Privacy policy
Last updated: 2026-08-26
This policy explains what the Authryn platform stores, why, and who can reach it.
What we store
For employees: name, email, phone and role. For customers of a rental company: name, phone, address, date of birth and images of the identity documents the company records. For rentals: vehicle details, dates, prices, inspection readings and photos, the agreement and its signed scan.
Who can see it
Only employees of the company that recorded the data, limited further by their role. Isolation is enforced in the database itself, not only in the interface. Authryn staff access production data only when needed to operate or repair the service.
Files are never public
Photos, identity documents and signed agreements are stored in private buckets and are only ever served through short-lived signed links generated after a permission check. There is no public address for any customer document.
The public verification page
Scanning the QR code on an agreement shows only the agreement number, the company, the vehicle, the rental period, the renter's initials and whether the stored contents still match the original fingerprint. No phone number, address or document is shown.
Text messages
Verification codes are sent through an SMS provider, which receives the phone number in order to deliver the message. Codes are short-lived and are not usable after verification.
What is kept on your device
Signing in stores a random identifier on the machine you sign in from, in a cookie and in the browser's own storage, so that the machine can be recognised the next time and does not have to be approved again. It is a random value tied to no person and is used for nothing else: there is no advertising, no analytics and no tracking across other websites. Alongside it we keep a hash of what the browser reports about itself - screen size, time zone, language - shown to your director as a hint that a request comes from a machine already in use.
Retention
Rental records are kept while the rental company needs them for legal, tax and insurance purposes. Audit events are append-only and are retained for the life of the account.
Contact us
For questions about this policy or a data request, speak to your rental company first. If it concerns the platform itself, use the contact page on this site. We will answer you there.