This notice describes how CBiBank IDMe processes sensitive personal data, including biometric information, during identity verification. It supplements our Privacy Policy.

1. Biometric information

To confirm that you are a real, live person and that you match your identity document, the Service may capture a selfie image and derive facial-liveness and facial-matching signals ("biometric data").

2. Consent

We collect and process biometric data only with your explicit consent, provided before the face-liveness step. You may decline, though verification may not be able to proceed without it.

3. Purpose and limitation

Biometric data is used solely to verify identity and prevent fraud. It is not sold, and it is not used for advertising, profiling, or any purpose beyond verification.

4. Retention and deletion

Biometric data is retained only for as long as necessary to complete verification and to meet legal retention obligations, and is then permanently deleted in accordance with our retention schedule and applicable law (including biometric-privacy statutes such as BIPA where relevant).

5. Security

Sensitive data is encrypted in transit and at rest, and access is limited to authorized personnel and processors under contractual safeguards.

6. Your rights and contact

You may request information about, or deletion of, your biometric data by contacting your support team, subject to applicable law.