Privacy Policy

LinkNPark ("we", "our", or "us") is a vehicle identity and contactability service based in India. Our platform lets vehicle owners place QR stickers on their vehicles so that anyone — a parking attendant, another driver, an emergency responder — can reach them instantly without needing an app.

We collect the minimum data required to operate the service:

• Phone number — collected via Truecaller 1-tap login or OTP verification. Used as your account identity.
• Vehicle details — registration number, vehicle type, name, and color that you voluntarily enter when activating a sticker.
• Sticker codes — the unique QR code IDs linked to your vehicles.
• Push notification token — your device's push token so we can send real-time alerts when someone scans your sticker.
• Incident reports — reason and optional message submitted by public scanners (e.g., "Blocking my driveway").
• Usage data — basic server logs (timestamps, IP addresses) retained for up to 30 days for security purposes.

When anyone scans your sticker QR code, they see only:

• Your vehicle type and color (e.g., "Silver Sedan")
• A "Contact Owner" button that sends a push notification to your phone
• A pre-set reason selector (Blocking driveway, Lights on, etc.)

We use the data we collect to:

• Authenticate you and secure your account
• Link your sticker QR codes to your vehicle profile
• Deliver push notifications when your sticker is scanned
• Display incident history in your dashboard
• Send transactional emails (OTP codes, security alerts)
• Diagnose server errors and improve reliability

We do not use your data for advertising, profiling, or selling to third parties.

We share data only with the following service providers, who are contractually bound to protect it:

• Supabase — our database provider (servers in the EU/US). Stores your account, vehicle, and incident data.
• Truecaller — used for phone number verification during login (OAuth 2.0 PKCE). We receive only your verified phone number — no call logs or contacts.
• Resend — transactional email delivery for OTP codes.
• Expo / Apple / Google — for delivering push notifications to your device.
• Render — our backend hosting provider (servers in the US).
• Cloudflare — CDN and DDoS protection for the website.

We may disclose data if required by Indian law or a valid court order.

Your data is retained for as long as your account is active. You can delete your account at any time by contacting us at privacy@linknpark.in. Upon deletion:

• Your account, vehicle profiles, and sticker associations are permanently deleted within 7 days.
• Incident reports submitted by public users (which do not contain your phone number) may be retained for up to 90 days for fraud prevention.
• Server access logs are deleted after 30 days.

We implement industry-standard security measures:

• All data in transit is encrypted via HTTPS / TLS 1.3
• Authentication uses signed JWT tokens with a 90-day expiry
• Phone verification uses Truecaller's OAuth PKCE flow — we never handle your password
• Database access is restricted to server-side API calls only using service-role keys
• OTP codes expire after 5 minutes and are single-use

Under applicable law (including India's DPDP Act, 2023), you have the right to:

• Access — request a copy of all data we hold about you
• Correction — update any incorrect information via the app or by emailing us
• Deletion — request permanent erasure of your account and associated data
• Portability — receive your data in a machine-readable format
• Objection — opt out of any non-essential data processing

To exercise any of these rights, email privacy@linknpark.in. We respond within 7 business days.

LinkNPark is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with their data, please contact us and we will delete it promptly.

We may update this Privacy Policy as the service evolves. We will notify registered users of material changes via push notification or email at least 7 days before the change takes effect. The "Last updated" date at the top of this page always reflects the most recent revision.