IDmission helps various online service provider platforms validate your identity.
IDmission provides software that eliminates risk associated with false identities and is headquartered in the United States. IDmission will collect images of your photo ID and your selfie and will securely process and store them on our Clients’ behalf. Only a limited number of individuals will have access to review any user-submitted data.

IDmission does not sell any user-submitted data.
Our Clients define data retention policies and specify how long to keep data before it is permanently deleted from our systems. IDmission uses Amazon Web Services to store your data which is encrypted both in transit and at rest. IDmission maintains a robust security policy, is ISO 27001:2013 certified and undergoes regular security penetration testing by external auditors.

Privacy Policy for Identity-as-a-Service
Updated On: December 29, 2025

IDmission LLC (“IDmission”) is concerned about privacy issues and respects the privacy of our users. This Privacy Policy (“Policy”) describes our privacy practices concerning personal information collected in connection with IDmission’s IDentity Solution and Identity-as-a-Service, including self-service registration, and all associated validation, enrollment and verification services available through the product and services (the “Services”). A separate policy describes our privacy practices in connection with our online website, located at http://www.idmission.com/company/privacy-policy/. Please see our Biometric Policy – Identity-as-a-Service for information about our privacy practices concerning biometric information in compliance with applicable biometric privacy laws.

IDmission makes the Services available to our clients, their customers and third parties for use in their identity verification and enrollment practices. IDmission collects, uses, and discloses individual users’ information only as directed by these third parties and, accordingly, IDmission is a mere processor of user information with respect to the Services and not a controller. Further, some features of the Services may be disabled or altered by the data controller, or the controller may require IDmission to collect, use, disclose, or otherwise process data in ways that differ from those described below. Thus, to fully understand how your information will be handled when you use the Services, you must review not just this Policy, but also the privacy policy of the third party with whom you are dealing directly (the “Third-Party Data Controller”).

What personal and other information IDmission collects about you
IDmission collects “personal information” about users of the Services. “Personal information” is information such as name, email address, or identification card image, which refers to an identified or identifiable person. In connection with the Services, IDmission processes personal information on behalf of and at the instruction of Third-Party Data Controllers. For its own purposes, IDmission processes only anonymized information. “Anonymized information” is information which does not relate to an identified or identifiable person or is rendered anonymous in such a manner that the person is no longer identifiable.

Personal information. IDmission collects a wide range of personal information through the Services. This information varies depending on the IDentity application and the Third-Party Data Controller in question, but may include such information as name, physical address, email address, telephone number, social security number, driver’s license number, state or national ID card number, passport number, other ID card number, credit or debit card number, CVV, expiration date, and/or date of birth. In some cases, IDmission may collect a visually scanned or photographed image of your face and/or your identification card, driver’s license, passport, utility bill, bank account statement, or credit/debit card. This image may include your photograph and other information from the imaged document, such as your eye color, weight, height, and organ donor status.

Biometric Information. IDmission collects biometric information through the Services. Our Biometric Policy must be reviewed separately and users of the Services must consent to this policy as part of their enrollment or registration of the Services. 

Data provided by third parties. We may receive personal  information about you from the Third-Party Data Controller that integrates the Services into its website, application, or other online service. This information includes a unique ID, selected by the Third-Party Data Controller, that uniquely identifies you in the third party’s database. For additional information, review the privacy policy of the Third-Party Data Controller.

At the direction of the Third-Party Data Controller, IDmission also might obtain information about you from other third parties, such as consumer reporting agencies and fraud-prevention services.

Cookies and other tracking data. When you use the Services, we automatically receive and record certain information from your computer (or other device) and/or your web browser. This may include such information as the third-party website or application into which the Services are integrated, the date and time that you use the Services, your IP address and domain name, your software and hardware attributes (including operating system, device model, and hashed device fingerprint information), and your general geographic location ( e.g. your city, state, or metropolitan region).

We also use cookies in connection with the Services  as described below.

Cookies
What are cookies? Cookies are small files that are stored on your computer or other device by your web browser. A cookie allows IDmission to recognize whether you have used the Services before and may store user preferences and other information.

How are cookies used? For example, cookies can be used to collect information about your use of the Services during your current session and over time, your computer or other device’s operating system and browser type, your Internet service provider, your domain name and IP address, and your general geographic location. 

