Payment data: zero on our end.

Airview maintains a deliberate PCI scope of zero. We do not store credit card numbers. We never see them. Every card transaction is handled on our processor's hosted 3DS page, end-to-end, and we receive only whether the charge succeeded or failed.

What this means in practice. If our systems were breached tomorrow, an attacker would find no card numbers, no CVVs, no expiry dates. We don't store them because we don't accept them on our infrastructure. This is one of the cleanest answers we can give a corporate procurement officer.

This is a different model from most service businesses, which "vault" customer cards for repeat charges. We chose not to. The trade-off: customers pay per trip rather than having a saved card on file. The benefit: zero exposure if anything goes wrong with our systems.

Encryption and storage.

In transit

TLS 1.3 where the client supports it, with TLS 1.2 as the minimum, across the public site, customer portal, dispatcher portal, and internal APIs. Card payments run on our processor's own PCI-certified TLS.

At rest

Sensitive fields such as driver SINs are encrypted at the application layer, and every database backup is AES-256 encrypted. Sign-in tokens (the customer session cookie, one-time SMS codes, and email sign-in links) are stored as SHA-256 hashes, never the raw value. Passwords aren't part of our customer model (we use SMS-OTP and email magic-link instead).

Backups

Daily encrypted backups retained 30 days, with quarterly recovery drills. Backup storage segregated from production credentials.

Access

Two-factor authentication required on all staff portal access. Audit log on customer-record reads and writes. Principle-of-least-privilege role assignment.

What we store, and for how long.

Plain inventory of what's in our systems. If you'd like a copy of your own data or want it deleted, email info@airview.limo per the request rights in our Privacy Policy.

Booking history. Trip records (pickup, drop-off, date, vehicle, driver, fare). Retained 7 years for tax / accounting compliance with Canadian regulations.
Customer account. Name, phone, email, saved addresses, recurring-trip preferences. Retained while your account is active; deleted within 30 days of account-closure request.
Call recordings + transcripts. Inbound calls to our dispatch line are recorded for quality and dispatch verification (with the spoken disclosure at the start of every call). Retained 90 days, then auto-deleted. Customers may opt out by saying so to the agent or dispatcher.
Trip location data. GPS pings from the vehicle during your trip. Retained 30 days for service-quality and incident review, then deleted. Not used for marketing.
Payment records. Transaction success/failure logs plus the processor's transaction reference. No card details. Retained 7 years per Canadian tax law.

Third-party vendors.

Every external service that touches your data is listed below, by role and certification. Corporate procurement teams who need the named vendor list and current certificates can email info@airview.limo; we provide it without fuss.

Payment partner

Handles every card transaction on their 3DS hosted page. PCI DSS Level 1 certified. Located in Canada.

SMS carrier

Sends booking confirmations and OTP codes over an encrypted API. SOC 2 Type 2.

Voice-AI platform

Sophia, our AI dispatcher, runs on a third-party voice platform with large-language-model providers behind it. Call audio + transcripts are processed for the duration of the call and retained per our 90-day policy. None of this data is used to train external models.

Google Maps

Address autocomplete and route distance/time calculation. Trip start/end addresses are sent to Google for these queries; nothing else is shared.

Dispatch system

Internal dispatch backend. Self-hosted; trip records remain on Airview-controlled infrastructure.

Compliance & regulation.

PIPEDA (Personal Information Protection and Electronic Documents Act, Canada). Privacy policy at /privacy describes your access, correction, and deletion rights.
AODA accessibility compliance. Information available in accessible formats on request via info@airview.limo.
CASL (Canada's Anti-Spam Legislation). All marketing communication requires explicit opt-in. Transactional SMS (booking confirmations, driver arrival) is sent only to the phone number on the booking.
PIPEDA data rights: access, correction, and withdrawal of consent for your personal information, exercisable any time via the same email.
Provincial & municipal licensing. MTO commercial operator, GTAA Pearson permit, City of Mississauga ground-transport licence. All current and renewed annually.

If something goes wrong.

We don't pretend that security incidents don't happen anywhere. If we ever detect or are notified of a breach affecting customer data, here's the protocol:

Contain and assess scope within 24 hours of detection.
Notify the Office of the Privacy Commissioner of Canada (OPC) if the breach meets the PIPEDA threshold of "real risk of significant harm".
Notify affected individuals directly (email and/or SMS using the contact on file) within 72 hours of confirmation.
Post a public statement on this page describing the scope, the data affected, and the remediation taken.
Engage a third-party forensics firm if the scope warrants it.

Reporting a security concern. See something? Email info@airview.limo. We respond within one business day. Responsible-disclosure researchers are welcomed and credited.

For corporate procurement

RFP-ready documentation.

For travel programs and procurement teams: we provide certificates of insurance, vendor-list disclosures, SOC-2 vendor reports (where available), and data-flow diagrams within one business day. Most RFP questionnaires we've seen are answerable directly from this page.

Request documentation