Resident Privacy Policy

Last updated: September 8, 2026

This Privacy Policy explains how Valletto LLC ("Valletto," "we," "us") collects, uses, and shares information when you use the Valletto Resident application (the "Service"). By using the Service, you agree to this Policy.

1. Information we collect

• Contact and identity: your name, mobile phone number, and unit or residence when provided.
• Vehicle: license plate, plate state, vehicle details associated with your permit, and images of your vehicle or plate captured by the Operator's staff at check-in. The Service may use automated image processing to read the plate from those images; it does not use facial recognition or any other biometric identification. Your plate is used to match your vehicle to your permit and sessions within your Operator's records and is not used to look you up across unrelated operators.
• Payment: processed by Stripe. We receive limited details such as the last four digits, card brand, and payment status. We do not store your full card number.
• Usage and device: app activity, log data, and device information used to operate and secure the Service.

2. How we use information

• Provide and operate the Service, including permits and payments.
• Verify your identity by sending a one-time passcode by text message.
• Process payments and send receipts and billing notices.
• Send service messages about your parking and permits.
• Provide support, prevent fraud and abuse, and keep the Service secure.
• Comply with our legal obligations.

3. How we share information

• Your valet or parking Operator: the company that operates parking at your location, so they can manage your permit and parking.
• Service providers: Stripe (payments), Google Firebase (authentication, hosting, and database), and our text-messaging provider, among others that help us run the Service.
• Legal and safety: when required by law or to protect rights, safety, and the integrity of the Service.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information.

4. Text messages

We send text messages for verification and service notifications, as described in our Terms of Service. Message and data rates may apply. Reply STOP to opt out of non-essential messages. We do not share your phone number with third parties for their own marketing.

5. Data retention

We keep information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Session records, including vehicle images and plate readings, are kept for 24 months after the session ends, and longer while a claim, dispute, or legal hold is open. Payment records are kept for 7 years as tax and financial rules require. Account information is kept for the life of your account and 90 days after it closes. We delete or de-identify information when it is no longer needed.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or port your information, and to opt out of certain processing. Residents of California (CCPA/CPRA) and similar jurisdictions have specific rights, including the right not to be discriminated against for exercising them. To make a request, contact us using the details below. You can also manage notifications and cancel permits in the app.

7. Security

We use technical and organizational measures designed to protect your information. No system is completely secure, and we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 18, and we do not knowingly collect information from them.

9. Changes to this Policy

We may update this Policy from time to time. We will update the "Last updated" date and, where appropriate, notify you of material changes.

10. Contact

Questions or privacy requests? Contact Valletto LLC at support@valletto.io, 1111 Brickell Avenue, Suite 1000, 10th Floor, Miami, Florida 33131.