How we protect payments and data, and how to report a problem.
Card payments are processed by Stripe. Curblet never sees or stores your full card number — Stripe handles card data on PCI-compliant infrastructure.
All traffic is served over HTTPS/TLS.
License plate, the contact info you give for a receipt, and session metadata. Where we keep an IP-derived signal, it is stored as a truncated hash, never the raw address.
Operator dashboards sit behind authenticated sessions, and lot data is scoped to each operator's organization.
Found a vulnerability? Email [email protected] and we'll respond promptly. Please give us a chance to fix it before public disclosure.