opinvera legal terms
Biometric Data Retention and Destruction Notice
Effective Invalid Date · Version 0.1-draft · Draft — under legal review
Status: DRAFT — under legal review (LR-11). Version: 0.1-draft
Draft — under legal review. This text has not been cleared by counsel. It is published so that it can be read before launch and becomes part of the Privacy Policy when a cleared version is published.
Some US states (Illinois, Texas and Washington among them) require an organisation that collects biometric identifiers to publish a written policy on how long it keeps them and when it destroys them, and to obtain informed written consent before collecting them. This notice is that policy, written to be read by everyone, wherever they are. It supplements Privacy Policy §2, §2A and §7 and Terms of Service §5.3.
1. What is collected, by whom
Optional identity verification asks you for an image of a government-issued identity document and a selfie. Our identity verification provider (currently Stripe Identity) captures both, compares them, and may derive a facial geometry from the selfie to do so. OpinVera never receives the document image, the selfie, or any facial geometry. It receives the outcome (verified, not verified, or needs review), a non-reversible token that lets it recognise an attempt to verify the same identity twice, and limited metadata about the check.
2. Consent
Before the check begins you are shown this notice and asked for your explicit consent to the collection of the document image, the selfie and the derived facial geometry for the purpose of verifying your identity once. The consent is recorded separately from your acceptance of the Terms, with the version of this notice you saw. You may decline; declining ends the check and affects only whether your votes carry verified weight.
3. Purpose, and no other use
Biometric data is used for one purpose: to verify, once, that the person holding the account is the person on the document, and that the same person has not already verified another account. It is never used to identify you to anyone else, never sold, never licensed, never used for advertising, and never used to train a model.
4. Retention schedule
| Data | Held by | Retained | Destroyed |
|---|---|---|---|
| Document image, selfie, facial geometry | The verification provider | For the duration of the check and any manual review it requires | Redacted by the provider at our instruction once the outcome is final — in the ordinary case within days, and in every case within the shorter of one (1) year from your last interaction with the Platform and three (3) years from collection, as Illinois law requires. |
| Outcome and check metadata | OpinVera | For the life of the account, as the basis of your verified status | On account deletion, within the window the Data Deletion Request chapter states. |
| The non-reversible duplicate token | OpinVera | For the life of the account, so that a second verification of the same identity can be recognised | On account deletion, with the account. |
In plain words: the biometric data — the selfie and the document images — is redacted by the provider after verification. The non-biometric verification data the provider holds (your name, the document number, the result) is retained by the provider for three years by default under the provider's own retention policy, not ours; OpinVera keeps only the result and the date of the check.
5. Security
The provider holds biometric data under its own security programme and under contract to us; OpinVera holds no biometric data and so has none to secure. The outcome and the token are protected like the rest of your account data.
6. Your rights
You may ask what we hold about your verification, ask for it to be deleted (which removes your verified status), and withdraw the consent in §2 before the check completes, by writing to support@opinvera.com. The appeal path for a refused verification is in the Community Guidelines §5.