Privacy Policy

Information we collect

Valeh is a digital asset valet used by event staff to check items in and out on behalf of their owners. To run that service, we collect:

• Owner phone number — the only identifying information we collect from an asset owner. Used solely to deliver the SMS retrieval ticket.
• Photos of the checked-in item and its storage location, captured by event staff at check-in.
• Event logs — staff member ID, action type, and timestamp for each check-in, retrieval, and void action.
• Worker and manager account information — name, role, and a hashed PIN for staff who operate the system at an event.
• Technical data — IP addresses and standard HTTP request data, retained briefly for security and abuse prevention.

We refer to this collectively as Service Information.

How we use this information

Service Information is used only to operate the asset valet: matching owners to their tickets, sending SMS notifications, giving event managers visibility into check-in status, and investigating disputes about an item's condition or location.

We do not use Service Information for advertising, and we do not sell it.

Data sharing

Valeh will not share Service Information with any third party except:

• With the event manager or organization running the event where the check-in occurred;
• When required by law, subpoena, or court order;
• To investigate a suspected violation of our Terms of Service or to protect the safety of staff or owners.

Cookies & tracking

The Valeh marketing site and worker app use only essential cookies required for login sessions. We do not use tracking, analytics, or advertising cookies. Server logs capture standard technical information for security purposes, not for profiling visitors.

Data retention

Ticket data — photos, phone number, and event log entries — is retained for the duration of the event and for a limited period afterward to resolve disputes, after which it is permanently deleted unless an event organizer requests longer retention for their own records.

If an owner asks us to remove their information, we will delete the associated phone number, photos, and ticket record, except where retention is required by law.

Third-party service providers

We rely on the following providers to operate Valeh. Each processes a limited slice of Service Information solely to deliver their service to us:

• Amazon Web Services — application hosting (ECS), database (RDS PostgreSQL), and encrypted private storage (S3) for check-in and location photos.
• Twilio — delivery of SMS retrieval tickets to owner phone numbers.
• Cloudflare — domain registration and DNS for valeh-app.com.
• Netlify — hosting for the valeh-app.com marketing site, including standard request logs.

Where your data is stored

Service Information is stored and processed in AWS's Canada (Central) region by default. Some processing necessarily occurs outside Canada — for example, Twilio's SMS delivery network, Cloudflare's DNS infrastructure, and Netlify's content delivery network for the marketing site — solely to the extent required to deliver those services.

Your rights

If you are based in Ontario or elsewhere in Canada, our handling of your personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA). You may request access to, correction of, or deletion of your Service Information by contacting us at hello@valeh-app.com.

Asset owners can also reply STOP to any retrieval SMS to opt out of future messages for that ticket.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy or your data can be sent to hello@valeh-app.com.