1. Introduction
Onyx Valet Technologies, Inc. ("Onyx Valet," "we," "us," or "our") operates a software platform that helps hospitality and residential properties manage valet parking, vehicle retrieval, and guest access. This Privacy Policy explains what personal information we collect through the Onyx Valet website, mobile-friendly web app, and related services (collectively, the "Service"), how we use it, and the choices available to you.
By using the Service, you agree to the practices described below. If you do not agree, please do not use the Service.
2. Who This Policy Applies To
This policy applies to four categories of users:
- Property administrators and managers who configure the Service for their venue.
- Valet staff who issue tickets, claim retrieval jobs, and log vehicle movements.
- Residents who request their vehicles through a resident account.
- Guests who receive a temporary QR pass to use valet at a property.
If a property invites you to use the Service, that property is the controller of the personal data you submit, and Onyx Valet is the processor that handles the data on its behalf. For our own customers (the property), Onyx Valet is the controller.
3. Information We Collect
3.1 Information you give us
- Account information: name, email address, phone number, role (manager, valet, resident, guest), and unit or apartment number for residents.
- Authentication credentials: passwords or one-time codes used to verify your identity.
- Vehicle information: make, model, color, license plate, parking spot, and any notes you add to a ticket.
- Communications: messages you send through support channels, contact forms, or demo requests.
3.2 Information we collect automatically
- Usage data: pages viewed, actions taken (ticket issued, claim, mark ready, mark delivered), timestamps, and the role under which the action was taken.
- Device data: browser type, operating system, IP address, and approximate location derived from IP, used for security and diagnostics.
- Cookies and local storage: we use first-party cookies and browser
sessionStorage/localStorageto keep you signed in, remember which property you are working at, and cache active tickets so the Service still works during brief network drops. We do not use third-party advertising cookies.
3.3 Information from other sources
If a property administrator invites you, the property may provide your name, email, phone number, role, and unit number so we can pre-create your account. Vehicle information may also be carried over from a previous ticket if you opt to save it to your account.
4. How We Use Information
We use personal information to:
- Operate the Service — issue tickets, route retrieval jobs to valet staff, and show residents and guests the status of their vehicle.
- Send transactional notifications — SMS messages from a Twilio-provisioned phone number to alert you when your car is being retrieved or is ready, and email or SMS for account verification.
- Provide customer support — diagnose issues you report, restore lost tickets, and answer questions.
- Maintain security — detect and prevent fraud, unauthorized access, and abuse of the Service.
- Improve the Service — analyze aggregate usage, fix bugs, and design new features. Where reasonably possible we use de-identified or aggregated data for this purpose.
- Comply with law — respond to lawful requests from public authorities, enforce our Terms of Service, and protect rights, property, or safety.
We do not sell your personal information, and we do not use it for cross-context behavioral advertising.
5. How We Share Information
We share personal information only in the following circumstances:
- With the property you use: the property's authorized administrators, managers, and valet staff can see information necessary to deliver service to you (your name, vehicle, ticket status, retrieval history at that property).
- Service providers (sub-processors): vendors that help us run the Service. As of the effective date these include:
- Supabase Inc. — database, authentication, and storage (hosted in the United States).
- Netlify, Inc. — web hosting and serverless functions.
- Twilio Inc. — SMS notifications.
- Business transfers: if Onyx Valet is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
- Legal and safety: when we believe disclosure is required by law, regulation, legal process, or governmental request, or necessary to protect the rights, property, or safety of Onyx Valet, our customers, or others.
- With your consent: for any other purpose disclosed at the time we collect the information.
6. SMS Notifications
If you provide a mobile phone number, you consent to receive transactional SMS messages from Onyx Valet related to your tickets — for example, "A valet is now retrieving your vehicle" or "Your car is ready." Message and data rates may apply. You can stop receiving SMS by replying STOP to any message; if you do, we may not be able to deliver time-sensitive vehicle status updates.
7. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy:
- Active accounts — for as long as you use the Service.
- Ticket and activity logs — typically up to 24 months after the ticket is closed, to support customer service, billing reconciliation, and incident review.
- Audit and security logs — up to 24 months.
- Backups — encrypted backups are rotated and overwritten on a rolling 30-day window.
When a property terminates its subscription, we delete or de-identify resident and guest personal data associated with that property within 90 days, except where retention is required by law.
8. Security
We use industry-standard safeguards to protect personal information, including TLS encryption in transit, encryption at rest for managed databases, role-based access controls, row-level security policies, and audit logging. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by applicable law.
9. Your Choices and Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your account and associated personal information.
- Receive a copy of your information in a portable format.
- Object to or restrict certain processing.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with a supervisory authority.
To exercise these rights, contact us at onyxvaletsupport@onyxvalet.co. If your data was provided to us by a property, we will direct your request to that property where appropriate.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us and we will delete it.
11. International Transfers
Onyx Valet is based in the United States, and our service providers process data in the United States. If you access the Service from outside the U.S., you understand and consent to the transfer and processing of your information in the U.S. We rely on standard contractual clauses or other lawful transfer mechanisms where required.
12. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies separately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a notice in the Service before the changes take effect, and we will update the "Last updated" date at the top of this page. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
14. Contact Us
Questions, requests, or complaints about this Privacy Policy can be sent to:
Onyx Valet Technologies, Inc.
Attn: Privacy
Email: onyxvaletsupport@onyxvalet.co