Biometric Information Notice

1. Why this notice exists

Identity Entry compares your face with the portrait on your ID. Several laws treat face geometry as biometric information and require clear notice about how it is collected, used, kept and destroyed. This notice gives you that information in plain terms.

2. What biometric information is involved

• The selfie you take during the check.
• The portrait printed on your ID.
• A few camera frames from the short head-movement check.
• The face measurements produced when these images are compared, used only to reach the result of that check.

3. Why it is collected

Biometric information is used for three purposes only: to confirm that the person in front of the camera is the person on the ID, to confirm that the person is present right now and not a photo or recording, and, when you join an Identity Entry Access list for an event, building or departure, to recognize your face at that list's entrances. It is not used for any other purpose.

4. Consent

You start the check yourself from a private link sent by the business. You choose whether to begin. If you do not want to continue, you can close the page before taking any photos and nothing is captured. The business that sent the link is responsible for obtaining any additional written consent its laws require.

5. Retention schedule

• Selfie, ID photos and movement-check frames: kept encrypted with the account of the business that requested the check.
• Review period: the business has 7 days to review the results of each check.
• Capture link: closes after 30 minutes, after which no more images can be captured through it.
• How long it is kept: kept for up to 10 years after the person's most recent check, so a returning person can be confirmed without starting over. A person can have it deleted sooner at any time by emailing team@identityentry.com or by deleting their Identity Entry account. Where a state law sets a shorter period for biometric information, such as Illinois, Identity Entry follows that shorter period for residents of that state.

6. Who can see it

Only the business that requested the check can open its photos, from its own workspace. The check result and the reasons for it stay with the photos so the business can explain its decision later.

7. How it is protected

Photos are encrypted before they are stored and can be retrieved only by the workspace that requested the check. Capture links are signed and short-lived. These measures are described on the Security page.

8. What is never done

• Biometric information is never sold, leased or traded.
• It is never used to train models.
• It is never used to identify you outside the check or the Access list you agreed to.
• It is never used for advertising.

9. Who receives it

Biometric information is disclosed only to the business that requested the check and to the subprocessors that host and store it on Identity Entry's behalf, as listed on the Subprocessors page. It is otherwise disclosed only where the law requires it.

10. Your rights

You may ask what biometric information is held about you, ask for it to be deleted, and withdraw your consent. Contact the business that sent you the link, or use the contact page and we will help the business respond.