Nest Park Privacy Policy

Effective Date: April 5, 2026

Welcome to Nest Park. This Privacy Policy ("Policy") explains how Nest Park, Inc. ("Nest Park," "Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you access or use our peer-to-peer parking marketplace platform, website, mobile application, or any related services (collectively, the "Platform").

By using the Platform, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not use the Platform.

1. Scope of This Policy

This Policy applies to all users of the Platform, including parking space hosts ("Hosts"), travelers seeking parking ("Parkers"), and visitors to our website. It covers information collected online through the Platform and related communications.

This Policy applies to users worldwide. If you are located in the European Economic Area ("EEA"), United Kingdom ("UK"), or Switzerland, additional rights under the General Data Protection Regulation ("GDPR") apply to you and are described in Section 10. If you are a California resident, your additional rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA") are described in Section 11.

2. Personal Information We Collect

2.1 Information You Provide Directly

When you create an account, list a parking space, book parking, or otherwise interact with the Platform, we may collect:

• Account Information: Full name, email address, phone number, mailing address, and profile photo.
• Payment Information: Credit or debit card details, bank account information, and billing address. Note: Payment processing is handled by Stripe, Inc., and Nest Park does not store your full payment card numbers on our servers.
• Vehicle Information: Vehicle make, model, color, year, and license plate number (collected from Parkers to facilitate parking arrangements).
• Property Information: Parking space address, type (garage, driveway, lot), photos, availability schedule, and pricing (collected from Hosts).
• Identity Verification: Government-issued ID or other documentation as needed to verify your identity.
• Communications: Messages exchanged between Hosts and Parkers through our platform messaging system, customer support inquiries, and feedback or reviews.

2.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, features used, search queries, booking history, dates and times of access, and referring URLs.
• Location Data: Approximate location based on your IP address. With your permission, we may collect precise GPS location data from your mobile device to help you find nearby parking spaces.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies (see Section 8 for our Cookie Policy).

2.3 Information From Third Parties

We may receive information about you from:

• Payment Processors: Transaction confirmation and fraud screening data from Stripe.
• Identity Verification Services: Results of identity or background checks, where applicable.
• Social Media Platforms: If you choose to register or log in via a social media account, we receive your name, email, and profile information as permitted by your social media privacy settings.
• Public Sources: Publicly available information relevant to preventing fraud or ensuring platform safety.

3. How We Use Your Information

3.1 Platform Operations

• Creating and managing your account.
• Matching Hosts with Parkers and facilitating parking bookings.
• Processing payments, payouts to Hosts, and refunds.
• Enabling communications between Hosts and Parkers.
• Providing customer support and resolving disputes.

3.2 Safety and Security

• Verifying user identities and preventing fraud.
• Monitoring for suspicious or unauthorized activity.
• Enforcing our Terms of Service and other policies.
• Protecting the rights, property, and safety of our users and the public.

3.3 Improvement and Analytics

• Analyzing usage patterns to improve the Platform's features and user experience.
• Conducting research and analytics to understand market trends and user needs.
• Testing new features and functionality.

3.4 Communications

• Sending booking confirmations, reminders, and updates.
• Delivering important service announcements and policy changes.
• Sending promotional communications (with your consent or where permitted by law; you may opt out at any time).

3.5 Legal Compliance

• Complying with applicable laws, regulations, and legal processes.
• Responding to lawful requests from government authorities.

4. Legal Bases for Processing (GDPR)

If you are located in the EEA, UK, or Switzerland, we process your personal data based on the following legal grounds:

You may withdraw your consent at any time where consent is the legal basis for processing, without affecting the lawfulness of processing carried out before withdrawal.

5. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

5.1 Between Users

Host names, parking space details, and relevant contact information are shared with Parkers who book their spaces, and vice versa, to facilitate the parking arrangement.

5.2 Service Providers

We share information with trusted third-party service providers who assist us in operating the Platform, including:

• Stripe, Inc. — Payment processing and fraud prevention.
• Analytics Providers — Website and app analytics to understand usage patterns (e.g., aggregated and anonymized data).
• Cloud Hosting Providers — Secure data storage and computing infrastructure.
• Communication Services — Email delivery, push notifications, and SMS messaging.
• Customer Support Tools — Helpdesk and ticketing systems.

These providers are contractually obligated to use your information only for the purposes we specify and in accordance with this Policy.

