Persona privacy & data

Persona acts as a processor (or similar role under applicable law) on behalf of the customer controller who has contracted with us

Name and contact information, including name, email address, address, and phone number

Demographic data, including birthdate and age

Biometric Data, only with your express consent, including a scan of your facial geometry based on the photos or video you provide

Geolocation data, as we may infer your general geographic location (such as city, state, and country) based on your IP address. We do not collect precise geolocation data

Files you upload, such as tax forms and utility bills

so that our customers may verify your age and prevent fraud

Use your information, including ID and Selfie Scan Data, to detect, prevent, and investigate fraud and abuse.

complying with applicable laws, for example performing AML/KYC checks for regulated customers

Age Estimation Scan Data is deleted immediately as soon as an outcome has been determined

Persona will permanently destroy ID and Selfie Scan Data upon completion of identity verification services or within three years of your last interaction with Persona

Currently, we primarily use data centers in the United States and Germany.

Persona complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework

When we do so, we use legal mechanisms, including contracts, to help ensure your rights and protections.

We may disclose personal data to service providers, including hosting, cloud services and other information technology services providers

To exercise any privacy rights you may have, please contact the appropriate customer who will be better able to help you.

such as the right to access or correct your personal data

such as the right to access or correct your personal data

Persona does not sell or share personal data with third parties.