Legal
How biometric identifiers are handled, if and when a covered feature is used.
Smart Expedite does not obtain permission to create biometric identifiers or information merely by receiving a photo or identity document. Any covered collection requires specific prior written notice and a written release.
Smart Expedite does not obtain permission to create biometric identifiers or information merely by receiving a photo or identity document. Device-local biometric unlocking, where Smart Expedite receives only an authentication result and no template, is distinct. If a separately disclosed verification feature collects a legally covered face-geometry, fingerprint, voiceprint or other biometric identifier/information, Smart Expedite first gives written notice of the specific collection, purpose and length of term and obtains the individual’s written release as required by law.
Biometric information is used only for the specifically disclosed verification purpose and is protected with reasonable care at least as protective as that used for other confidential sensitive information. Smart Expedite will not sell, lease, trade or otherwise profit from a person’s biometric identifiers or information. Disclosure occurs only with legally sufficient permission, to complete a financial transaction requested/authorized by the subject where the statute permits, as required by law, or under a valid warrant or subpoena, as applicable. Ordinary marketing, model-development or general product-improvement interests do not authorize biometric reuse.
Smart Expedite and its providers permanently destroy covered biometric information when the initial purpose has been satisfied or within three years after the individual’s last interaction with Smart Expedite, whichever occurs first, unless a valid warrant or subpoena permits an exception under the applicable law. A general contract-retention schedule, an unspecified legal hold or continued usefulness does not extend this statutory ceiling. The approved feature schedule may require earlier deletion. Providers must supply evidence of destruction and apply the same limit to templates, derived biometric representations and backups. Minimum nonbiometric proof of notice, release and destruction may be retained under the separate compliance-evidence schedule. That record must not contain a face/voice/fingerprint template, reconstructable biometric representation or source biometric payload. A general backup-expiration period cannot extend the applicable biometric destruction deadline.
Questions: support@smartexpedite.com. Read the general Privacy Policy for additional contact information and privacy rights.
