Privacy Policy
Last updated: 6 February 2025
📱 ParkingPermitPal WhatsApp Bot
🌐 Parking Permit Booker Web App
ParkingPermitPal helps UK tradespeople and residents book visitor parking permits.
We offer two services: a WhatsApp bot for tradespeople and a web app
for direct booking. This policy covers both.
1. WhatsApp Bot (ParkingPermitPal)
Our WhatsApp service allows tradespeople to request parking permits through their clients' council accounts.
Data We Collect
| Data Type |
Purpose |
Retention |
| Phone number |
Identify you on WhatsApp, send confirmations |
Until you request deletion |
| Vehicle registration |
Book parking permits |
Until you request deletion |
| Postcode/address |
Determine parking zone and council |
Until you request deletion |
| Council portal credentials (residents) |
Log in to book permits automatically |
Encrypted; deleted on request |
| Conversation history |
Maintain context for bookings |
24 hours |
How We Protect Your Council Credentials
🔒 Your parking portal password is encrypted using AES-256-GCM encryption — the same standard used by banks and government systems.
Security measures:
- Encryption at rest: Credentials are encrypted before being stored in our database
- Encryption in transit: All data transmitted over HTTPS/TLS
- Access controls: Only our automated booking system can decrypt credentials at the moment of booking
- No human access: Our team cannot view your password
- Secure deletion: When you disconnect, credentials are permanently deleted
2. Web App (Parking Permit Booker)
The web app stores data locally on your device.
Data We Collect
If you check "Remember me":
- Username and password stored locally in your browser
- Credentials go directly to the council portal - never to our servers
- Session cookies: Stored temporarily to make booking requests
- Vehicle information: Stored locally in your browser (IndexedDB)
- Booking history: Stored locally for your reference
3. Data We Don't Collect
- We don't collect your name or personal details beyond what's needed for bookings
- We don't sell or share data with third parties for marketing
- We don't use your data for advertising
4. Data Sharing
We share data only with:
- Council parking portals: To book permits (using your credentials)
- WhatsApp/Meta: For message delivery (WhatsApp Privacy Policy)
- Infrastructure providers: Vercel (hosting), Supabase (database) — with strong data protection
5. Your Rights (UK GDPR)
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Delete your account and all data
- Portability: Receive data in a machine-readable format
- Object: Opt out of certain processing
To exercise these rights, message us on WhatsApp or email us.
6. Data Retention
- Active accounts: Data retained while you use the service
- Inactive accounts: Deleted after 12 months of inactivity
- Conversation context: Cleared after 24 hours
- Booking history: Retained for 90 days, then deleted
7. Third-Party Services
This service connects to council parking portals (*.tarantopermits.com).
Please review your council's privacy policy for how they handle data.
8. Changes to This Policy
We may update this policy. Significant changes will be communicated via WhatsApp or on this page.
9. Contact