5.3 Legal and Safety Reasons

We may disclose your information if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request.
• Protect the rights, property, or safety of Nest Park, our users, or the public.
• Detect, prevent, or address fraud, security issues, or technical problems.
• Enforce our Terms of Service.

5.4 Business Transfers

If Nest Park is involved in a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

5.5 With Your Consent

We may share your information for other purposes with your explicit consent.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, including:

• Active Accounts: We retain your information for as long as your account remains active.
• After Account Deletion: Upon account deletion, we will delete or anonymize your personal information within 30 days, except where we are required or permitted by law to retain it (e.g., for tax, legal, or fraud prevention purposes).
• Transaction Records: Financial and transaction records are retained for a minimum of 7 years to comply with tax and accounting obligations.
• Communications: Messages and support tickets may be retained for up to 3 years after account closure for dispute resolution and legal compliance.
• Anonymized Data: We may retain anonymized or aggregated data indefinitely, as it cannot be used to identify you.

7. How We Protect Your Information

We implement industry-standard technical and organizational security measures to protect your personal information, including:

• Encryption: Data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis, with role-based access controls and multi-factor authentication.
• Infrastructure Security: Our systems are hosted on secure, SOC 2-compliant cloud infrastructure with regular security audits and penetration testing.
• Payment Security: Payment card data is handled by Stripe, which is PCI DSS Level 1 certified. Nest Park does not store full credit card numbers.
• Monitoring: We maintain logging and monitoring systems to detect and respond to potential security incidents.
• Incident Response: We maintain a security incident response plan and will notify affected users and relevant authorities in the event of a data breach, as required by law.

While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Cookie Policy

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the site remember your preferences and understand how you use it.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Most browsers allow you to:

• View what cookies are stored and delete them individually.
• Block third-party cookies.
• Block cookies from specific sites.
• Block all cookies.
• Delete all cookies when you close your browser.

8.4 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. We currently do not respond to DNT signals, but we honor opt-out preferences as described in Sections 10 and 11.

9. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@nestpark.com.

10. Your Rights Under GDPR (EEA, UK, and Swiss Users)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the GDPR:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@nestpark.com. We will respond to your request within 30 days (or sooner if required by law). We may ask you to verify your identity before processing your request.

International Data Transfers

If your data is transferred outside the EEA, UK, or Switzerland, we ensure adequate protections are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent safeguards.

11. Your Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

11.1 Right to Know

You have the right to request that we disclose:

• The categories of personal information we have collected about you.
• The categories of sources from which the personal information was collected.
• The business or commercial purpose for collecting the personal information.
• The categories of third parties with whom we share the personal information.
• The specific pieces of personal information we have collected about you.

11.2 Right to Delete

You have the right to request that we delete the personal information we have collected from you, subject to certain legal exceptions (e.g., completing a transaction, legal compliance, security).

11.3 Right to Correct

You have the right to request correction of inaccurate personal information.

11.4 Right to Opt Out of Sale or Sharing

Nest Park does not sell your personal information.We do not share your personal information for cross-context behavioral advertising. If this changes in the future, we will update this Policy and provide a "Do Not Sell or Share My Personal Information" link on our website.

11.5 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA/CPRA rights. You will not receive different pricing, quality, or service levels because you exercise your privacy rights.

11.6 Categories of Personal Information Collected

Under the CCPA, the categories of personal information we collect include:

11.7 How to Exercise Your Rights

To exercise your CCPA/CPRA rights, you may:

• Email us at privacy@nestpark.com.
• Submit a request through your account settings on the Platform.

We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf, subject to identity verification.

We will respond to verifiable consumer requests within 45 days. If we need additional time, we will notify you of the extension (up to 90 days total).

12. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications that are not operated by Nest Park. This Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this Policy.
• We will notify you by email or through a prominent notice on the Platform at least 30 days before the changes take effect.
• Your continued use of the Platform after the updated Policy takes effect constitutes your acceptance of the changes.

We encourage you to review this Policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Nest Park, Inc.
Email: privacy@nestpark.com
Website: https://nestpark.nanocorp.app

For GDPR-related inquiries, you may also contact our Data Protection Officer at dpo@nestpark.com.

For CCPA-related requests, California residents may also call our toll-free number (to be provided upon launch).

15. Accessibility

This Privacy Policy is available in an accessible format on our website. If you need this Policy in an alternative format, please contact us at privacy@nestpark.com.

This Privacy Policy was last updated on April 5, 2026.