Biometric data policy

This policy covers the biometric data Canonset, Inc. ("Canonset", "we") collects when people who apply to work with us verify their identity. Questions: privacy@canonset.com, or Canonset, Inc., 10239 Northeast 26th Street, Bellevue, WA 98004.

What we collect

When you verify your identity with our ID check, you photograph both sides of your US driver's license or state ID card, and your camera takes three pictures of your face as you look at it and turn your head. Our software measures the face in those pictures and in the photo on your ID, to check that they show the same person. Those measurements, and the pictures of your face, are biometric data under the laws of Illinois, Colorado, Washington and other states. We collect no other biometric data: no fingerprints, voiceprints or eye scans.

Why

Only to confirm that each applicant is the person on their ID, and to prevent fraud, before paid work and approval. We use it for nothing else, and never to train AI models.

Notice and consent

Before anything is collected, the ID check shows what it collects, why, who gets it and how long it's kept, and asks for your written consent, which you sign by ticking a box and typing your name. You don't have to agree: you can verify on a short video call with our team instead, with no face matching and nothing recorded. You can withdraw your consent at any time by emailing privacy@canonset.com.

Who receives it

Only Canonset. The check runs on our own servers, which Amazon Web Services hosts for us in the United States, like the rest of our data; no identity-verification company or other third party receives your pictures or the measurements. When the software can't settle a check, a person on our team who decides applications looks at the pictures. We don't sell, lease or trade biometric data, or profit from it in any other way, and we disclose it to no one else unless you consent, or a law, warrant or subpoena requires it. Our clients are told only that your identity was verified, and when.

Retention and destruction

• The face measurements exist only while the check runs, a few seconds, and are never stored.
• The pictures are deleted as soon as the check is decided. When the software settles it, they're never stored at all. When a person needs to look, they're deleted when that person decides, and in any case 7 days after you took them. Our database backups, kept for 7 days, may hold pictures waiting for a person; they leave the backups within 7 days of being deleted.
• In every case, biometric data is destroyed once its purpose is met, and never kept more than 1 year after your last interaction with us. We review this schedule once a year.

What we keep

The check's result and date, how it was checked, the name on your ID, its type, issuing state and expiry date, whether you're 18 or over, the scores the check produced (numbers that say how alike the pictures were; no one can be identified from them), whether the front showed the barcode's name, a date and the number, and a one-way code made from your ID's state and number, so that one ID can't be used for two accounts. We don't keep your ID's number, your date of birth or your address. None of these is biometric data, and they're deleted with your account. A record of your consent (the text's version, the name you typed and the time) is kept in our security audit log, which outlives the account, as proof of what you agreed to.

Security

Pictures waiting for a person are stored encrypted, in our database in the United States. Only the staff who decide applications can open them, after signing in with a passkey, and every opening and decision is recorded in our audit log. If a breach affects your data, we tell you as the law requires.

Your rights

Email privacy@canonset.com to see or delete your data, or to withdraw your consent. We act within 7 days.