Last updated 31 August 2026 · Effective 31 August 2026
ParkMate is a marketplace that connects drivers looking for parking with people who have a space to rent. This policy explains what personal data we collect when you use the ParkMate mobile app and related services, why we collect it, who we share it with, and the choices you have.
ParkMate is operated by Flowgentic AI LLP (“ParkMate”, “we”, “us”), flowgenticai.com. For the purposes of the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the data described here.
We collect only what the service needs to work. What applies to you depends on whether you use ParkMate as a driver, as a host, or both.
| Category | What it includes | Why |
|---|---|---|
| Account | Mobile number, email address, name, profile photo, date of birth, language preference, and a cryptographic hash of your password (never the password itself). | To create and secure your account and to contact you about bookings. |
| Identity & verification | Government ID documents you upload, driving licence number, and for hosts a
business name and GSTIN. Document numbers are stored masked (for example
XXXX XXXX 1234). |
To verify users, meet legal obligations and keep the marketplace safe. |
| Vehicle | Number plate, vehicle type, make, model, colour, a photo of the plate, and your registration certificate (RC) where you submit one. | So a host can identify the vehicle that arrives, and to deter plate fraud. |
| Location | Your device location when you search for parking and when you check in or out of a booking, and the address and coordinates of any space you list. See section 3. | To show nearby spaces and to confirm you were at the space. |
| Photos | Photos you take or attach of a space before and after parking, listing photos, and QR codes you scan at check-in. We record the time our server received a photo, not the timestamp written by your device. | Evidence for the booking, and to resolve damage disputes fairly. |
| Bookings & payments | Booking history, prices, wallet balance and transactions, host earnings and payouts. For payouts we store only the account holder name, bank name, IFSC and the last four digits of the account number. | To take bookings, pay hosts and keep financial records. |
| Content you write | Reviews and ratings, in-app messages between drivers and hosts, support tickets and dispute submissions. | To run the marketplace and handle complaints. |
| Device & technical | A per-install device identifier, device name, platform, app version, push notification token, IP address, and server logs of your activity in the app. | To deliver notifications, keep you signed in, prevent abuse and diagnose faults. |
We do not sell your personal data, and we do not use it for third-party advertising.
Under the DPDP Act we rely on your consent, given when you create an account and when you grant a device permission, and on legitimate uses such as performing the service you asked for and meeting legal duties. Where the GDPR applies, our bases are contract, legal obligation, legitimate interests (safety and fraud prevention) and consent.
ParkMate collects precise location from your device, and only while the app is in use. We do not collect location in the background, and we do not track your movement between bookings.
We use it in three places:
You can refuse or withdraw the location permission in your device settings. Search will then require you to enter an area manually, and check-in verification will not work.
The app asks for camera access to scan check-in QR codes and to photograph a space before and after you park, and for photo library access if you prefer to attach an existing image. Photos are uploaded to our servers and attached to the booking or listing they belong to. They are visible to the other party in that booking and to our support team when a dispute is raised. We do not scan your photo library or access images you have not chosen.
A marketplace only works if the two sides can identify each other. When a booking is made we share your name, profile photo, rating and the vehicle’s number plate with the host, and the host’s name, photo, rating and the space’s address with the driver. Reviews you write are public on the profile they concern. We do not share your phone number, email address or identity documents with other users.
We use a small number of processors, each limited to the data its function needs:
| Provider | Purpose | Data |
|---|---|---|
| Razorpay | Payment processing and payouts | Name, contact, amount, payment instrument (card and bank details go to Razorpay, not to us) |
| Twilio | SMS one-time passcodes | Mobile number |
| Google Firebase Cloud Messaging | Push notifications | Device push token |
| Google Maps Platform | Maps, geocoding and place search | Location and search queries |
| Plate Recognizer | Number plate recognition | Plate photo |
| Surepass | Vehicle registration (RC) verification | Plate and RC details |
| Amazon Web Services | Hosting and file storage | Service data, at rest |
Each provider’s own privacy policy governs what it does with data we send it.
We disclose data where the law requires it — a court order, a valid request from law enforcement or a tax authority — and where it is necessary to investigate fraud, protect someone’s safety, or establish or defend a legal claim. If ParkMate is involved in a merger or acquisition, data may transfer to the acquiring entity under this same policy.
Card numbers, UPI IDs and net-banking credentials are entered in our payment provider’s interface and go directly to them. ParkMate never sees or stores your full card or bank account number. We keep the transaction record — amount, status, provider reference and the last four digits — because we need it for your booking history, refunds and accounting.
You can, at any time:
If you cannot access the app, email info@flowgenticai.com from the address or phone number on your account and we will action the request within 30 days.
Traffic between the app and our servers is encrypted with TLS. Passwords are stored as scrypt hashes and are never recoverable. Sessions use short-lived tokens that are rotated on use and are tied to a single device, so revoking a device signs it out everywhere it was used. Access to production data is limited to staff who need it, and administrative actions are recorded in an audit log. No system is perfectly secure; if a breach affects your data we will notify you and the Data Protection Board as the law requires.
ParkMate is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
We will update this page when our practices change, and change the “last updated” date above. If a change materially affects your rights we will tell you in the app or by email before it takes effect.
For any question about this policy or your data:
Write to info@flowgenticai.com with any grievance about how we handle your data. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.