Data Retention

1. Our approach

Identity Entry keeps each kind of information only as long as it is needed. The most sensitive information, the photos and camera frames, is encrypted when it arrives and can be opened only by the business that requested the check.

2. Information from a check

• Capture link: closes after 30 minutes.
• ID photos, selfies and movement-check frames: kept encrypted with the business's account.
• Review period: the business has 7 days to review the results of each check.
• Check result and reasons: kept in the business's workspace so the decision can be explained later.
• Identity profile (ID photos, selfies and face record): kept for up to 10 years after the person's most recent check, so a returning person can be confirmed without starting over. A person can have it deleted sooner at any time by emailing team@identityentry.com or by deleting their Identity Entry account. Where a state law sets a shorter period for biometric information, such as Illinois, Identity Entry follows that shorter period for residents of that state.
• Consent records: kept with the check result as a record that consent was given.
• Decisions and notes: kept in the workspace audit log alongside the check.

3. Records check information

Identity Entry does not offer a Social Security number check today, so it holds no Social Security numbers to keep or delete.

4. Account information

• Organization and team details: kept while the account is open.
• Password hashes: kept while the account is open. Passwords themselves are never stored in readable form.
• API keys: kept until the business revokes them or closes the account.
• Workspace settings: kept while the account is open.

5. Billing information

Records of purchases, amounts and dates are kept as long as tax and accounting laws require. Card and bank details are held by our payment provider and not by Identity Entry.

6. Technical logs

Technical records of requests, such as IP addresses and timestamps, are kept for a limited period to keep the service secure and investigate problems, and are then removed.

7. Messages to us

Messages sent through the contact page are kept as long as needed to respond and to keep a record of the conversation.

8. Requests about your information

A person who was checked can ask what is held about them, ask for a correction, or ask for it to be deleted. Contact the business that sent the link, or use the contact page.

9. When an account closes

When a business closes its account, access stops right away. Workspace information is deleted or returned as described in the Data Processing terms, except where the law requires us to keep it.

10. Legal holds and questions

Where the law requires information to be kept longer, for example because of a valid legal order, we keep only what is required and only for as long as required. For questions about retention, use the contact page.