Privacy Policy

Ali Tech (Sole Proprietorship, Org. No. 936 298 818) operates NaboSpot and is the data controller for personal data processed through the platform. We process personal data in accordance with applicable Norwegian and EU data protection laws, including the General Data Protection Regulation (GDPR).

1. Personal data we collect

Account information

• Full name
• Email address (required for registration)
• Phone number (optional at registration; required for transaction-based features)

Booking and listing information

• Booking times and history
• Parking space location details
• Access instructions or notes
• Vehicle information (if provided)

Payment information

Payments are processed securely by third-party payment providers (e.g., Stripe). We do not store full payment card details. We may receive limited transaction metadata such as transaction ID and payment status.

Technical information

• Device type
• Browser or app version
• IP address
• Basic usage analytics
• Push notification identifiers (e.g., Expo push tokens / Firebase Cloud Messaging tokens), when push notifications are enabled

Push notification identifiers are used only to deliver service-related notifications (for example, booking updates, verification, or important account notices). They are not used for advertising purposes.

Communications

• Messages sent to customer support
• Service-related notifications

2. How we use personal data

• Provide and operate the platform
• Manage accounts, bookings, and listings
• Enable secure transactions between drivers and hosts
• Process payments and payouts
• Verify identity and prevent fraud
• Provide customer support
• Improve performance and user experience
• Comply with legal obligations
• Enforce our Terms and Conditions

3. Legal basis

We process personal data based on contractual necessity, legitimate interests, legal obligations, and consent where required (e.g., certain cookies).

4. Account deletion

Users may permanently delete their account within the app (Profile → Delete Account). Personal profile data is removed upon deletion. Certain transactional records may be retained where legally required for accounting, dispute resolution, or fraud prevention.

5. Sharing of data

• Hosting and infrastructure providers
• Email/SMS service providers
• Payment processors
• Authorities when legally required

We do not sell personal data.

6. Data retention

We retain personal data only as long as necessary to provide the service, comply with legal obligations, resolve disputes, and maintain required accounting records.

7. Security

We implement appropriate technical and organizational security measures, including secure infrastructure, access controls, encrypted communication (HTTPS), and least-privilege access practices. No system is completely secure.

8. Your rights

Under GDPR, you have the right to access, correct, delete, restrict, object, and request portability of your personal data. You may exercise your rights by contacting us.

9. Contact

Ali Tech
Org. No. 936 298 818
Email: support@nabospot.com