Biometric Policy - Identity as a Service through the Sales Demonstration Website

Updated On:December 29, 2025

Welcome to Identity-as-a-Service, offered by IDmission, LLC. (“IDmission,” “we,” “our,” or “us”). This Biometric Policy describes IDmission’s policies with respect to our processing of biometric information on behalf of our clients (“Clients”) that use our authentication service to verify and vet the identities and credentials of individuals (collectively, the “Services”). By clicking “I consent” and accessing or using the Services, you signify that you have read, understood, and consent to be bound by this Biometric Policy (the “Biometric Policy”) and to the collection and use of your biometric information as set forth below. This Biometric Policy applies to all visitors, users, and others who access and/or use the Service (“Users”) and is intended to comply with laws that are applicable to the collection and use of biometric information, including the Illinois Biometric Information Privacy Act (“BIPA”) and Texas Capture or Use of Biometric Identifier Act (“CUBI”) (collectively, the “Biometric Laws”).

Please read this Biometric Policy carefully to ensure that you understand each provision.

Biometric Information. IDmission collects facial biometric information (described below) through the Services only with your express consent. Users must consent to this Biometric Policy as part of their enrollment or registration of the Services. You are free to decline or revoke your consent at any time by emailing us at privacyteam@idmission.com. However, if you do so you will be unable to register and utilize the Services.

Facial Biometrics. If you enroll in the Services, you agree to use our facial biometric Services in which IDmission will collect an image of your face that you provide through a mobile app and a photo or scan of your face as it appears on an identification document. IDmission will use facial recognition technology only for the purpose of verifying your identity as the person who appears on the identification document.

Disclosure of Biometric Information. IDmission may share the facial scans with the IDmission Client through which you used IDmission’s identity verification service. We do not sell, lease, trade or otherwise profit from biometric information. We may disclose your biometric information to our authorized service providers or other third parties if:

• you or your authorized representative consent to the disclosure;
• the disclosure is required pursuant to a valid warrant, subpoena, or court order issued by a court of competent jurisdiction; or
• the disclosure is required by law.

Data Retention and Deletion.IDmission will store, transmit and protect all biometric information from disclosure using a reasonable standard of care and in the same or more protective manner in which IDmission stores, transmits and protects other confidential and sensitive information. IDmission will retain biometric information only as long as necessary to fulfill the purpose for which the data was collected, or as otherwise required by law or contractual obligations with our Clients. For Clients that use our Services on a one-time basis, biometric information will be permanently deleted after twenty-four (24) hours of our collection. For Clients that utilize our Services for ongoing biometric authentication, such biometric information will be permanently deleted no later than one (1) year after the termination of the Client’s agreement with us. If we receive written instructions from a Client to delete their biometric information earlier, we will follow such instructions promptly, subject to applicable legal obligations.

Notification of Changes to this Policy. Technology and the Internet are rapidly changing. IDmission therefore is likely to make changes to the Services in the future and may need to revise this Biometric Policy to reflect those changes. When we revise the Policy, IDmission will post the new Policy on the IDmission website’s home page (www.idmission.com) and also on the IDentity Service website (https://identity.idmission.com), so you should review that page periodically. If we make a material change to the Policy, you will be provided with appropriate notice and we will obtain your additional consent where required by law. If we maintain your email address or phone number, we also may email you a copy or send notification of the revised Biometric Policy at your most recently provided email address or phone number. It is therefore important that you update your email address or phone number if it changes.

Questions or comments. If you have any questions or comments regarding our Biometric Policy, please email us at: privacyteam@idmission.com.