"Metropolis operates with a critical-risk privacy model centered on extensive biometric data collection (facial recognition, license plate readers, behavioral analytics) shared across a hospitality network and with third-party vendors with minimal point-of-collection consent requirements. The company retains biometric data for up to 5 years, enables cross-context behavioral advertising via third-party trackers, and explicitly cannot guarantee data security despite collecting highly sensitive information. While opt-out mechanisms exist for some practices, they require active user configuration and do not prevent collection at facilities using the company's core technology."
Take Action
8 Privacy Improvements Available
metropolis Privacy Concerns & Scorecard
Member profile data and recognition event logs shared across entire Metropolis Hospitality Network properties by default, with opt-out available but not required at point of enrollment
Biometric data retained for up to 5 years from most recent recognition event, creating long-term facial recognition and behavioral records
Extensive collection of biometric data including facial recognition templates (faceprints), facial geometry measurements, and automated license plate reader (ALPR) data without explicit point-of-capture consent
Complex multi-document privacy framework requiring reference to Exhibit B and supplemental notices; behavioral analytics and watchlist usage lacks transparent explanation of decision-making
Company explicitly states inability to guarantee security of personal information despite deployment of tracking and biometric technologies
Cross-context behavioral advertising and retargeting enabled via tracking technologies across websites and mobile platforms
Do not sell opt out
- 1Go to metropolis.io/do-not-sell-opt-out-request.
- 2Submit the opt-out form with your name and email address to request that Metropolis not sell information associated with your account.
Data deletion request
- 1Visit metropolis.io/privacy-consumer-rights-data-requests and click on 'Personal data request form', or email privacy@metropolis.io with 'Consumer Privacy Rights Request' in the subject line.
- 2Fill out the form with the identifying information (such as your email address) associated with your Metropolis account.
- 3If your personal information may be associated with more than one email address, submit a separate request for each email address.
- 4If acting through an authorized agent, use the authorized agent data request form instead.
Ai training opt out
- 1Go to metropolis.io/privacy-consumer-rights-data-requests or email privacy@metropolis.io with 'Consumer Privacy Rights Request' in the subject line.
- 2Submit a request to limit the use of your personal information for AI training purposes, citing the applicable state privacy law right to limit use of sensitive data.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, identity verification, employment/parking eligibility verification, communication
Facial recognition for access control and security alerting, behavioral analytics, watchlist matching against enterprise customer-configured lists
Parking enforcement, paid parking verification, citation issuance, unpaid debt tracking
Parking location services, facility access, behavioral analytics, visit history tracking across network
Website analytics, advertising targeting, cross-site tracking, behavioral profiling, device identification
Payment processing, billing, account management, purchase history tracking
Customer communications, feedback collection, marketing outreach (where consented)
Personalization, security alerting, behavioral profiling, cross-property member profile creation
Cross-Platform Tracking
Metropolis tracks you across its parking facilities, hospitality network properties, and website/mobile app through device identifiers, cookies, tracking pixels, IP addresses, and mobile ad identifiers. Your facial recognition profile and license plate information persist across all Metropolis-affiliated properties, and behavioral data collected at one location is shared across the entire network. Unique device identifiers remain associated with you even after app uninstallation, enabling re-identification upon reinstallation.
Tracking Methods:
Cookies
First-party and third-party cookies set by advertising partners to track user activities, IP address, cookie identifiers, pages visited, location, and time of day for interest-based and targeted advertising.
Tracking Pixels
Pixel tags and tracking pixels embedded in web pages and emails to collect information about user activities and enable cross-site behavioral tracking.
Web Beacons
Beacons deployed across websites for behavioral analytics and advertising performance measurement.
Device Fingerprinting
Unique device identifiers persist across app uninstallations and reinstallations, enabling re-association of user activities and cross-device tracking.
Mobile Ad ID
Mobile ad identifiers collected to enable targeted advertising and cross-app behavioral tracking.
Facial Recognition
Automated facial recognition technology at Metropolis-enabled facilities captures facial images and creates faceprints for identification and behavioral analytics.
Automated License Plate Reader (ALPR)
ALPR technology captures vehicle license plates at parking facilities for enforcement and tracking. Data retained 90 days to 5 years depending on payment status.
Google Analytics
Third-party analytics service deployed on Metropolis websites to track user behavior, visit patterns, and engagement metrics. Opt-out available.
AI & Data Training
metropolis uses your content to train AI
Below is what's used and how (if at all) you can object.
What Content Is Used
Biometric Data (Facial Recognition Templates & Images)
Facial recognition templates (faceprints), facial geometry measurements, facial photographs, and video images are used for AI training to improve security algorithms and recognition accuracy.
Behavioral Analytics Data
Body positioning, motion patterns, posture inferences, and recognition event logs are used for AI training to enhance behavioral analytics and security alerting systems.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed metropolis
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.