Biometric Data Policy

The short version: Afto uses Stripe Identity to verify a live image of your driver's license and compare the license photo with a live selfie. Stripe processes those images directly; Afto receives the verification result and limited license details needed for driver eligibility.

1. What counts as biometric data here

The Stripe Identity flow captures images of your driver's license and a live selfie. Stripe may derive or process biometric identifiers or biometric information from facial features to determine whether the selfie matches the photograph on the license and whether the document is authentic.

2. Current use

Afto uses the result only to verify identity, confirm driver eligibility, prevent fraud, protect users and vehicles, and comply with applicable legal or safety obligations. Afto does not use verification images or biometric information for advertising.

Stripe presents the required disclosure and consent step before it captures a document or selfie. Do not continue unless you understand and consent to that processing. Contact [email protected] before verification if you have a question about an applicable alternative or accommodation.

4. Disclosure

Afto does not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information. Stripe and its authorized subprocessors may process the information to provide identity verification, prevent fraud, maintain security, and comply with law. We may also disclose information when required by valid legal process.

5. Retention and deletion

Afto does not store the raw license or selfie images collected in the active Stripe Identity flow. Stripe retains and deletes verification data under Afto's configured instructions, Stripe's applicable service terms, and legal requirements. Afto retains the verification status, provider session reference, and limited driver-eligibility details under the retention terms in our Privacy Policy. We instruct our provider to delete covered verification data when the purpose has been satisfied or within the period required by applicable law, subject to a legal obligation to preserve it.

6. Your rights

Contact [email protected] if you have a question about verification data or want to exercise an applicable privacy right.

This policy supplements our Privacy Policy — read that for the full picture of how we handle your information generally.