Data Privacy Framework Notice

Softserve Software LLC, doing business as Car Storage Software(“we,” “our,” or “us”), complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit dataprivacyframework.gov.

This notice covers Softserve Software LLC only; we have no U.S. subsidiaries or other covered entities adhering to the Principles under our certification.

We provide car storage facility management software. In the course of providing the service we receive the following categories of personal data from the EEA and UK: account holder contact details (name, email address, phone number), business and billing information, account credentials, vehicle records and photos (which may include license plates), customer and vendor records uploaded by storage facilities, and service usage data. Our Privacy Policy describes each category in detail.

We process this data to provide, maintain, secure, and improve the service; to process vehicle documentation and payments; to send service notifications; to provide customer support; and to comply with legal obligations. We do not use personal data for purposes materially different from those for which it was originally collected without providing notice and choice.

Much of the EEA/UK personal data we receive is uploaded by storage facilities that use our platform. For that data we act as a processor/agent on the facility's instructions under our Data Processing Agreement.

We disclose personal data to the service providers listed on our Subprocessor List — cloud hosting, payment processing, communications, AI photo analysis, vehicle data lookup, and monitoring providers — solely so they can perform services on our behalf. Each is contractually required to provide at least the same level of protection as required by the DPF Principles and to notify us if it can no longer meet that obligation.

We remain liable under the DPF Principles if a third-party agent processes personal data in a manner inconsistent with the Principles, unless we prove we are not responsible for the event giving rise to the damage.

We may also be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Individuals in the EEA and UK whose personal data we hold have the right to access that data, and to correct, amend, or delete it where it is inaccurate or has been processed in violation of the DPF Principles. Account holders can exercise these rights directly from their settings page (profile updates, “Download my data,” and account deletion); anyone can contact us at matt@carstoragesoftware.com. Where we hold data as a processor for a storage facility, we will refer your request to that facility and support its response.

Before we disclose your personal data to a third party acting as an independent controller, or use it for a purpose materially different from the purposes for which it was originally collected, we will offer you a clear, conspicuous, and readily available opportunity to opt out. For sensitive personal data, we will obtain your affirmative express consent (opt in). We do not sell personal data.

In compliance with the EU-U.S. DPF and the UK Extension, Softserve Software LLC commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals with inquiries or complaints should first contact us at matt@carstoragesoftware.com. We will respond within 45 days.

We have further committed to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

If your complaint is not resolved through these channels, under certain conditions you may invoke binding arbitration before the Data Privacy Framework Panel, as described in Annex I of the DPF Principles.

The Federal Trade Commission has jurisdiction over Softserve Software LLC's compliance with the EU-U.S. DPF and the UK Extension, and we are subject to its investigatory and enforcement powers.

Questions about this notice or our data practices: