Privacy Policy

What we store

Account data: your name, email address, hashed password and language preference. Organisation data: your team's name, its members and their roles.

Content: the tasks, comments, checklists, labels, supplies and maintenance notes, equipment records (with status and maintenance notes), photos, routes (imported from GPX, KML or GeoJSON, or drawn by hand on the map or a plan), areas drawn on the map and uploaded site plans (PDF or image floor plans) your team creates, including their locations on the map or on a plan.

Billing data: your plan and billing history. At checkout our payment provider also collects the billing address, and a VAT number if you enter one, to work out the right VAT — those are held by the payment provider, not on our servers. Card details are handled entirely by our payment provider and never reach our servers.

Technical data: server logs (including IP addresses), kept for security and debugging.

Cookies and on-device storage

The app uses a single session cookie to keep you logged in — it is first-party, inaccessible to scripts and expires after 30 days. This website sets no tracking cookies; we use anonymous, cookie-less page analytics with no cross-site tracking. If you switch the language on this website, we set one functional cookie (NEXT_LOCALE) so it opens in your language next time — it stores nothing but the language code and is not a tracking cookie.

So the app keeps working in the field with no signal, it also keeps a copy of your recent tasks, notes, labels, equipment and team list in your browser's own storage on the device you use, together with your map and display preferences. Photos you attach while out of signal wait in the same on-device storage until they can be uploaded. This copy stays on the device, expires after 7 days (photos waiting to upload stay until they are sent), and is deleted when you sign out — including any photos still waiting. Clearing your browser data removes it immediately.

How we use your data

To run the service, process payments, answer support requests and keep the platform secure. We do not sell your data, show ads or share anything with advertising networks.

Where your data lives

Data is stored encrypted in a managed cloud database with daily backups; photos and uploaded plans live in secure object storage. We rely on a small number of infrastructure providers to run Park Manager: hosting (Railway, Vercel), object storage (Cloudflare R2) and payments (Stripe). Vercel also provides the anonymous, cookie-less page analytics on this website.

Two more providers see a narrow slice of data: Resend delivers our transactional emails and receives names and email addresses for that purpose, and Mapbox serves the maps in the app — when a map loads, Mapbox receives your IP address and the map area you are viewing. OpenStreetMap tile servers are used as a fallback map source.

How long we keep it

For as long as your account is active. If you cancel a paid plan, your organisation simply continues on the free plan and your data is kept; we delete it on request, and you can ask for a full export at any time. Backups expire automatically within 30 days.

Your rights

Under the GDPR you can request access, correction, export or deletion of your personal data, or restrict its processing — just write to hello@parkmanager.io. You can also lodge a complaint with your local data protection authority.

Changes to this policy

We'll post any changes on this page and update the date above. If a change meaningfully affects your rights, we'll email account owners first.