Privacy Policy
Last updated:
Legal entity name, address and tax ID (STIR) will be added later.
1. Operator and scope
[Operator: ParkBor, contact email parkbooor@gmail.com]
This policy applies to the ParkBor mobile app, ParkBor CRM (crm.parkbor.uz), the parkbor.uz website and the Telegram bot @parkborbot.
2. What we collect
- Sign-in with Telegram: Telegram ID, name, username. A phone number is stored only if you share it with the bot yourself.
- Vehicle: the plate number and type you enter.
- Bookings and payments: lot, time, amount, status. Bank card details are not stored by ParkBor; they are entered on the payment provider’s page.
- Device notification token (push), to send notifications.
- Approximate location: only with your permission and while you use the map; sent rounded to about 110 m to find lots nearby.
- Camera: only for operators scanning QR codes; images are not stored.
- Owners and operators (CRM): lot data, prices, the list of operators and a log of important actions (audit).
- Technical logs: error monitoring and server logs are configured to avoid personal data. IP addresses may remain in infrastructure logs.
- Website: no cookies, advertising or analytics tools. No forms.
3. Why we use it
To sign you in, make bookings and payments, send notifications, prevent abuse, keep the system secure and keep accounting records. Data is not sold for advertising.
4. Third-party processors
- Railway: server and database hosting.
- Cloudflare: DNS and delivery of the site and map traffic.
- Telegram: sign-in and notifications.
- Expo: delivery of app push notifications.
- Payment providers: accepting payments.
- OpenStreetMap / OpenFreeMap: map tiles (the device IP address and the viewed area are visible to the tile provider).
- Nominatim (OpenStreetMap): address search in the CRM.
- Error monitoring (Sentry): without personal data.
Data may be processed on infrastructure outside Uzbekistan.
5. Retention
- Account data: while the account is active; on deletion name, username and phone are erased.
- Booking and payment records: kept for accounting, anonymised after the account is deleted.
- Notification log: 180 days.
- Audit log: 365 days by default; plate numbers are masked in it.
- Notification tokens: removed on sign-out or account deletion.
- Infrastructure logs: short period.
6. Your rights
You may ask for information about your data, request correction or deletion, and withdraw location and camera permissions in your device settings at any time. A driver deletes the account in the app: Delete account. For other requests write to parkbooor@gmail.com.
7. Security
Traffic uses HTTPS; the refresh token is kept in the device’s secure storage; QR codes are signed and single-use; access is limited by role; important actions are logged. Absolute security cannot be guaranteed.
8. Changes
This policy may be updated. The current version is published on this page with the date above.
9. Contact
parkbooor@gmail.com