← Back to home

Privacy Policy

This policy explains what personal information MEPARK services and workplace mobile apps process, why it is used, how long it is retained, and how it is protected.

Announced September 29, 2026Effective September 29, 2026Scope: MEPARK services, MEPARK CREW and MEPARK Manager

Mr. Park Co., Ltd. (the “Company”) complies with the Personal Information Protection Act, the Act on the Protection and Use of Location Information, and other applicable laws, and processes and protects users’ personal information as described below.

Workplace app notice
MEPARK CREW and MEPARK Manager are workplace apps for employees of the Company and contracted parking facilities or venues. They are not consumer apps. This English translation is provided for convenience; if there is any discrepancy, the Korean version prevails.

Personal information collected and collection methods

Category	Information collected	Collection and use	App
Account information	Mobile phone number, PIN (password), name, employee number, job title and role	Registered by the Company in its personnel system and used at login	CREW · Manager
Location information	Location coordinates at clock-in and clock-out (latitude, longitude and accuracy)	Collected once when the clock-in or clock-out button is used	CREW · Manager
Location information (geofence)	Entry and exit events within the worksite radius, event time and last confirmed location	Device operating system geofencing, including background operation	CREW
Photos	Vehicle, closing settlement and incident-site photos taken during work	When the in-app camera is used	CREW · Manager (incidents)
Voice	Microphone input for voice entry of a license plate number; processed on-device and not stored or transmitted as original audio	When voice input is used	CREW
Device information	Push notification token	When notification permission is granted	CREW

A visitor’s license plate number processed while using the apps is handled as operational information required to provide parking services. A visitor’s mobile phone number is used immediately and only to send a notification message, and is not stored in the Company database.

Website usage statistics (Google Analytics): The Company uses Google Analytics 4 (GA4), provided by Google LLC, to analyze how its website (mepark.kr) is used. GA4 uses cookies and similar technologies to collect usage records such as pages visited, referral source, time spent, device and browser type, and approximate location (country and city level). The Company does not send information that directly identifies users, such as names or contact details, to Google Analytics. Collected usage records are retained according to the Google Analytics data retention setting (14 months) and then deleted automatically. Users may refuse this collection by blocking cookies in their browser settings or by installing the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout); refusing does not restrict use of the website.

Purposes of processing personal information

Attendance management: verifying clock-in and clock-out at the worksite by checking location at the time of the record.
Clock-out reminder (CREW): sending a reminder when the employee leaves the registered worksite radius without clocking out. Background location permission (“Allow all the time”) is used for this purpose, but the Company does not continuously collect, track or store location. Processing occurs only when a geofence entry or exit event occurs.
Parking operations: confirming arriving vehicles (vehicle photo and license plate), closing sales (settlement photo), and documenting incidents (site photos).
Voice entry of license plate numbers (CREW): audio is used only by Android speech recognition, with offline processing preferred, to convert a license plate number into text. The Company does not store or transmit original audio. If the device lacks an offline language pack, Google’s Android speech recognition service may process audio in the cloud under Google’s privacy policy.
Account management and authentication: login and role-based functionality.
Notifications (CREW): delivery of workplace push notifications.

Retention and use periods

Account information and attendance records: retained during employment or the contract term, and after termination for the period required by applicable laws, including labor laws, before destruction.
Clock-in and clock-out coordinates: retained only for the period needed to verify attendance.
Work photos (vehicles, closing and incidents): retained for the period needed to complete the relevant work and respond to disputes.
Visitor mobile phone numbers: not stored; they cease to be used immediately after notification delivery.
Information a user asks to delete: destroyed without delay unless retention is required by law.

Provision to third parties

The Company does not provide users’ personal information to third parties, except where disclosure is required by law.

Outsourced processing and overseas transfer

Processor and service	Processing task
Supabase, Inc. (cloud infrastructure)	Data storage, authentication and storage service operations
Google LLC (Firebase Cloud Messaging)	Delivery of push notifications for CREW
Google LLC (Google Analytics)	Website usage statistics analysis
Kakao notification-message delivery provider	Delivery of visitor notifications; phone numbers are used only for message delivery

Personal information may be stored on overseas servers when cloud infrastructure and website usage statistics analysis services are used. The Company applies safeguards required by applicable laws.

User rights, how to exercise them, and account or data deletion

Users may request access to, correction or deletion of, or suspension of processing of their personal information at any time.

Account deletion request: app accounts are workplace accounts managed by the user’s employer or worksite. Account and related information may be deleted through the following procedure.
1. Email jisub00@valetman.co.kr or call 1899-1871 and provide your name, worksite and mobile number used for login.
2. After verifying the requester’s identity, the Company processes the request and gives notice of the result within 10 days of the request.
3. Deleted information includes account information (phone number, PIN and role), push token and other service-use information. Records that must be retained under applicable law, including employment records, are destroyed after the statutory period.
In-app logout: users may log out at any time in Settings. Logging out ends the device authentication session and stops background geofence detection.

Destruction of personal information

When the retention period expires or the processing purpose is complete, electronic files are deleted using a method that prevents recovery, and printed materials are shredded or incinerated.

Security safeguards

Encryption in transit (TLS/HTTPS) · database access control through row-level security and role-based restrictions · encrypted storage of sensitive information and minimized on-screen display · limited personnel authorized to process personal information and an internal management plan.

Privacy officer

Lee Ji-seop, Chief Executive Officer · jisub00@valetman.co.kr · 1899-1871 · Rooms 1501A and B, Getpeol Tower, 12 Getpeol-ro, Yeonsu-gu, Incheon, Republic of Korea

For reports or consultation concerning personal information infringement, contact the Personal Information Infringement Report Center at privacy.kisa.or.kr or dial 118 within Korea.

Notice of changes

Changes to this policy will be announced on this page at least seven days before they take effect.