for 7 years to comply with financial regulations
• Access logs and parking event data are retained for 24 months
• Support correspondence is retained for 3 years
• Analytics data is retained in aggregated, anonymised form indefinitely

You may request deletion of your personal data at any time, subject to our legal retention obligations.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right to access: You may request a copy of the personal data we hold about you.

Right to rectification: You may request correction of inaccurate or incomplete data.

Right to erasure: You may request deletion of your personal data, subject to legal retention requirements.

Right to restriction: You may request that we limit how we process your data in certain circumstances.

Right to portability: You may request your data in a structured, machine-readable format.

Right to object: You may object to processing based on legitimate interests.

To exercise any of these rights, contact us at privacy@parkafrica.io. We will respond within 30 days.

We implement industry-standard security measures to protect your personal data, including:

• End-to-end encryption for data in transit (TLS 1.2+)
• Encryption at rest for sensitive stored data
• Role-based access controls limiting who can access data
• Regular security audits and vulnerability assessments
• Secure authentication with session management

Despite these measures, no system is completely secure. We encourage you to use strong passwords and to notify us immediately if you suspect any unauthorised access to your account.

We use cookies and similar tracking technologies. Please refer to our Cookie Policy for full details on the cookies we use, their purposes, and how to manage your cookie preferences.

ParkAfrica is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without verifiable parental consent, we will delete that information promptly. If you believe we may have data from a child, contact us at privacy@parkafrica.io.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the platform. The 'Last updated' date at the top of this page reflects the most recent revision. Your continued use of ParkAfrica after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

ParkAfrica Data Privacy Email: privacy@parkafrica.io Address: Kigali, Rwanda

We aim to respond to all privacy-related enquiries within 30 business days.