Effective date: August 6, 2026
In short: We collect what's needed to sell you parking and get you through the gate — your contact details, what you bought, and a record of the payment. We never see your full card number. We don't sell your data or use it for advertising.
MySpot ("we", "us") provides parking payment and access technology for venues and event operators. This policy explains what we collect from drivers and customers, why, and what you can do about it.
When you park at a venue, that venue is responsible for its own use of your information. This policy covers our handling of it.
We never receive or store your full card number. Card details are captured directly by our PCI-compliant payment processor — in a secure field hosted by them on web checkout, or by certified payment hardware at a terminal. What comes back to us is a payment reference and limited details such as the last four digits, card brand, and authorization code, which appear on your receipt and let the venue reconcile and refund the transaction.
If you pay with stablecoin, we record the blockchain transaction reference and the wallet address the payment came from. See section 5.
If you choose to sign in with Google or Apple, we receive your name and email address from that provider to identify your passes. We don't receive your password. If you add a pass to a mobile wallet, that wallet provider handles the pass under its own privacy policy.
We do not sell your personal information, and we do not use your contact details for marketing or advertising. Messages we send are transactional — about a purchase you made.
Contact details you provide are used to send information about your purchase: your pass, your receipt, a sign-in code you asked for, a refund confirmation, or notice that a payment didn't go through. Text messages are only sent if you provide a mobile number, and standard message and data rates may apply. You can reply STOP to opt out of texts; see our SMS Consent page. Opting out of texts doesn't affect emails needed to deliver something you bought.
We share personal information only as described here:
If you pay with stablecoin, the payment settles on a public blockchain. The amount, the wallet address it came from, the receiving address, and the time are recorded on that public ledger. This is a property of the blockchain, not something we choose — the record is permanent, visible to anyone, and cannot be edited or deleted by us or by you. Consider this before paying from a wallet you'd prefer not to link to a purchase.
We keep transaction records — including the contact details attached to a purchase — for as long as needed to support the purchase and to meet accounting, tax, and legal obligations, typically a minimum of seven years for financial records.
Passes and their scan status are kept while the event is current and afterwards as part of the transaction record. One-time sign-in codes are short-lived and expire within minutes. Server logs are kept for a limited period for security and diagnostics.
All data in transit is encrypted with TLS. Full card numbers never reach our systems. Entry codes are cryptographically signed and expire on a short cycle, so a copied code stops working. Access to operator dashboards requires authentication, sensitive actions such as refunds require an additional approval code, and secrets are held in a managed key vault rather than on disk.
No system is perfectly secure, but we work to protect your information and to limit what we hold in the first place.
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, ask us to delete it, object to or restrict how we use it, receive a portable copy, and not be discriminated against for exercising these rights.
To make a request, email support@myspot.la from the address associated with your purchase, or tell us the phone number used. We'll respond within the time required by applicable law and generally within 30 days.
We may need to keep certain records — such as completed transactions — where the law requires it, even after a deletion request. Records already written to a public blockchain cannot be deleted.
MySpot is intended for adults purchasing parking. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.
Our pages may link to venue websites, map services, or wallet providers. We're not responsible for their privacy practices — review their policies before providing information to them.
We may update this policy. The effective date above shows when it last changed. Material changes will be reflected here before they take effect.
Questions, requests, or complaints about privacy: support@myspot.la. If you're not satisfied with our response, you may have the right to complain to your local data protection authority.