Privacy Policy
Last updated: 19 May 2026
Effective from: 19 May 2026
This Privacy Policy explains how ParkAppeal ("we", "us") collects, uses, stores, and shares your personal information when you use our service at parkappeal.nz.
We comply with the New Zealand Privacy Act 2020. This policy describes how we meet our obligations under the Information Privacy Principles (IPPs).
1. Who we are
ParkAppeal helps people draft appeal letters for Wellington City Council parking infringement notices. The service is based in Wellington, New Zealand.
If you have questions about this policy or your personal information, contact us at support@parkappeal.nz.
2. What information we collect
When you use ParkAppeal to draft an appeal letter, we collect:
- From the parking ticket photo you upload: ticket number, issue date, offence date and time, vehicle registration, offence description, location, and fine amount.
- From the wizard form: your account of what happened ("narrative"), evidence you describe, your full name, postal address, and email address.
- From the payment process (handled by Stripe): your email address and the fact that you paid $7 NZD.
- From your browser: standard technical information (IP address, browser type, referrer URL) collected automatically by our hosting provider.
When you complete the wizard, our system drafts your letter and saves the following to our records before you pay: your name, email address, postal address, ticket details, the narrative you provided, and the draft letter itself. This pre-payment write is what lets us deliver your letter immediately after payment without re-running the AI. We keep these records whether or not you go on to pay — including when our AI declines to draft a letter for you, in which case we record the reason it gave, which may quote fragments of the narrative you provided.
We do not collect information about you from third parties.
3. Why we collect it
We collect this information for one purpose only: to draft a parking appeal letter for you and deliver it to your email address.
We do not use your information for advertising, profiling, analytics beyond basic site operation, or any purpose other than providing the service you paid for.
4. How we use third-party services
To run the service, we share specific pieces of your information with third parties. Each receives only what they need to do their part:
| Service | What they receive | Why |
|---|---|---|
| Anthropic (anthropic.com) | Ticket details, your narrative, your name and address | To generate the appeal letter using AI |
| Stripe (stripe.com) | Your email, payment card details (entered directly with Stripe, we never see them) | To process payment |
| Resend (resend.com) | Your email address, the letter content, the PDF attachment | To deliver the letter to you |
| Vercel (vercel.com) | All site traffic including the data you submit | Hosts the website and processes requests |
| Neon (neon.tech) | Your name, email, postal address, ticket number, the narrative you wrote, the draft letter our system generated, pre-check status, the AI's decline reason (if applicable), and — for paid appeals — Stripe payment ID, payment amount, and timestamp | Stores appeal records — the draft letter and customer details for delivery, and (for appeals our AI declines to draft) the decline reason. Includes both paid and unpaid appeals. |
| Cloudflare (cloudflare.com) | Site traffic patterns, no submitted form data | DNS and email routing |
Each of these companies has its own privacy policy. They are large established providers and we have chosen them carefully, but you should review their policies if you have concerns:
- Anthropic: anthropic.com/legal/privacy
- Stripe: stripe.com/privacy
- Resend: resend.com/legal/privacy-policy
- Vercel: vercel.com/legal/privacy-policy
- Neon: neon.tech/privacy-policy
- Cloudflare: cloudflare.com/privacypolicy
We do not sell your information to anyone. Ever.
5. How long we keep your information
- Wizard form data, narrative, photo of ticket: deleted from our systems within minutes of generating your letter. We do not retain a copy.
- The drafted letter and PDF: sent to your email. We do not retain a copy.
- Appeal record (your name, email, postal address, ticket number, the narrative you wrote, the draft letter our system generated, pre-check status, the AI's decline reason where applicable, and — for paid appeals — Stripe payment ID, payment timestamp, amount, and letter delivery status): retained for90 days then automatically deleted. This is the minimum we need to deliver your letter, support refunds, and respond to your support enquiries.
- Email delivery logs (held by Resend): retained according to Resend's policy, typically 30 days.
- Payment records (held by Stripe): retained according to Stripe's policy, typically several years for tax compliance.
After 90 days, we have no record of your appeal in our systems.
6. Your rights
Under the Privacy Act 2020, you have the right to:
- Access the personal information we hold about you (IPP 6)
- Correct any information that is wrong (IPP 7)
- Request deletion of your information
To exercise any of these rights, email support@parkappeal.nz with your request. Include the email address you used to pay so we can find your record.
We will respond within 20 working days as required by the Privacy Act.
7. Security
We take reasonable steps to protect your information:
- All data is transmitted over encrypted connections (HTTPS)
- We do not store payment card details — Stripe handles that
- The audit database is hosted by Neon with industry-standard access controls
- The website is hosted by Vercel with industry-standard infrastructure security
No system is perfectly secure, but we follow standard practice for businesses our size.
8. Who can use ParkAppeal
ParkAppeal is intended for people aged 18 and over who have a New Zealand postal address. We do not knowingly collect information from children under 18.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top tells you when the latest version was published. If we make material changes that affect how we handle data we have already collected from you, we will let you know by email.
10. Who runs ParkAppeal
ParkAppeal is operated by Joseph Gribben as a sole trader. The Privacy Officer for ParkAppeal is Joseph Gribben. To contact the Privacy Officer about your personal information, email support@parkappeal.nz.
11. Complaints
If you are unhappy with how we have handled your personal information, contact us first at support@parkappeal.nz so we can try to resolve it.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner: privacy.org.nz or 0800 803 909.