Biometric Data Policy

What is collected

To verify your identity, our identity provider, Stripe Identity (operated by Stripe, Inc. and its affiliates), captures photos of your government ID and a live selfie, and compares the face in the selfie with the photo on the document. That comparison uses biometric identifiers (face geometry). In the US it also checks your ID number (SSN).

Why

To confirm you are a real person and the person on the document, and that one person holds only one WorkPair ID. It is used for nothing else.

Who processes it

Stripe performs the capture and comparison on our behalf. WorkPair does not receive or store images, face geometry or biometric templates. We receive the result, your legal name, date of birth (used only to confirm you are 18 or older and to match a record kept for you as a child) and your ID numbers, which we keep only as one-way hashes.

Retention and destruction

• As soon as we have used the result, we instruct Stripe to delete (redact) the session: the document images, the selfie and the ID numbers. If that request fails, we retry automatically.
• In any case, biometric data is destroyed when the purpose above has been met, and never later than [Counsel to confirm: the outer limit, e.g. 3 years after your last interaction (740 ILCS 14/15(a))].
• We never sell, lease, trade or otherwise profit from biometric data, and we disclose it only to Stripe for the purpose above, or where the law requires.

Your written release

Before every identity check we ask you to agree to this policy. That agreement is your written release under the Illinois Biometric Information Privacy Act and similar laws in Texas and Washington. We keep a receipt of it. You don’t have to agree, but without the check you can’t get a verified WorkPair ID or vouch for someone. [Counsel to confirm: CUBI and RCW 19.375 wording; GDPR Art. 9(2)(a) explicit consent wording]

Questions

WorkPair®, Inc. · support@workpair.io