Biometric Retention and Destruction Schedule

This schedule applies to biometric identifiers and biometric information used for identity verification through Stripe Identity, to the identification-document and selfie images captured during that verification, and to related ACar consent and verification records. ACar uses Stripe Identity as its identity-verification provider.

ACar does not store the underlying facial geometry template. Stripe controls storage and deletion of biometric identifiers created or stored by Stripe Identity. Stripe's public help materials state that if you gave consent only for Stripe to verify your identity and for fraud and security purposes, the biometric identifiers used to make the initial verification are fully removed from Stripe systems within one year.

ACar retains a copy of the images captured during identity verification: the front and back of the government-issued identification document you present, and the selfie image taken for comparison against that document. These copies are made at the time your verification completes and are stored by ACar independently of Stripe.

ACar NJ LLC is a licensed New Jersey motor vehicle dealer. New Jersey motor vehicle dealer recordkeeping requirements, together with title, registration, odometer, tax, and anti-fraud obligations, require a dealer to keep the records supporting each transaction, including records establishing the identity of the person who bought, sold, or transferred a vehicle. ACar retains these images for that purpose, and to defend against identity fraud, title fraud, and disputes.

ACar may retain verification status, Stripe session identifiers, timestamps, extracted identity fields where returned by Stripe, the identification-document and selfie images described above, consent records, transaction eligibility records, and related support or audit records for as long as reasonably needed for identity verification, fraud prevention, safety, account support, dealer records, title and registration, tax, payment, payout, dispute, legal compliance, and audit purposes.

Identification and selfie images are held in encrypted, access-controlled storage. They are not published, not accessible through any public link, not used for advertising, not used to train any artificial-intelligence model, and not sold. They are never shown to buyers, sellers, or other users; other users see only that a person is verified. Access is limited to the verified person themselves and to authorized ACar personnel with a business, recordkeeping, fraud-prevention, or legal-compliance reason to view them, and to government agencies, regulators, or auditors where law requires disclosure.

ACar retains identification and selfie images for the period required by applicable New Jersey motor vehicle dealer recordkeeping requirements and by applicable title, registration, tax, payment, and anti-fraud obligations, measured from the later of your last transaction with ACar and the close of your account. Where no legal retention obligation applies to a given record, ACar retains it only as long as reasonably needed for the purposes described in this schedule.

When biometric information, identification images, or related verification records are no longer needed and retention is not required for legal, dealer, title, registration, payment, tax, fraud-prevention, dispute, audit, or security purposes, ACar deletes, de-identifies, or archives the records according to its data-retention procedures. For biometric identifiers controlled by Stripe, deletion is handled through Stripe's processes.

To request deletion, request a copy, or ask questions, email [email protected]. ACar honors deletion requests except where a record must be kept to satisfy a dealer recordkeeping, title, registration, tax, legal, or fraud-prevention obligation; in that case ACar will tell you what is being retained and why, and will delete it at the end of the required period. You may also need to contact Stripe at [email protected] for identity data Stripe stores under Stripe Identity.