How do you avoid cookies? If you are concerned about having cookies on your computer or device, you can set your browser to refuse all cookies or to indicate when a cookie is being set, allowing you to decide whether to accept it. You can also delete cookies from your computer. However, if you choose to block or delete cookies, certain features of the Services may not operate correctly.

How IDmission uses the personal information that we collect
Personal information is used by IDmission only as directed by the Third-Party Data Controller that integrates the Services into its website, application, or other online service.

Subject to the privacy policy of the Third-Party Data Controller, we use your personal information as follows on behalf of the Third-Party Data Controller:

IDmission uses your personal information to provide the Services. For example, we might use your credit card information or ID card information to populate an online form, or to verify your identity in connection with your use of another online service. We also may use your personal information to fulfill the terms of any agreement between us and the Third-Party Data Controller; to complete a transaction that you initiate; to deliver account information, notifications, and similar operational communications; and to comply with legal and/or regulatory requirements.

How IDmission shares personal information with third parties.
In general, IDmission shares the personal information that we collect in connection with the Services as discussed below.

However, IDmission shares personal information only as directed by the Third-Party Data Controller, and thus the following language is subject to the privacy policy of the Third-Party Data Controller.

Third-Party Data Controller. We share the personal information that we collect on behalf of a particular Third-Party Data Controller with that Third-Party Data Controller.

IDmission service providers. IDmission also uses third-party service providers to help us deliver, manage, and improve the Services. These service providers may collect and/or use your personal information to assist us in achieving the purposes discussed above in the section entitled “How we use the personal information that we collect.” For example, we use a third party to help us translate the information contained in scanned images of identification cards.

We also may share your personal information with other third parties when necessary to fulfill your requests for services; to complete a transaction that you initiate; or to meet the terms of any agreement that you have with us or our partners.

Legal purposes. WWe also may use or share your personal information with third parties when we have reason to believe that doing so is necessary:

• to comply with applicable law or a court order, subpoena, or other legal process;

• to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of our terms and conditions, or situations involving threats to our property or the property or physical safety of any person or third party;

• to establish, protect, or exercise our legal rights or defend against legal claims; or

• to facilitate the financing, securitization, insuring, sale, assignment, bankruptcy, or other disposal of all or part of our business or assets.
  
  

Anonymized or Aggregated information. From time to time, IDmission may also share anonymized or aggregated information about users of the Services, such as by publishing a report on trends in the usage of the Services.

Security
IDmission uses commercially reasonable physical, electronic, and procedural safeguards to protect your personal information against loss or unauthorized access, use, modification, or deletion. Among other things, IDmission encrypts personal information both in transit and at rest. IDmission is PCI Level 3 compliant and regularly conducts security audits, vulnerability scans, and penetration tests to ensure compliance with security best practices and standards. However, no security program is foolproof, and thus we cannot guarantee the absolute security of your personal or other information. Moreover, we cannot guarantee the safety of your information when in the possession of other parties, such as Third-Party Data Controllers.

Reviewing, updating or deleting your information
IDmission will grant you access to your personal information as directed by the Third-Party Data Controller that integrates the Services into its website, application, or online service. IDmission also will retain your personal information as directed by the Third-Party Data Controller and in accordance with our data retention policies. 

Thus, if you want to learn more about the personal information that IDmission has about you, or you would like to submit a request to update, change or delete that information, please contact the Third-Party Data Controller. You also may submit a request to us at privacyteam@idmission.com. or call us at 1-800-925-8041 ext. 4. You may also authorize another person (your “agent”) to submit a request on your behalf, and in the same manner. 

Changes to this Policy
Technology and the Internet are rapidly changing. IDmission therefore is likely to make changes to the Services in the future and  may need to revise this Policy to reflect those changes. When we revise the Policy, IDmission will post the new Policy on the IDmission website’s home page (www.idmission.com) and also on the IDentity Service website (https://identity.idmission.com), so you should review that page periodically. If we make a material change to the Policy, you will be provided with appropriate notice. If we maintain your email address, we also may email you a copy of the revised Policy at your most recently provided email address. It is therefore important that you update your email address if it changes.

Questions or comments

If you have any questions or comments regarding our Policy, please email us at: 
privacyteam@idmission.com