License plate data

Draft for counsel. We collect a plate, state, time, and sometimes a photo and GPS point so we can tell a paid car from an unpaid one and so a notice has evidence.

• Photos sent for a plate read are not kept after the read.
• Plate text on ordinary scans is removed after 24 hours. The nightly job is included; schedule it once hosting is connected.
• Session plates are kept for 90 days, then reduced to a hash unless a notice still needs the plate.
• Notice photos are kept with the notice.
• Staff who reveal a full plate from the repeat list are written to an append-only access log.
• Plate data is not sold.