Privacy is built into Lucerne.

Personal information is information that directly or indirectly identifies an individual. Depending on how the Lucerne service is configured at a given property, we may collect:

• License plate number
• One photo of the vehicle and its plate, taken at the moment of detection
• Date, time, property and entrance of the detection
• Parking authorization status and the history of that visit (grace period, warning, tow)
• Account information for Lucerne customers and property managers (name, business email, phone number, login credentials)
• Plates that a property manager adds to their own authorized list (for example, residents or employees)
• Information submitted through the Lucerne website (quote requests and contact messages: name, email, phone, property details and your message)
• Technical information necessary to operate and secure the service

What we do not collect

• No continuous video recording is stored. Only one photo per detected vehicle is kept.
• No facial recognition, and no identification of drivers or passengers. We do not record the vehicle's make, model or color.
• We do not look up the name or address of a vehicle's owner, and we do not combine plate data with other databases.
• We do not track a vehicle from one customer's property to another: each property's data is kept separate.

Lucerne works for property owners and managers (our customers). For information collected by cameras at a parking property:

• The customer decides to monitor its parking property, sets its authorization rules (who may park, grace period, towing company) and makes every enforcement decision.
• Lucerne provides the cameras, software and hosting, and handles the information on the customer's behalf, only for that customer's parking management, under a written service agreement.

Drivers can contact either the property or Lucerne's Privacy Officer directly. We will handle the request or forward it to the right organization and tell you.

1. A camera at the property's entrance observes vehicles entering or leaving.
2. Plate-recognition software running on equipment at the property reads the plate from the camera image.
3. Only full, confident reads are sent to Lucerne OS. Partial plates (for example a plate hidden by another vehicle) and low-confidence reads are discarded.
4. Lucerne OS compares the plate with the property's authorized list and creates an event with the photo.
5. Authorized vehicles need no action and are deleted after 2 hours. A vehicle that isn't on the list automatically gets the grace period set by the property.
6. If it is still there when the grace period ends, the property manager receives a text message, looks at the photo and decides: let it stay, or request a tow.
7. Only if the manager requests a tow is the relevant information (plate, vehicle, photo, property) sent to the property's towing company.

We only collect information needed to manage parking on the customer's private property. Each element has a specific reason:

This information is used only for parking management, customer support, securing the service and meeting legal obligations. It is not used for marketing, profiling or any other purpose, and it is never sold or rented.

Before a new type of deployment, Lucerne assesses whether the collection is necessary and proportionate for the property (a privacy impact assessment), and chooses the least intrusive configuration that works: short retention for authorized vehicles, no video storage, and no access across properties.

Lucerne automatically reads plates and compares them with the property's authorized list. This produces a status (authorized or not). A vehicle that isn't on the list automatically starts the grace period set by the property, and moves to "final warning" when it ends.

No decision affecting a driver is made by the system alone.

• A final warning is not an accusation of an offence. It asks a person to look.
• A tow can only be requested by a property manager, after they review the photo and the details.
• Every manager action is logged with the manager's name and time.

If you believe a reading or a decision about your vehicle was wrong, write to our Privacy Officer. You can explain your situation and have it reviewed by a person, and incorrect information will be corrected.

• Partial or low-confidence plate reads are automatically discarded instead of being recorded.
• Each record keeps the original photo, so a person can compare the plate read with the actual vehicle.
• The same vehicle read several times within 15 minutes is recorded as a single visit.
• Property managers can correct their authorized list at any time, and anyone can ask us to correct a record about their vehicle.

• Authorized personnel of the property where the vehicle was detected, and only for that property. Each property's data is isolated at the database level.
• Authorized Lucerne personnel, only when needed to provide, maintain, secure or support the service.
• The property's towing company, only for a vehicle whose tow a manager requested.
• The service providers listed in the next section, only to operate the service.
• Government authorities or other parties, only where disclosure is required or permitted by law.

Lucerne relies on the following service providers. Some of their infrastructure is located outside Québec, mainly in the United States, so personal information may be stored or processed outside Québec.

Before communicating personal information outside Québec, Lucerne assesses the privacy impacts, taking into account the sensitivity of the information, the purpose, the protection measures and the legal framework of the destination, as required by Québec law. Each provider is bound by contractual terms that limit its use of the information to providing its service and require appropriate security.

Detection records are deleted automatically, every day, on the following schedule:

Records are deleted by an automatic daily process, together with their photos. When a customer's contract ends, that property's detection data and authorized list are deleted within 30 days, unless the law requires otherwise.

