Legal

Privacy Policy

Last updated: August 16, 2026  ·  Operated by Caestudy, Ontario, Canada

Information we collect

Valeh is a digital asset valet used by event staff to check items in and out on behalf of their owners. To run that service, we collect:

  • Owner phone number — the only identifying information we collect from an asset owner. Used solely to deliver the retrieval ticket and related messages, by SMS or WhatsApp.
  • Photos of the checked-in item and its storage location, captured by event staff at check-in.
  • Event logs — staff member ID, action type, and timestamp for each check-in, retrieval, and void action.
  • Worker and manager account information — name, role, and a hashed PIN for staff who operate the system at an event.
  • Technical data — IP addresses and standard HTTP request data, retained briefly for security and abuse prevention.

We refer to this collectively as Service Information.

How we use this information

Service Information is used only to operate the asset valet: matching owners to their tickets, sending SMS and WhatsApp notifications, giving event managers visibility into check-in status, and investigating disputes about an item's condition or location.

We do not use Service Information for advertising, and we do not sell it.

SMS and WhatsApp messages

Valeh sends messages by SMS and, where an operating organization has it enabled, by WhatsApp. Two groups receive messages.

Asset owners. When an item is checked in, the owner receives one message containing their retrieval ticket. They may also receive a single reminder if the item has not been collected before the service closes, and a confirmation when it is returned — typically two to three messages per item checked in. If the organization operating the valet ceases trading, owners may receive one further notice about collecting their item.

Workers and volunteers. When an administrator at an operating organization enrols a staff member, that person receives one message containing a join link and a PIN.

Message frequency depends on use: owners are messaged only in connection with an item they have checked in, and staff only when enrolled by their own organization. Message and data rates may apply. Reply HELP for help or STOP to opt out.

We do not sell or rent mobile phone numbers, and we do not share them with third parties for marketing purposes. Phone numbers are used solely to send the messages described above and are otherwise shared only as set out in Data sharing below.

Data sharing

Valeh will not share Service Information with any third party except:

  • With the event manager or organization running the event where the check-in occurred;
  • When required by law, subpoena, or court order;
  • To investigate a suspected violation of our Terms of Service or to protect the safety of staff or owners.

Cookies & tracking

The Valeh marketing site and worker app use only essential cookies required for login sessions. We do not use tracking, analytics, or advertising cookies. Server logs capture standard technical information for security purposes, not for profiling visitors.

Data retention

Ticket data — photos, phone number, and event log entries — is retained for the duration of the event and for a limited period afterward to resolve disputes, after which it is permanently deleted unless an event organizer requests longer retention for their own records.

If an owner asks us to remove their information, we will delete the associated phone number, photos, and ticket record, except where retention is required by law.

Third-party service providers

We rely on the following providers to operate Valeh. Each processes a limited slice of Service Information solely to deliver their service to us:

  • Amazon Web Services — application hosting (ECS), database (RDS PostgreSQL), and encrypted private storage (S3) for check-in and location photos.
  • Twilio — delivery of retrieval tickets and related messages to owner phone numbers, by SMS and WhatsApp.
  • Meta Platforms — where a message is delivered by WhatsApp, the owner phone number and message content pass through the WhatsApp Business platform operated by Meta.
  • Cloudflare — domain registration and DNS for myvaleh.com.
  • Netlify — hosting for the myvaleh.com marketing site, including standard request logs.

Where your data is stored

Service Information is stored and processed in AWS's Canada (Central) region by default. Some processing necessarily occurs outside Canada — for example, Twilio's and Meta's message delivery networks, Cloudflare's DNS infrastructure, and Netlify's content delivery network for the marketing site — solely to the extent required to deliver those services.

Your rights

If you are based in Ontario or elsewhere in Canada, our handling of your personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA). You may request access to, correction of, or deletion of your Service Information by contacting us at hello@myvaleh.com.

Asset owners can reply STOP to any Valeh text message to opt out. STOP is not limited to a single ticket or a single event: it stops all further text messages from Valeh to that number, including retrieval tickets for items checked in later, at any organization using Valeh. Texting START to the same number restores them.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above.

August 16, 2026 — opt-out correction and WhatsApp disclosure. An earlier version of this policy stated that replying STOP opted out of future messages "for that ticket". That was inaccurate: STOP stops all text messages from Valeh to that number, at every organization using Valeh, until START is sent. The description above has been corrected. This revision also discloses that messages may be delivered by WhatsApp and that Meta processes phone numbers when they are. No commitment made in this policy has been removed or narrowed.

August 16, 2026 — SMS disclosures. This revision adds the SMS messages section, describing who receives messages, how often, that message and data rates may apply, and that mobile numbers are not sold, rented, or shared with third parties for marketing. Nothing previously stated has been removed or narrowed.

Contact

Questions about this policy or your data can be sent to hello@myvaleh.com.