Privacy policy

SmartPark is a parking permit, patrol and billing service for condominium corporations, property management companies and security agencies, run by Anvil Digital, a sole proprietorship in Ontario, Canada (“we”, “us”). This policy explains what personal information SmartPark handles, why, and the choices you have. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Who is responsible for your information

The property management company, condominium corporation or security agency that invited you to SmartPark decides what information about residents, units, vehicles and visits is kept. We process that information on their behalf to provide the service. For your own account (your name, email and sign-in), we are responsible.

What we collect

• Account details: name, email address, phone number (optional) and your role (for example resident, property manager, agency admin or officer).
• Resident and property details: units, parking spots, vehicles and licence plates, visitor parking permits, and messages from property management.
• Patrol records: officer check-ins and check-outs at a property, with the time and, when the officer allows it on their phone, the phone’s location at check-in. We only use location while the app is open, never in the background.
• Parking infractions: plate, vehicle details, reason, time and photos taken by the officer. Infraction photos are deleted automatically after 180 days unless a shorter period is set; the infraction record is kept.
• Billing records: security agencies’ rates, invoices and the visits they bill, and billing contacts for properties.
• Technical information: sign-in sessions (cookies needed to keep you signed in) and server logs used to keep the service secure and fix problems. We don’t use advertising or third-party analytics trackers.

How we use it

Only to provide and support SmartPark: managing permits and parking, recording patrols and infractions, invoicing, sending account emails (invitations, password resets), keeping the service secure, and meeting legal obligations. We don’t sell personal information or use it for advertising.

QuickBooks Online

A security agency can connect its own QuickBooks Online company so SmartPark can send it the invoices the agency issues. When an agency admin connects QuickBooks, SmartPark:

• reads the company name, products and services, and tax codes, so the admin can choose how invoices are set up;
• creates or finds a customer for each property the agency invoices, and creates and voids the invoices the agency issues in SmartPark.

SmartPark doesn’t read the agency’s other accounting data. The QuickBooks access tokens are encrypted before they are stored and are never shown to anyone. The agency can disconnect at any time from Billing → QuickBooks in SmartPark or from the Apps section of QuickBooks. Either way SmartPark loses access right away, and disconnecting in SmartPark also deletes the stored tokens. Intuit’s own handling of QuickBooks data is covered by Intuit’s privacy statement.

Who we share it with

Within SmartPark, people see only what their role needs. For example, property management sees its own properties’ residents and permits, and an agency sees the properties it patrols. We use these service providers to run SmartPark:

• Supabase (database, sign-in and file storage), with data stored in Canada (Montreal region);
• Vercel (website hosting), which processes requests in the United States;
• Resend (account emails), in the United States;
• Intuit (QuickBooks Online), only for agencies that connect it.

Information processed in the United States may be accessible to authorities there under US law. We may also disclose information when the law requires it.

How long we keep it

As long as the organization that uses SmartPark needs it to provide the service, or as the law requires (for example, invoices for tax purposes). Infraction photos are deleted on the schedule above. When you delete your account, we remove your personal details from it; records an organization must keep, such as issued invoices and infractions, stay without your name.

Security

Data is encrypted in transit, access is limited by role in the database itself, and sensitive credentials such as QuickBooks tokens are encrypted before they are stored.

Your choices and rights

You can see and update your details in SmartPark, and delete your account from the Account page (website or app). You can ask us for access to the personal information we hold about you, or to correct it, by emailing privacy@anvildigital.ca. If your information was added by your property management company or condominium corporation, we may refer your request to them. If you’re not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Changes

We’ll post any changes here and update the date above. For significant changes we’ll tell account holders by email.

Contact

Anvil Digital, Ontario, Canada · privacy@anvildigital.ca