Privacy Policy

Autaire is operated by Wifi Solutions LLC("we," "our," or "us"). Autaire is operating software for independent luxury and exotic vehicle rental operators (each, an "Operator"). This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have. It covers both Operators and the renters whose information Operators process through the platform ("Renters").

By using Autaire you agree to the practices described here. If you do not agree, please do not use the platform.

2.1 Operator account information

When an Operator creates an account we collect a name, email address, business name, and the operational settings they configure. Payouts are handled through Stripe Connect; the Operator completes Stripe's own onboarding and we never see or store their full bank or card details.

2.2 Renter information

When a Renter books a vehicle on an Operator's storefront, the platform collects: full name, email address, phone number, pick-up address, the rental dates, and an image of the Renter's driver's license (front, and optionally the back). The license image is analyzed to read the name, date of birth, license number, and expiry so the Operator can confirm eligibility.

Autaire processes this Renter information on behalf of the Operator. The Operator is the party responsible for deciding how their Renters' information is used (the controller); Autaire acts as their service provider (the processor).

2.3 Payment information

Deposits are placed as an authorization hold on the Renter's card through Stripe. Under the platform's direct-charge model the Operator is the merchant of record. Card numbers are handled entirely by Stripe; Autaire stores only non-sensitive references (such as a Stripe customer or payment identifier) needed to manage the hold, issue refunds, and bill approved toll or citation charges.

2.4 Usage and device data

We automatically record basic technical data when the platform is used, including IP address, browser type, the pages visited, and timestamps. We use this to operate the service, keep it secure, and prevent abuse. We use only the cookies necessary to keep you signed in and to run the site; we do not use advertising cookies.

We use the information we collect to:

• —Operate the storefront, booking, deposit, and contract-signing flow
• —Read a driver’s license image to confirm renter identity and eligibility
• —Place deposit holds and process approved toll or citation charges through Stripe
• —Send transactional email about a booking or account (confirmations, signed contracts)
• —Keep the platform secure, including rate limiting and fraud prevention
• —Comply with legal obligations and enforce our Terms of Service

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

A driver's license image is sensitive personal information, and we treat it that way. It is collected only to verify identity and rental eligibility. The image is sent to Google's Gemini API to extract the printed fields; under Google's API terms that content is not used to train Google's models. Access to license data within the platform is limited to the Operator who took the booking, enforced by database-level tenant isolation.

We do not collect biometric identifiers such as faceprints or fingerprints, and we do not perform facial recognition.

We use a small set of established providers to run the platform. Each processes data only to provide its service to us:

• —Stripe — payment processing, deposit holds, and operator payouts (Stripe Connect)
• —Google (Gemini API) — reading the printed fields from a driver’s license image
• —Supabase — database and file storage for platform data
• —Vercel — application hosting and content delivery
• —Resend — delivery of transactional email

We may also disclose information when required by law, subpoena, or court order, or to protect the rights and safety of Autaire, our Operators, Renters, or the public; and, if the business is ever merged, acquired, or its assets sold, as part of that transaction.

We keep personal information only as long as it is needed for the purpose it was collected. As a general rule:

• —Driver’s license images and parsed ID fields: retained no longer than 12 months after the related rental concludes, unless a longer period is required by law or an active dispute
• —Booking, contract, and transaction records: retained for the period required for tax, accounting, and dispute-resolution purposes (typically up to 7 years)
• —Operator account data: retained while the account is active and for a reasonable period afterward

A Renter may ask the Operator, or contact us directly, to have their information deleted sooner where we are not legally required to keep it.

We protect information with measures appropriate to its sensitivity, including encryption in transit (TLS) and at rest, database row-level security that isolates each Operator's data from every other Operator, scoped access for server-side operations, signed one-time links for contract signing, and rate limiting on public endpoints. No system is perfectly secure and we cannot guarantee absolute security, but we work to hold the platform to a professional standard.

Depending on where you live, you may have the right to access, correct, delete, or limit the use of your personal information, to request a copy of it, and to appeal a decision we make about such a request. California residents have these rights under the CCPA/CPRA, and residents of the EEA and UK have equivalent rights under the GDPR. We do not discriminate against anyone for exercising these rights.

To make a request, email support@autaire.com. Because Operators control their Renters' information, we may direct a Renter request to the relevant Operator or act on their instruction. We will verify your identity before acting on a request.

The platform is intended for licensed drivers and is not directed to anyone under 18. We do not knowingly collect information from minors. If you believe a minor's information has been collected, contact us and we will delete it.

We may update this policy from time to time. If we make a material change we will update the effective date above and, for Operators, provide notice by email or in-platform. Continued use after the effective date means you accept the update.

Questions about this policy can be sent to: