Skip to content
Legal

Last updated: 5 November 2026

3D lime padlock

This page describes the security practices we follow today. We do not claim certifications, audits or bug bounty programmes we do not have.

Account security

  • OTP sign-in, no passwords. You sign in with a one-time passcode sent to your phone, so there is no password to phish, leak or reuse.
  • Short-lived, revocable sessions. Access tokens expire within minutes and are renewed through a session you can sign out of. Signing out or deleting your account ends all your sessions.
  • New sign-in alerts. The app tells you when your account is signed in on a new device.

Data protection

  • Encryption in transit and at rest. Data between your device and our servers travels over TLS, and our database and file storage are encrypted at rest.
  • Private documents. Identity documents, selfies and vehicle RC photos are kept in private storage and opened only through short-lived, signed links.
  • Limited staff access. Staff access is role-based and changes made by staff are logged.
  • Phone numbers stay private. Parkers and hosts talk through in-app chat; hosts see only a masked version of a parker's number.

Payments

Payments are handled by Cashfree Payments. Your UPI details are entered on Cashfree's secure checkout and never reach our servers. We confirm every payment with Cashfree directly and verify the signature on its notifications.

Marketplace safety

  • Every listing is reviewed by our team before it goes live.
  • Identity checks. Hosts verify their identity (KYC) before listing a space, and parkers may be asked to verify their identity for some bookings.
  • Report and block. You can report a problem or a user, and block someone, from inside the app. SOS requests reach our team immediately.

Report a vulnerability

If you find a security vulnerability in ParkQ, please email hello@parkq.in with "Security" in the subject, a description of the issue and steps to reproduce it. Please do not access other people's data or disrupt the Service while testing. We will acknowledge your report within 3 working days and keep you updated until it is fixed.