1. When this notice applies
The selected identity provider is Persona or Plaid, identified before you consent to a check. The new Plaid retention disclosure in section 5 applies only to new Plaid Identity Verification checks accepted under this version. It does not replace promises made under an earlier notice or change retention for existing checks, Persona, or bank checks.
This notice applies only when an escrow office enables a Veto workflow that clearly asks you to photograph an identity document and take a selfie or video through the selected provider. The public notice does not itself give consent. Before the selected provider opens, Veto requires separate acceptance of its Terms and this notice and records the notice versions and acceptance time. The selected provider must also show any provider notice required for the selected check.
If the workflow does not ask for an ID image, selfie, or video, Veto does not collect biometric information through that workflow.
2. Information collected
Depending on the enabled identity check, the selected provider may collect or generate:
- a photograph or scan of a government-issued identity document;
- a selfie photograph or short video;
- face geometry or another mathematical representation derived from the selfie, video, or identity-document image;
- document, device, liveness, and fraud signals; and
- the inquiry identifier, status, result, and supporting metadata.
Depending on applicable law, some derived information may be a biometric identifier or biometric information. Veto does not use this workflow to collect a fingerprint, retina or iris scan, or voiceprint.
The selected provider performs the capture and comparison. Veto ordinarily receives the inquiry ID, result, limited document or identity metadata, and source evidence needed for the office’s review. Veto does not ordinarily copy a raw biometric template into its active systems.
3. Purpose
The information is used only to:
- perform the identity check requested for the specific transaction workflow;
- compare the presented identity evidence and return a result or limitation;
- prevent, detect, or investigate fraud, impersonation, abuse, or a security incident;
- give the office limited source evidence for its review; and
- meet applicable legal, security, and record-of-consent duties.
The office decides. Veto records the review.
An identity-provider result is not Veto’s independent authentication, approval, authorization, or guarantee. It does not establish authority to act, ownership of a bank account, or that a payment instruction is safe.
4. Disclosure and sale
Veto may disclose this information to the selected provider and infrastructure providers needed to perform and secure the workflow; to the customer office that requested the workflow; on the customer’s documented instruction; or when law, a valid warrant, subpoena, or court order requires it.
Veto does not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information. Veto does not use them for advertising, data brokerage, general-purpose model training, credit or eligibility decisions, or an unrelated commercial purpose.
5. Retention and permanent destruction
Existing checks and Persona
The following schedule continues unchanged for checks accepted under an earlier notice and for Persona checks under this version.
Veto’s policy is to permanently destroy biometric identifiers and biometric information when the initial purpose for collecting them has been satisfied. Unless a valid warrant, subpoena, court order, or other law requires a different period, destruction must occur no later than:
- 90 days after collection, or an earlier date required by the customer’s signed data schedule; or
- three years after your last interaction with Veto,
whichever occurs first.
Veto will delete copies in its active systems and instruct Persona and direct providers processing the information for Veto to delete their copies. Routine disaster-recovery backups may retain deleted information until they cycle out; they are not used for ordinary processing, and deletion is reapplied before restored data becomes available.
Veto may retain a non-biometric record that the workflow occurred, the provider’s outcome and stated limitations, consent evidence, deletion date, and a non-reversible deletion receipt when needed for the customer’s Review Record, security, or legal compliance. That record must not contain a biometric template or raw selfie video.
New Plaid Identity Verification checks
This disclosure applies only when you accept this version before a new Plaid Identity Verification check. It does not extend retention for information collected under an earlier notice, existing Wire Check or Persona checks, or bank-check information.
Plaid’s Identity Verification documentation states that session data is retained while Veto maintains an active Identity Verification contract with Plaid. Plaid’s Biometric Policy and Release describes storage of identity documents and photographs or video images for the duration of its business relationship with the customer, unless law or legal process requires earlier deletion. These defaults can exceed 90 days. This notice does not promise automatic 90-day redaction for new Plaid checks.
Plaid documents manual redaction through its Dashboard; a custom rolling retention period requires a separate arrangement with Plaid. Availability of these options does not mean a custom period or automatic deletion has been configured. You may contact Veto using the privacy contact below to request deletion, subject to applicable law.
Plaid’s default storage period does not override applicable biometric destruction requirements, including destruction when the initial purpose has been satisfied or an earlier legal deadline. Veto’s own copies remain subject to the customer’s applicable transaction-data schedule and those earlier requirements. No new processing purpose or data category is authorized by this retention disclosure.
6. Security
Veto requires biometric information to be stored, transmitted, and protected using a reasonable standard of care and at least as carefully as other confidential and sensitive information. Safeguards include access restrictions, encryption in transit, provider contracts, customer separation, and incident-handling procedures.
7. Your choice
Review the disclosure in the identity flow before you consent. You may decline and ask the office that sent the Transaction Link whether it offers an alternative procedure. Declining may prevent completion of that particular Veto identity workflow, but Veto does not decide whether the office will accept an alternative.
To request access or deletion, contact the office that requested the check or email support@tryveto.com. Veto may verify your identity before completing a request.
8. Contact
Heyneman Company, doing business as Veto
1111b S Governors Avenue, STE 29920
Dover, DE 19904 US
support@tryveto.com · +1 (949) 879-8386