Privacy Policy

Angad Freights, a company registered in California, trading as Book A Yard ("we," "us"), runs this truck and trailer parking booking platform. This policy explains what we collect, why, who we share it with, and how long we keep it.

We are not a parking yard. Every yard on this platform is owned and operated by an independent property owner, and some of the information below is shared with the owner of the yard you book — see §4.

This platform serves three kinds of users, and we collect different information from each: drivers who book parking, property owners who list yards, and yard staff invited by those owners.

1. Information drivers provide

• Name, company name, email address, phone number, emergency contact
• DOT/MC number and business address
• Vehicle details — truck and trailer numbers, plates, make, model, colour
• Driver's licence number and expiration date. If you use the optional camera scan, we read these from the barcode on the back of your licence; you can also type them.
• Uploaded images: driver's licence (front and, if scanned, back), a photograph of you, truck plate photo, DOT/MC sticker photo, and vehicle photos
• Your handwritten signature, drawn on screen when you sign the parking agreement
• Payment information you choose to share — a Zelle confirmation ID and/or a payment screenshot. We never collect card or bank account numbers through this site.
• Reviews and ratings you write about a yard

1a. Information anyone provides by contacting us

You do not need an account to write to us. If you use the contact form on our help pages, or email us, we store your name, email address, an optional phone number, an optional booking reference, the topic you chose, and the message you write — together with a reference number so you and we can refer to it later.

You may also attach up to three photos to a message. We recommend not sending any image you are not comfortable sharing — send only what we need to understand the problem, and crop out anything else that happens to be in the frame. We re-save every photo we receive, which removes the hidden data cameras add to image files — including the location and the time the picture was taken — so what we keep is the picture and nothing else. Attached photos are kept for 90 days after the request is closed and then deleted, far less than the two years the message text keeps, and only a super administrator can view them. If a photo needs to reach a yard, a person sends it deliberately; yards are not given access to them.

This applies to anyone who contacts us, including people who have never booked. Write only what you need us to know: the message box is free text, and whatever you type into it is stored as you typed it — and a photo shows whatever was in front of the camera.

We use this to answer you and to keep a record that your message was received and dealt with — nothing else. It is never used for marketing.

Asking for a fleet rate. If you ask us for a rate on five or more trucks, we store your name, email address, an optional phone number, an optional company name, how many trucks you need and for which dates, and the note you write — again whether or not you have an account. To find yards with room, we tell each yard we approach how many trucks, what type, and for which dates, and pass on your note — we do not give them your name, your company, or your contact details. Only we can see who asked. We keep the request for two years after it is closed, so both sides have a record of what was asked and what was quoted.

In-app messages. If you have a driver account we may send you announcements that appear in your dashboard. These are written by our support team, and may also be sent by another internal team where that helps us deal with your situation properly. They are addressed either to you or to all drivers, and we record when you last opened that page so we can show an unread count.

2. Information collected automatically

• Your IP address and the exact timestamp when you sign the parking agreement. This is deliberate and legally necessary — it is the audit trail that makes an electronic signature enforceable under the ESIGN Act.
• Email verification codes sent to confirm the address you typed is really yours.
• Gate entry and exit records. When yard staff scan your gate pass, we record that your booking checked in or out, when, and who scanned it. This is a record of when a named person's vehicle was physically at a specific location.
• Rate-limiting records. To stop automated abuse of login and booking endpoints, we temporarily store your email address, phone number, or IP address as a lookup key in Upstash (see §5). These expire automatically within minutes.
• Error records. When something goes wrong, we record what failed so we can fix it. Personal information is automatically stripped before storage — email addresses, phone numbers, licence numbers, and access tokens are redacted; only opaque internal record identifiers are kept so we can trace a fault to the affected booking. Kept 30 days.
• A saved draft of a form you are filling in. While you are completing a yard listing, what you have typed is kept in your own browser so a refresh doesn't lose it. It stays on your device — it is not sent to us until you submit — and it is erased when you close the tab. Your password and your email verification code are never included, and uploaded files cannot be kept this way at all, which is why documents have to be attached again after a reload.
• Page performance measurements. We measure how quickly pages load and respond on real visitors' devices. These contain no identifiers of any kind — not your IP, not a session, not your browser's user-agent string — only a page name, a timing number, and whether the device was mobile or desktop. They cannot be linked to you. Kept 30 days.

