Valetop – Privacy Policy

Last updated: 18 September 2026

1. Who we are

Valetop is a digital platform used by vehicle owners, valet companies, and their authorized staff to manage parking, tickets, vehicle retrieval, and related services. This Privacy Policy applies to the Valetop Android application and the website https://my.valetop.com.

Valetop is operated by CEACO, Lebanon. In this policy, “Valetop,” “we,” “us,” and “our” refer to that operator. For privacy questions or requests, contact [email protected].

Valet companies also handle information in providing their parking services. The company serving you may have its own responsibilities and privacy notices for information it collects or holds independently. You can contact Valetop about information handled through our platform.

2. Information we process

Depending on your role and the services used, information may be supplied by you, by an authorized valet operator, or by the app and website during use:

• Account and contact information: name, username, account identifier, email address, telephone number, account role, and company or location association.

• Vehicle and parking information: vehicle registration plate and symbol, vehicle brand/type and color, parking location, ticket number and serial number, arrival and departure information, assigned operator or driver, and vehicle-service requests.

• Service and payment records: service charges, taxes, payment status, amounts paid, and related transaction records entered into Valetop.

• Device and service information: IP address, browser/app and operating-system information, access and error records, notification delivery tokens, Firebase installation identifiers, and Bluetooth device names/addresses used to select a printer. Some information is processed by the supporting service provider rather than stored in the Valetop account.

• Requests and correspondence: information you provide when contacting support or requesting access, correction, or deletion of your information, including information reasonably necessary to verify the request.

Please provide only information necessary for the relevant service. Do not put passwords, payment-card details, or copies of identity documents into general support or deletion-request fields.

3. How we use information

We use information to operate accounts and access permissions; record and manage parking services; generate and print tickets; retrieve the correct vehicle record after a ticket scan; communicate service updates; support payments and operational reporting; troubleshoot problems; protect the service against unauthorized access or misuse; manage app updates; and handle support and privacy requests.

We may also use relevant information to investigate a specific complaint or incident and to meet applicable legal obligations. We do not sell or rent personal information, or provide it to third parties for their unrelated marketing.

4. App permissions and local features

• Camera: used for scanning ticket QR codes and barcodes. The decoded information is used to find the relevant ticket or service. The camera permission supports the scanner; it does not grant access to all photos stored on your phone.

• Bluetooth / Nearby devices: used to identify paired devices, connect to a selected thermal printer, and send ticket content to it. Information printed depends on the ticket template and parking record.

• Notifications: used to deliver service notifications and alerts through Firebase Cloud Messaging. Availability and sound depend on your permission and device settings.

• Storage on older Android versions: may be requested to save files you choose to download.

You can manage permissions in Android settings. Refusing a permission may prevent its related feature from working. Keep printed tickets and their QR links private, since they identify a parking record or open related services.

5. Cookies and browser storage

The website and the app's embedded browser use cookies and browser storage to maintain sessions, remember relevant settings, and support website functions. You can clear browser or app data, but doing so may sign you out or reset preferences. Clearing local data does not delete your online account or parking records.

6. Who receives information

Information is made available where needed for the purposes described above:

• To the valet company and its authorized personnel handling the relevant parking operation, and to authorized Valetop personnel providing administration and support.

• To service providers supporting hosting, storage, communications, security, and app delivery. This includes Google Firebase Cloud Messaging for push notifications and Google Play services supporting app functions and updates.

• To the printer selected by the operator, as the ticket content being printed.

• To a payment provider if a service directs you to that provider to complete a transaction. That provider's own privacy notice also applies to its processing.

• To competent authorities or other recipients where a disclosure is required by law, or is lawfully necessary to address fraud, security incidents, or a specific legal claim.

Firebase's handling of installation identifiers and related service data is explained in Firebase Privacy and Security. Google's own processing is described in the Google Privacy Policy.

Service providers may process information outside Lebanon, including in countries where they operate their infrastructure. We must handle these arrangements in accordance with applicable data-protection requirements.

7. Retention

We retain information for the purposes described in this policy, using the following periods:

• Account information: while the account remains active and until a verified deletion request is completed, except for specific information that must legitimately be retained as explained below.

• Identifiable vehicle, parking, and ticket records: 12 Months. A valid deletion request may require earlier removal of associated personal information.

• Support correspondence and deletion-request records: 12 Months.

• Access and security logs: 12 Months.

• Backup copies of deleted information: removed through the backup rotation process within 12 Months. Copies awaiting removal are not used for ordinary operations, and deletion must be reapplied if a backup is restored.

Where specific information must be retained for a legal obligation, fraud prevention, security, or a particular dispute, we limit retention to the information and duration necessary for that reason. We explain any applicable exception when responding to a deletion request. This is not a general exception allowing all records to be kept indefinitely.

Service providers can have separate retention periods for information they process. For example, Firebase describes its installation-identifier deletion and retention process in the documentation linked above. We address provider-held information as part of handling relevant requests; removing a token from Valetop alone does not necessarily delete all provider-held information.

8. Your choices and account deletion

You may contact us to request access to, correction of, or deletion of your personal information, subject to applicable law and proportionate identity verification.

To request deletion of your Valetop account and its associated personal information, use the Valetop account and data deletion form, or email [email protected] with the subject Valetop account deletion. Identify the account by its username, registered telephone number, or registered email address, and provide a way for us to contact you. You do not need to install the app to submit a request.

We may contact you through a verified account channel or request limited additional information to prevent someone else from deleting your account. We do not ask you to send your account password. If you no longer have access to your original contact details, tell us so that we can discuss another reasonable way to verify the request.

We aim to complete requests within 7 days. If verification or a legitimate exception affects completion, we will explain the reason and expected timing.

Once verified, we delete the account and associated personal information from our active systems, subject to the specific retention exceptions above. This includes account/profile information, account-to-device notification associations, and personal information in linked records that is not legitimately required to be retained. Retaining genuinely non-identifiable statistics does not permit us to keep names, phone numbers, vehicle plates, or other identifying fields under a different account label.

Deleting an account removes access to it. Uninstalling the app, logging out, or temporarily blocking an account does not constitute account deletion. Printed tickets or information independently held by a valet company may require a separate request to that company; we can help identify the relevant organization.

9. Security

The app communicates with the Valetop website over HTTPS. Account permissions and device permissions help limit access to information and app functions. No technology can guarantee absolute security, and users should protect their credentials, devices, and tickets. Contact us if you suspect unauthorized access to your Valetop information.

10. Children

Valetop is designed for adult vehicle users and authorized business personnel and is not directed at children. If you believe a child's information has been provided inappropriately, contact us so that we can investigate and take appropriate action.

11. Changes and contact

We may update this Privacy Policy to reflect changes in the service, our actual data practices, or applicable requirements. The updated version will be available on this page with its revised date. Where notice or consent is required for a change, we will provide it before applying that change.

For privacy questions and requests: [email protected].

Website: https://my.valetop.com.