Privacy Policy

Draft, under legal review

A summary of the draft policy under review. The final policy will replace it before launch.

Who processes your ID and selfie

Didit, our identity provider, captures your ID and selfie and compares your face to your ID photo. That comparison uses biometric information, so we ask for your written consent first. Trust Engine never receives or stores your ID images, selfie or face data.

What the person who asked will see

• Your name as it appears on your ID
• Whether that name matches the name they know you by
• The type of ID you used (for example, passport)
• Whether your selfie matched your ID photo and was taken live
• When the check was completed
• Only if they chose an age check: whether your ID shows you are 18 or older (yes or no only)

What they never see

• Your ID photos or selfie
• Your ID number, date of birth or address

What we keep

The requester's name, email and reason, and the name they know you by; when and to which wording you consented; the limited result above; and payment records from Stripe (not card numbers). We do not sell or share personal information for advertising.

How long we keep it

Results are deleted 30 days after a check finishes. Checks that are declined or never finished are deleted when their link expires, 7 days after it was created. Didit and Stripe keep their own records under their own policies.

Your rights

Depending on your state, you can ask to know, correct or delete the personal information we hold about you. We don't sell personal information, and we honor Global Privacy Control signals. Trust Engine is for people 18 and older.