Biometric & Identity Data Collection Notice

Effective: May 2026 · Applies to: Driver Verification Flow · Version 1.0

Plain English summary: We collect your driver's license photo and a selfie to confirm you are who you say you are, and that you are legally allowed to drive. We do not sell this data. We delete it after 90 days. You can request deletion any time.

1. What We Collect & Why

Data	Purpose	Stored how long
Driver's license image (front)	OCR to verify name, expiry date, licence number format	90 days, then permanently deleted
Selfie photograph	Facial comparison with DL photo to confirm identity	90 days, then permanently deleted
Derived facial geometry score	Numeric match confidence between DL photo and selfie	90 days, then permanently deleted
Licence number (masked)	Format validation by jurisdiction — last 4 digits only stored	Duration of driver account, deleted on account closure
Verification status	Allow/block driver access to platform features	Duration of driver account
Consent timestamp & jurisdiction	Legal audit record that consent was given	Duration of driver account + 1 year

🔒

Your biometric and identity data is never sold, rented, leased, or shared with any third party for commercial purposes.

It is not used for advertising, profiling, credit scoring, or any purpose outside of driver identity verification on this platform.

2. How We Store & Protect Your Data

Stored in a physically separate, access-controlled database from all other platform data
Images stored using cryptographic hash filenames — not linked to your name or phone number in any filename
Your phone number is one-way hashed before being stored in the identity database — we cannot reverse it
Database accessible only by the verification service — not by any other part of the platform
Server located in the United States (AWS EC2) with encryption at rest
No third-party AI or cloud vision API receives your images — all processing is done locally on our server

3. Jurisdiction-Specific Legal Notices

Additional rights and disclosures apply depending on where you are located:

🇺🇸

United States — General

Data handled under the federal Driver's Privacy Protection Act (DPPA). Your DL information is used solely for the permissible purpose of identity verification. California residents have additional rights under CCPA (see below).

🇺🇸 Illinois

Illinois — BIPA Notice

Under the Biometric Information Privacy Act (740 ILCS 14), you have the right to refuse this consent. Biometric data will not be sold, leased, or traded. It will be destroyed within 90 days of last use or account deletion, whichever is sooner. Retention schedule available on request.

🇺🇸 California

California — CCPA Rights

Under the California Consumer Privacy Act you have the right to: (1) know what personal data is collected, (2) request deletion, (3) opt out of sale (we do not sell data), (4) non-discrimination for exercising these rights. Contact: privacy@transit-mesh.net

🇨🇦

Canada — PIPEDA / Quebec Law 25

Data collected under PIPEDA and, for Quebec residents, Law 25. You have the right to access, correct, and request deletion of your personal information. A privacy impact assessment is maintained. Contact: privacy@transit-mesh.net

🇬🇧

United Kingdom — UK GDPR

Processing under UK GDPR Article 6(1)(b) (contract) and Article 9 (biometric data with explicit consent). Lawful basis: identity verification for a transport service contract. You have the right to access, rectify, erase, restrict, and port your data. Right to withdraw consent at any time without affecting lawfulness of prior processing.

🇦🇺

Australia — Privacy Act 1988

Data collected and handled under the Australian Privacy Principles (APPs). APP 3: collected for the primary purpose of identity verification. APP 6: not disclosed for secondary purposes. APP 11: protected by reasonable security. You may access or correct your information under APP 12/13.

4. Your Rights

Access — request a copy of what identity data we hold about you
Correction — request correction of inaccurate data
Deletion / Erasure — request permanent deletion of all identity data at any time (your driver access will be suspended pending re-verification)
Withdraw consent — you may withdraw biometric consent at any time; this will not affect data processed before withdrawal
Portability — request your verification status record in machine-readable format
Complaint — you have the right to lodge a complaint with your local data protection authority

To exercise any right: privacy@transit-mesh.net — we respond within 30 days.

5. Retention & Deletion Schedule

Event	Action
90 days after verification	DL image, selfie, and facial geometry score permanently deleted from all storage
Account deletion request	All identity data deleted within 72 hours
Driver account inactive 12+ months	Full identity record deleted
Verification rejected	Images deleted immediately; rejection reason retained 30 days then deleted

6. Contact & Questions

Privacy Officer: privacy@transit-mesh.net
Transit Mesh Research · transit-mesh.net