Security at StayNPark
Payments
All payments are processed by Stripe, a PCI DSS Level 1 certified payment processor. Card numbers are entered directly into Stripe's systems and never touch StayNPark servers. We accept Visa, Mastercard and American Express, and all charges are in AUD.
Data
- All traffic uses TLS (HTTPS) — app, website and API.
- Passwords are stored as salted hashes, never in plain text.
- Database access is governed by row-level security: users can only read and write their own records.
- Host street addresses are only revealed to a driver after a confirmed booking.
Responsible disclosure
Found a vulnerability? Email security@staynpark.app. We commit to acknowledging reports within 48 hours and will not take legal action against good-faith research that avoids privacy violations and service disruption.