3. Information property owners and yard staff provide

Property owners who list a yard provide: name, email, phone, business details, yard address and coordinates, yard photographs, pricing, and a document proving they own or control the property. Owner accounts are password-protected.

Yard staff invited by an owner provide: name and email. Staff accounts are password-protected and scoped to a single yard.

How an owner gets paid, and what we hold about it. Card payments for a yard's bookings go into that yard's own Stripe account, created during onboarding — the bank details behind it are given to Stripe and never to us. We hold only the brand and last four digits of the card an owner uses to pay for their own monthly plan, never the number.

Where an owner chooses to accept bank transfers at their yard, they give us the email address enrolled with Zelle and the recipient name their bank shows, so we can display them to a driver who is paying at the gate. That money goes straight from the driver to the yard and never passes through us. Those details are shown to drivers paying at that yard, are erased when the owner switches the method off, and are never used for anything else. We cannot verify whether a Zelle account is enrolled as personal or business — no such check exists — so we also record the owner's own statement that it is enrolled for business use, and the date they made it.

Business records owners choose to record. The dashboard includes an optional finances section where an owner can keep their yard's operating costs and record bookings they took through other booking services — including the amount, the service's name, and the commission it charged. We can see this, and we use it to understand how a yard is performing across the different ways it sells space. We say so here rather than leaving it to be discovered: it is the owner's own commercial information, including their terms with other companies, and recording it is entirely their choice — the section can be left empty and nothing else stops working.

We show an owner their own figures. We do not combine what different owners tell us about other companies' commission rates into any cross-owner analysis or market report.

People who booked through another service. When an owner records one of those bookings, they may enter the driver's or company's name and a truck number so the yard can manage the arrival and record it in and out at the gate. That is all we hold about that person — no documents, no photographs, no contact details — and they have no account here. If you believe your details were recorded this way and you want them removed, contact us at the address in §12 and we will erase them.

All passwords on this platform are stored only as bcrypt hashes. We cannot read them and neither can anyone with database access.

4. How we use this information

• To check availability, hold a space, and create your booking
• To verify identity and compliance documents before granting yard access
• To generate booking confirmations and invoices, and to email them to you
• To authenticate you on return visits — by one-time code sent to your email, or by a password if you have chosen to set one
• To maintain the legal record of your signed parking agreement
• To operate the gate pass, and to record entry and exit at the yard
• To recover unpaid late-cancellation or no-show fees, which may be applied to a subsequent booking you make (see the Terms of Service)
• To answer a message you send us, and to keep a record that it was received and handled
• To respond to disputes, insurance claims, or lawful requests
• To keep the platform working — diagnosing errors and monitoring performance
• To show a property owner what their yard earns and costs, and how the different booking services they use compare — and, on our side, to understand how a yard is performing so we can help it grow

We do not sell your personal information. We do not use your documents or photographs for marketing, advertising, or training any machine-learning system.

5. Who we share it with

Service providers who process data on our behalf, under contract, and who may not use it for their own purposes:

What Stripe receives, and what it does not. When you pay by card, the card details go straight to Stripe and never to us — there is no card form on this site and no card number in our database. If you choose to save a card, Stripe is given your name and email address so it can hold the card against you, and we keep only the brand, the last four digits and the expiry so a screen can say "Visa ending 4242". A yard owner who sets up payouts gives Stripe their bank and identity details directly, on Stripe's own pages — we never see or store them. Stripe uses what it receives under its own privacy policy as well as on our behalf.

What the address lookup receives. When a property owner types their yard's address into the listing form, the text they have typed is sent through our server to a geocoding service to suggest matching addresses and find the map coordinates. Nothing else goes with it — no name, no account, no identifier — and we identify our application rather than the person making the request. For a yard run from someone's own land this is their home address, which is why it is named here rather than treated as a technical detail. A driver searching for parking never reaches this service: driver search runs against a list of US cities and ZIP codes bundled with the application, so nothing a driver types leaves our systems.

Property owners and their yard staff see the booking details, driver name and contact, vehicle details, and compliance documents for bookings at their own yard only — they cannot see bookings at any other yard.

Publicly visible: reviews you write about a yard, including your rating, your review text, any reply from the yard, and the date — but never your name or contact details.

Law enforcement or regulators, only where legally required.

6. How long we keep it

Full detail is in our Document Retention Policy. In summary:

• Signed parking agreements and their audit metadata — 7 years
• Booking, invoice, and payment records — 7 years (tax and accounting)
• Driver's licence images and driver photographs — 2 years after the end of the booking they were uploaded for
• Vehicle and plate photographs — 3 years
• Messages you send us through the contact form — 2 years after the request is closed
• Fleet rate requests — 2 years after the request is closed
• Photos attached to a contact-form message — 90 days after the request is closed
• In-app messages we send you — kept while your account is open
• Error records and performance samples — 30 days
• A property owner's finance records — 7 years, the same as our own booking and payment records, and for the same tax and accounting reasons. These entries cannot be deleted or edited once saved; a correction posts a visible offsetting entry beside the original, which is how ordinary accounting records work.

7. Security

Uploaded documents are stored in private, access-controlled storage and are never publicly reachable; every view is through a short-lived signed link. Every database table has row-level security enabled. Sessions are signed, httpOnly cookies, and each account type uses a separately-secreted signing key. Staff access is limited to what their role requires — yard staff, for example, cannot download documents at all.

No system is perfectly secure, and we do not claim otherwise.

8. Your choices and rights

You may ask us to:

• Give you a copy of the personal information we hold about you
• Correct anything inaccurate
• Delete your information, subject to the legal retention obligations above

How to request deletion: if you have a driver account, open Account in your dashboard and choose Delete my data and close my account. You can also email contact@bookayard.com with the email address or phone number you booked under. Either way a person reviews the request and we respond within 30 days.

What deletion actually does. We erase your name, email address, phone number, postal address, DOT/MC number, emergency contact, and driver's licence number and expiry — and we permanently delete the image files of your driver's licence (front and back) and your photograph from storage.

Messages you sent us are erased too. Any contact-form request we can match to you — by your account, or by the email address or phone number you wrote in under — has its name, email, phone and message text erased. We keep only the topic, the dates, and whether it was resolved, so our own records still show that a request existed and was handled. We match on the address you wrote in under, not just on your account, because people usually contact us precisely when they cannot sign in.

What we keep, and why. Your signed parking agreements and your booking, invoice and payment records are retained for the seven years described in §6. We are required to hold these, and they are also the evidence either of us would rely on in a dispute about a past stay. After deletion those records remain but carry no name, contact details or documents — they are no longer linked to you as an identifiable person. This is what US privacy law contemplates when a deletion right meets a legal retention obligation, and we would rather tell you plainly than describe it as a full erasure.

When we can't action it yet. We will not close an account while a booking is still running, while money is owed in either direction, or while a charge you have disputed is still being reviewed. If any of those apply we tell you exactly what they are and what would clear them, rather than simply refusing. Closing an account does not cancel money owed on it — an outstanding balance remains payable.

Other requests — a copy of your information, or a correction — are handled manually by email at the address above, within the same 30 days. We may need to verify your identity first, to be sure we are not disclosing your data to someone else.

9. California residents

We do not sell or share personal information as those terms are defined under California law. California residents may have additional rights to know, delete, correct, and to be free from discrimination for exercising them. Use the contact method in §8 to exercise any right.

10. Children

This platform is for commercial drivers and property owners. It is not directed at anyone under 18, and we do not knowingly collect information from children.

11. Changes to this policy

We may update this policy. Material changes will be reflected in the "Last updated" date above and, where required, communicated directly to affected users.

12. Contact

Angad Freights, trading as Book A Yard
Operating address: 195 98th Ave, Oakland, CA 94603, United States
contact@bookayard.com