Biometric Information Notice

1. Purpose of This Notice

This notice describes how Authentiq handles biometric data in connection with its face-analysis and liveness features. It is provided in the spirit of the Illinois Biometric Information Privacy Act (BIPA) and comparable state laws (such as those in Texas and Washington), which regulate the collection, use, and storage of biometric identifiers.

2. What Biometric Data Is

For purposes of this notice, a biometric template (or biometric identifier) means facial geometry and the derived numerical representations — commonly called face or voice embeddings — that can be used to uniquely identify or verify an individual. Authentiq may compute such templates transiently to perform face matching, quality assessment, and liveness/anti-spoofing checks.

Separately, our analysis may produce derived attributes — for example an estimated age range, an inferred expression/emotion label, head-pose angles, or an image quality score. These are non-reversible characterizations that cannot be used to reconstruct a biometric template or re-identify an individual on their own.

3. Our Commitment: No Biometric Template Storage

Authentiq does not store biometric templates. Face and voice embeddings exist only in memory during the brief processing of a single request and are discarded immediately once the analysis completes. They are never written to a database, log, or persistent store.

We may retain the derived attributes described above and forensic analysis results (such as authenticity scores) as part of an analysis record, so you can review your reports. These derived attributes are subject to configurable retention controls and can be deleted on request (see Sections 5 and 6). Organizations integrating Authentiq can further restrict or disable storage of derived attributes through their biometric data policy.

We do not sell, lease, trade, or otherwise profit from biometric templates or biometric information, and we do not disclose them to third parties.

4. Consent

Where Authentiq features are used for identity verification or liveness, the operator of the integration is responsible for obtaining any legally required consent from the individual before a face image is submitted. Our verification and liveness flows are designed to support presenting a clear notice and capturing affirmative consent prior to capture.

5. Retention & Destruction

Biometric templates (embeddings) are processed in memory only and are never retained after a request is processed. Derived attributes and analysis results may be retained as part of your analysis record and are purged in accordance with our data retention policy and any retention window configured by the integrating organization. Associated session metadata (for example, a verification result or timestamp) is purged on the same basis.

6. Your Rights

Under BIPA and similar laws, you may have rights regarding biometric data, including the right to be informed about its collection and use and to know our retention and destruction practices. Because we do not retain biometric templates, there are no stored biometric templates to access or delete. You may request access to, or deletion of, any derived attributes associated with your analyses, and you may contact us with questions about our practices.

7. Changes to This Notice

We may update this notice from time to time and will revise the "Last updated" date above when we do.

8. Contact Us

For questions about our biometric data practices, contact privacy@authentiq.ai.