Our database provider keeps encrypted backups for disaster recovery. Deleted information may remain in these backups for a short period (at most 30 days) before being overwritten. Backups are not used for any other purpose.

Lucerne uses safeguards appropriate to the sensitivity of the information, including:

• Encryption of all connections (HTTPS) and encryption of stored data at rest
• Two-step sign-in for property managers: a password plus a single-use code sent by email
• Isolation of each property's data at the database level (Row Level Security): a manager can only see their own property
• Vehicle photos stored privately and shown only through short-lived secure links
• Secret keys kept on the server only, never in the browser; the camera connection to Lucerne is protected by a secret key
• A log of every manager action (who did what, and when)
• Access by Lucerne personnel limited to what is needed to operate and support the service
• Automatic alerts when a camera stops responding

A confidentiality incident is any unauthorized access, use, disclosure or loss of personal information. If one occurs, Lucerne will:

1. Take immediate measures to limit the harm and prevent it from happening again
2. Assess whether the incident presents a risk of serious harm, considering the sensitivity of the information, the likely consequences and their probability
3. If there is a risk of serious harm, promptly notify the Commission d'accès à l'information and the affected people, and inform the affected customers
4. Record the incident in our incident register, kept for at least 5 years, even when there is no risk of serious harm

To report a suspected incident, write to privacy@lucerne-systems.com.

Under Québec law, you have the right to:

• Know whether we hold information about you or your vehicle, and receive a copy
• Have inaccurate, incomplete or unnecessary information corrected or deleted
• Present your observations and have a decision about your vehicle reviewed by a person
• Withdraw your consent where the processing is based on consent
• Make a complaint to us, and to the Commission d'accès à l'information du Québec

How to make a request

1. Write to privacy@lucerne-systems.com.
2. Include the plate number, the property and the approximate date and time. We will ask for proof that the vehicle is yours before sharing anything.
3. We reply in writing within 30 days, free of charge.

Because authorized vehicles are deleted after 2 hours and other visits after 30 days, we may no longer hold any information about an older visit. If you are not satisfied with our answer, you may contact the Commission d'accès à l'information du Québec.

Drivers must be informed before they enter. Each Lucerne property must display clearly visible signs at its entrances before the system is activated. The signs state:

• That the parking lot uses automatic license plate recognition cameras
• The purpose: managing parking for authorized users, including towing of unauthorized vehicles
• The name of the property or its manager, and that the system is operated by Lucerne Systems
• Where to find this policy and how to make a request (privacy@lucerne-systems.com)

The property owner or operator is responsible for posting and maintaining these signs. Lucerne supplies the wording and verifies the signs during installation.

Lucerne provides the technology and workflow tools to support the customer's parking management. The property manager decides whether a tow should occur, and the tow itself is carried out by the property's towing company under the rules that apply to it. Information is sent to the towing company only for the vehicle concerned.

The Lucerne website uses only what it needs to work:

• Sign-in session: when a customer signs in to Lucerne OS, the session is stored in the browser so they stay signed in
• Display preferences: the dashboard remembers the light or dark theme and the language on the device
• Language: the English and French versions of the site are separate pages; no cookie is used to remember your language
• Audience measurement: Vercel Web Analytics counts page views in aggregate (page visited, referring site, country, device type). It does not use cookies and does not identify individual visitors
• Security logs: our hosting provider keeps technical request logs (such as IP address and time) for a short period to protect the site against abuse

The website does not use advertising or marketing trackers. If that changes, this section will be updated and reviewed against applicable Québec requirements before deployment.

Information collected through lucerne-systems.com (such as account or contact information) is handled differently from information collected by cameras at a customer's parking property. This policy covers both, but the ALPR sections above apply specifically to parking-lot cameras, not to general website browsing.

Lucerne is a private company based in Québec, and our practices follow the Act respecting the protection of personal information in the private sector (as amended by Law 25). Where information crosses provincial or national borders in the course of commercial activity, the federal Personal Information Protection and Electronic Documents Act (PIPEDA) may also apply, and we follow its principles as well. Lucerne currently operates only in Canada.

Lucerne's services are not directed toward children. Lucerne does not knowingly collect personal information directly from children.

Lucerne may update this policy as its practices, technology, services or legal obligations change. The date at the top shows the latest version. Material changes will be communicated to customers, and the updated policy will be published on this page.