Biometric Privacy Notice

1. About This Notice

This Biometric Privacy Notice explains how IdGenum, LLC ("IdGenum", "we", "us", or "our") collects, uses, retains, and destroys biometric information when you choose to enroll in biometric features. It supplements our Privacy Policy and is presented during biometric enrollment so you can review it before you consent.

2. Biometric Information We Collect

If you choose to enroll in biometric features, and depending on the features you use, IdGenum may process information derived from your facial or voice characteristics. This may include:

• facial geometry or derived facial representations; and
• biometric voice features or derived speaker representations.

Biometric enrollment is optional unless a particular feature clearly requires verified identity status.

3. Purpose of Collection

IdGenum processes biometric information to verify identity, protect your persona against impersonation or unauthorized use, and provide eligible identity-protection features. We do not use biometric information for advertising.

4. Consent

Biometric enrollment is optional, and biometric processing is performed only after you are presented with this notice and complete the applicable consent process. Where required by law, IdGenum obtains affirmative or written consent before collecting or processing biometric identifiers or biometric information.

Your biometric enrollment consent is a separate, affirmative choice. It is not bundled with your acceptance of the Terms of Service or Privacy Policy.

5. Retention and Destruction

IdGenum retains biometric information only for as long as reasonably necessary to provide the applicable feature, satisfy the purpose for which it was collected, comply with applicable law, and protect the security or integrity of the service.

Where the Illinois Biometric Information Privacy Act ("BIPA") applies, covered biometric identifiers and biometric information will be destroyed when the initial purpose for collecting or obtaining them has been satisfied or within three years of the individual's last interaction with IdGenum, whichever occurs first, unless a different retention period is permitted or required by applicable law.

Raw biometric capture information used only for processing is designed to be deleted promptly after the applicable processing workflow is completed.

6. Your Rights and Consent Withdrawal

If you enroll in biometric features, you may withdraw biometric consent in accordance with applicable law and the available product controls. Withdrawal of biometric consent may:

• disable biometric verification;
• cause biometric-derived information associated with the verification feature to be deleted in accordance with applicable retention requirements; and
• change the verification status or availability of features that require biometric verification.

Withdrawal of biometric consent does not, by itself, delete your basic IdGenum account or persona unless you separately request account or persona deletion. To exercise a biometric privacy right, contact privacy@idgenum.com or use the applicable privacy controls available through your IdGenum account. Additional information is available on our Privacy Choices page.

7. No Sale of Biometric Information

IdGenum does not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information.