Biometric Data Consent

To verify your identity, prevent fraud, and comply with federal Know-Your-Customer (KYC) and Anti-Money-Laundering (AML) obligations, we collect a photograph of your face (a “selfie”) and may generate a biometric identifier or biometric information from that image and from your government-issued ID — such as a facial geometry scan used to confirm that the person presenting the ID is its rightful holder (“Biometric Data”). This processing is performed by our identity-verification provider (Socure) on our behalf.

We collect, store, and use your Biometric Data only after you provide informed written consent (including electronic consent) on the identity verification screen. You are not required to consent, but identity verification cannot be completed without it, and the Service cannot be provided without identity verification.

We retain Biometric Data only as long as reasonably necessary to fulfill the purpose for which it was collected, and we permanently destroy it on the earlier of: (a) when the initial purpose for collection has been satisfied; or (b) within three (3) years of your last interaction with the Service — except where a longer period is required to comply with our legal, regulatory, or recordkeeping obligations (for example, retention of the verification record itself, separate from the underlying biometric template).

We do not sell, lease, trade, or otherwise profit from your Biometric Data, and we do not disclose it except: to our identity-verification provider to perform the verification; as required by law, subpoena, or warrant; or with your express consent.

For questions about this notice or your Biometric Data, contact privacy@digipae.com. Your other privacy rights are described in Section 11 of the Privacy Policy.