Biometric Data Policy
Our publicly available retention and destruction schedule for biometric data, including for Illinois BIPA.
Last updated: 2026-09-30
Template for review. Replace bracketed details and have qualified counsel review this document for each jurisdiction before launch.
What we process
When customers send images through the API, we create face templates — numeric representations used for matching. Templates are biometric identifiers or information under laws such as BIPA. We don't retain the original images after processing.
Purpose
We use templates solely to provide the service to our customer: verification, recognition, liveness and attribute analysis. We never sell, lease, trade or otherwise profit from biometric data.
Retention and destruction schedule
Biometric data is permanently destroyed at the earliest of:
- when the customer deletes it through the API or dashboard;
- when the initial purpose of collection has been satisfied, as instructed by the customer;
- within 30 days after the customer's account ends; or
- three years after the individual's last interaction with the customer.
Disclosure
We don't disclose biometric data except to sub-processors acting on our behalf under written terms, where the individual has consented, or where required by law or valid legal process.
Security
We protect biometric data with at least the same standard of care we use for other confidential and sensitive information.
Customer responsibilities
Customers must provide the notices and obtain the consents or written releases required by law before submitting images.