Privacy Policy

Last updated: March 2026

NYN Rentals ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our car rental services, website, and related applications.

1. Information We Collect

1.1 Personal Information You Provide

We collect information you provide directly to us, including:

Full name, email address, and phone number
Billing and payment information (processed securely by Stripe; we do not store your full credit card number)
Reservation details, rental history, and communication preferences

1.2 Identity Verification Data

To comply with rental requirements and prevent fraud, we use Stripe Identity to verify your identity. During this process, the following data may be collected and processed:

Government-issued identification documents — such as your driver's license, passport, or national ID card. This includes photographs of the front and/or back of your document.
Document data extracted via optical character recognition (OCR) — including your full name, date of birth, address, document number, issuing country, issued date, and expiration date.
Selfie photograph — a photo of your face taken during the verification process, used for facial comparison against your identity document.
Biometric data — facial geometry derived from your selfie and document photo for the purpose of identity matching. This biometric data is processed by Stripe and is not stored by NYN Rentals.

Important: Document images and selfie photographs are stored and processed by Stripe, not in our database. Our authorized administrators may temporarily view these images for verification review purposes, but images are never cached, downloaded, or stored on our servers. We store only the verification status, extracted text data (name, date of birth, address), and Stripe reference identifiers.

1.3 Automatically Collected Information

When you use our services, we automatically collect:

Device and browser information
IP address and approximate location data
Usage data and browsing patterns
Cookies and similar tracking technologies

2. How We Use Your Information

We use the collected information to:

Process and manage your reservations and rental agreements
Verify your identity and validate your driver's license eligibility
Process payments, refunds, and security deposit holds via Stripe
Detect and prevent fraud, unauthorized access, and misuse of our services
Communicate about your bookings, trip updates, and payment status
Process additional charges when applicable (e.g., damage, tolls, fuel surcharges, late return fees)
Send promotional offers and updates (only with your consent)
Improve our services and user experience
Comply with legal and regulatory obligations

3. Payment Processing and Security Deposits

All payment transactions are processed by Stripe, Inc., a PCI DSS Level 1 certified payment processor. We do not have access to, store, or process your full credit card number, CVV, or other sensitive payment credentials. This data is handled entirely by Stripe.

When you complete a booking, a temporary authorization hold (security deposit) may be placed on your payment method. This hold is not a charge. The hold amount, capture conditions, and release timeline are described in our Terms of Service.

Stripe may store your payment method information for the purpose of processing security deposit holds and any subsequent charges related to your rental (such as damage or additional fees).

4. Information Sharing and Third-Party Services

We may share your information with the following categories of third parties:

Stripe, Inc. — for payment processing, security deposit management, and identity verification (Stripe Identity). Stripe processes your payment data, identity documents, selfie photographs, and biometric data under its own privacy policy. Stripe's Privacy Policy
Supabase / Database providers — for secure storage of booking data and verification status
Communication services — for sending booking confirmations, reminders, and notifications via email and SMS
DocuSign — for electronic rental agreement signatures (when applicable)
Insurance providers — when necessary for claims processing
Law enforcement or government authorities — when required by law, subpoena, or legal process

We do not sell your personal information to third parties.

5. Biometric Data Disclosure

During identity verification, biometric identifiers (facial geometry) may be collected and processed by our third-party provider, Stripe, Inc. We provide this disclosure as required by applicable biometric privacy laws:

Purpose: Biometric data is used solely to verify that the person presenting the identity document is the same person depicted on the document.
Processing: Biometric data is processed by Stripe. NYN Rentals does not directly collect, store, or have access to raw biometric data.
Retention: Stripe retains biometric data in accordance with its data retention policies and applicable law. You may request deletion through Stripe or by contacting us.
Consent: By initiating the identity verification process, you consent to the collection and processing of your biometric data for identity verification purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

256-bit SSL/TLS encryption for all data in transit
Encrypted database storage with access controls
Server-side authentication and role-based authorization for admin access
No caching or local storage of identity document images
Secure, HTTP-only cookies for session management
Rate limiting on sensitive API endpoints

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information as follows:

Account and booking data: Retained for as long as your account is active and for a reasonable period afterward for legal and business purposes.
Identity verification status and extracted text data: Retained for the duration required by applicable law and our business needs. Stripe may independently redact verification data according to its own retention schedule.
Identity document images and selfie photos: Stored by Stripe and subject to Stripe's retention and redaction policies. Not stored by NYN Rentals.
Payment transaction records: Retained as required by tax, accounting, and legal obligations.
Communication logs: Retained for customer support and dispute resolution purposes.

8. Your Rights

Depending on your jurisdiction (including under CCPA, GDPR, and other applicable laws), you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete data
Request deletion of your personal data
Object to or restrict processing of your data
Request data portability
Withdraw consent at any time (without affecting the lawfulness of prior processing)
Request deletion of biometric data
Opt out of promotional communications

To exercise any of these rights, contact us using the information in Section 12 below. We will respond within the timeframe required by applicable law.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and support essential functionality. Types of cookies we use include:

Essential cookies: Required for site functionality, authentication, and secure booking access.
Analytics cookies: Help us understand how visitors use our site to improve our services.

You can control cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use certain features of our service.

10. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

12. Contact Us

For questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact us at:

Email: info@nynrentals.com
Phone: +1 (808) 909 1272
Address: 2121 Algaroba Street, Honolulu, HI 96826

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. We will post the updated policy on this page with a revised "Last updated" date. Material changes will be communicated through our website or via email. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.