Privacy Policy

Autaire("we," "our," or "us") operates the Autaire platform, which provides operating software for independent luxury and exotic vehicle rental operators (each, an "Operator"). This Privacy Policy explains how we collect, use, disclose, and protect information about Operators and the renters whose data Operators process through our platform ("Renters").

By using Autaire, you agree to the collection and use of information as described in this policy. If you do not agree, do not use the platform.

2.1 Operator Account Information

When an Operator creates an account, we collect name, email address, business name, and billing information. We use Stripe to process payments; we do not store full payment card numbers.

2.2 Renter Information

Through the platform, Operators collect information about their Renters, including but not limited to: full legal name, date of birth, government-issued ID documents (including scans or photographs of driver's licenses or passports), email address, phone number, and payment card details used for deposits and holds.

Autaire processes this Renter data on behalf of Operators as a data processor. Operators are the data controllers responsible for their Renters' information under applicable law. [REVIEW: Confirm controller/processor designation with counsel.]

2.3 Usage and Log Data

We automatically collect log data when you use the platform, including IP address, browser type, pages visited, and timestamps. We may use cookies and similar technologies to operate and improve the service.

2.4 Communications

If you contact us by email or through the platform, we retain those communications and any information you provide in them.

We use the information we collect to:

• —Provide, operate, and improve the Autaire platform
• —Process bookings, payments, and rental contracts on behalf of Operators
• —Perform identity verification services as directed by Operators
• —Track toll and charge timelines tied to rental periods
• —Send transactional communications related to your account or bookings
• —Comply with legal obligations and enforce our Terms of Service
• —Detect, investigate, and prevent fraud or misuse

We do not sell personal information to third parties. [REVIEW: Confirm under CCPA/state law definitions of "sale."]

The platform enables Operators to scan and collect government-issued identification documents as part of the renter verification process. This data is treated as sensitive personal information. We apply appropriate technical and organizational measures to protect it, limit access to authorized personnel, and retain it only as long as necessary to fulfill the purposes described in this policy.

[REVIEW: Confirm retention periods, deletion procedures, and any applicable state biometric or ID-data laws (e.g., Illinois BIPA, Texas CUBI, Washington MY Health MY Data).]

Payment card data for deposits and rental holds is processed by Stripe, Inc. under their own privacy policy and PCI-DSS compliance program. Autaire does not store full card numbers. We retain transaction records and hold metadata as necessary for billing, dispute resolution, and legal compliance.

[REVIEW: Confirm Stripe data processing agreement is in place.]

We may share information in the following circumstances:

• —Service providers: We share data with vendors who help us operate the platform (cloud hosting, payment processing, ID verification). These vendors are contractually bound to protect the data.
• —Operators: Renter data collected through an Operator's portal is accessible to that Operator.
• —Legal requirements: We may disclose information when required by law, subpoena, or court order, or to protect the rights or safety of Autaire, Operators, Renters, or the public.
• —Business transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred as part of that transaction.

We retain personal information for as long as necessary to provide the platform, comply with legal obligations, resolve disputes, and enforce agreements. [REVIEW: Define specific retention periods for ID documents, payment records, booking records, and operator account data.]

We use industry-standard technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction. No system is perfectly secure; we cannot guarantee absolute security.

[REVIEW: Document specific security controls: encryption at rest/in transit, access controls, audit logging, to support any representations made here.]

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your data. To exercise any such rights, contact us at support@autaire.com.

[REVIEW: Add jurisdiction-specific disclosures as needed: GDPR (EEA), CCPA (California), PIPEDA (Canada), or others applicable to your user base.]

The Autaire platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. We will notify Operators of material changes by email or in-platform notice. Continued use of the platform after the effective date of a revised policy constitutes acceptance of the changes.

Questions about this Privacy Policy may be directed to: