Legal
Privacy Policy
- Last updated
- August 12, 2026
- Version
- v1.0
This policy explains what personal information AuthenCore AI Parking collects, how location, vehicle, and payment data are handled, who it is shared with, and your rights under PIPEDA.
1. What we collect
Account details (name, email, mobile number), registered vehicle details, device and session diagnostics, location signals, and payment metadata.
We collect only what is needed to open, confirm, and settle parking sessions and to support and secure the service.
2. How location data is used
Location signals are used to confirm entry to and exit from geofenced parking zones. Confirmation requires multiple readings; single readings are never acted on.
Location history is not sold, and is not used for advertising or for profiling outside parking session determination.
3. Vehicle and licence plate data
Plate, province or territory, and vehicle description are stored to link a session to the correct vehicle identity.
Plates are normalized for matching and are visible to the operator of a facility where your vehicle has parked.
4. Payment data and tokenization
Card details are captured by our payment processor and stored as tokens. We retain only the brand, last four digits, and expiry.
Full card numbers and security codes never reach AuthenCore systems and are never stored by us.
5. Data shared with parking operators
Operators can see sessions, vehicles, and payment outcomes for their own facilities only, together with the minimum customer detail needed to resolve a session.
Operator changes to sessions, rates, or payments are recorded in an audit log with the actor and a reason.
6. Data shared with municipalities
Municipal data sharing is off by default, is enabled per zone, and is field-level opt-in.
Where enabled, only the fields explicitly selected for that zone are transmitted, and each transmission is logged.
7. Retention and anonymization
Personal information is retained only as long as needed for the purposes described here, or as required by law.
On account deletion, identifying fields are anonymized while financial records are retained for the statutory retention period.
8. Your rights under PIPEDA
You may access, correct, or request deletion of your personal information, and withdraw consent, subject to legal and contractual limits.
You may also complain to the Office of the Privacy Commissioner of Canada if you are not satisfied with our response.
9. Cookies
We use strictly necessary cookies for authentication and session security.
Analytics or preference cookies, if introduced, will be described here and made optional.
10. Security
Data is encrypted in transit and at rest, access is role-scoped, and privileged actions are logged.
We review access controls regularly and restrict staff access to what their role requires.
11. Contact and our Privacy Officer
Privacy requests and questions can be sent to privacy@authencore.ai, attention Privacy Officer.
AuthenCore AI, Ontario, Canada.
APerks loyalty program
Draft, pending legal review. Effective October 21, 2026.
When you create a customer account, you become a member of APerks, our loyalty program. This section explains the personal information we use to run APerks. The rest of this Privacy Policy also applies.
What we use. To run APerks, we use information we already hold to provide parking and payments:
- your account details (name, email, account reference);
- your registered vehicles;
- your transactions: date, location or lot, duration, the amount charged and its breakdown (parking charge, discounts, taxes and fees), refunds and payment disputes;
- your APerks records: Miles earned, pending, reversed and redeemed, your tier, milestones and badges, and rewards you redeem.
APerks does not use your continuous location history, the contents of your payment card, or information about you from data brokers. We use the location of a completed session only to identify the lot and to apply the qualifying-session rules.
Why we use it. We use this information to:
- calculate, hold, release and reverse Miles, tiers, milestones and badges;
- show your balance and history in the app;
- process redemptions and apply credits;
- detect and prevent fraud and misuse of the Program;
- keep accurate records for accounting, tax and audit purposes;
- understand how the Program is used, in aggregated or de-identified form, so we can improve it.
Consent. Using your account and transaction information to run APerks is part of the service you sign up for. We ask for your separate, express consent before we send you promotional messages about APerks offers, and you can withdraw that consent at any time without affecting your Miles.
Messages. We send service messages about your Miles, such as pending Miles becoming available, a milestone or a change to the Program, through the app and by email. Promotional messages, such as bonus offers or partner promotions, are sent only with your consent, and every promotional email includes an unsubscribe link. You can manage both in your account's notification settings.
Sharing. We do not sell your personal information. We share APerks information only:
- with service providers who host, process payments or support the Program for us, under contracts that protect your information;
- with a reward partner, only the information needed to provide a reward you choose to redeem (for example a reward code or your name), and we tell you what will be shared before you confirm;
- with parking operators, only in aggregated form that does not identify you, unless you agree otherwise;
- where required by law, or to protect against fraud.
Where it is stored. APerks information is stored with our other account information, in the United States. Information stored outside Canada may be accessible to authorities in that country under its laws.
How long we keep it. We keep APerks records for as long as your account is open and for 7 years after a transaction for accounting, tax and dispute purposes. When you leave the Program or close your account, we stop using your information for APerks and keep only the records we must retain.
Your choices and rights. You can see your Miles, tier and history in the app at any time. You may ask to access or correct your personal information, withdraw consent to promotional messages, or leave the Program, by contacting info@authencore.ai. Leaving the Program cancels unredeemed Miles, as set out in the APerks Program Terms.
Demonstration accounts. Accounts we create for demonstrations and testing may display sample APerks activity. Those accounts do not belong to real customers.
Contact. Questions about APerks and your privacy: Privacy Officer, AuthenCoreAI Inc., Ontario, Canada, info@authencore.ai.