Privacy notice

What we collect

Photos of the identity document you choose, a short selfie video and still frames from it, details read from the document, and technical information about your device and camera that helps detect fraud.

Why, and on what basis

To verify your identity for the company that sent you here and to prevent fraud. Facial images are biometric data; we process them only with your explicit consent, which you give on the first screen.

How long we keep it

• Photos and video: for the period the company that sent you here chose, between 1 and 90 days after a decision (30 unless they changed it), for review and disputes. The first screen tells you theirs.
• Details read from your document: up to 90 days after a decision.
• The result and the checks behind it: 2 years, for audit. These hold no images.
• A numerical description of your face, and fingerprints of your document number, date of birth, photos and network address (one-way codes that can't be turned back into them): up to 2 years, to stop the same identity being misused.

Once deleted, photos and video are gone: no copies of them are kept. Our database is backed up so it can be restored after a failure, so other deleted records stay in those backups, encrypted, for up to 8 days, and are then gone too.

Where it's stored

On servers and storage in Germany (EU). Every photo and video is encrypted with its own key before it is stored.

Who else sees it

If our system can't read part of your document, an AI service (Anthropic, in the United States) may read it again for us before a person checks it. It receives only the document images, with your photo blanked out, processes them on our behalf, and doesn't use them to train its models.