Biometric Information Privacy Policy
Effective Date: January 1, 2026 · Last Updated: July 20, 2026
This Biometric Information Privacy Policy ("Biometric Policy") explains how Corbivo LLC ("Corbivo") handles biometric identifiers and biometric information in connection with identity verification. It is intended to comply with the Illinois Biometric Information Privacy Act (740 ILCS 14/, "BIPA"), the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001, "CUBI"), Washington's biometric privacy law (RCW 19.375), and other applicable state laws.
1. Definition of Biometric Information
"Biometric identifier" means data such as a scan of face geometry generated from your selfie and government ID during verification. "Biometric information" means information based on a biometric identifier used to identify an individual. These terms do not include photographs used solely as images where no biometric template is generated, but our verification process does involve facial recognition and matching, which may generate biometric identifiers as defined above.
2. Purpose
Biometric processing is used solely to verify your identity — by matching your selfie to your government-issued ID and confirming a live person is present (liveness) — in order to confirm homeowner identity, enable TitleVault™ enrollment, prevent fraud, secure accounts, and maintain trust on the Corbivo platform. Corbivo does not use biometric identifiers or biometric information for any other purpose.
3. Consent
Before any biometric processing occurs, we present a written disclosure and obtain your affirmative, written consent (electronically) as required by BIPA and other applicable laws. The disclosure states that biometric identifiers or information are being collected, the specific purpose, and the length of term for which they will be collected, stored, and used. You may decline; however, verified features will not be available without verification.
4. Processor Relationship and Disclosure
Biometric processing is performed by our verification vendor, Didit, acting as our processor. Corbivo does not itself collect, receive, or store facial templates, facial geometry scans, selfies, government ID images, or liveness recordings. Didit collects and stores that data on our behalf. Corbivo receives only verification status, a verification reference identifier, your full legal name, and your date of birth. We do not disclose biometric identifiers or biometric information to any other party except: (a) to Didit as our processor; (b) as required by a valid warrant or subpoena; or (c) with your consent.
5. No Sale and No Profit
Corbivo does not sell, lease, trade, or otherwise profit from your biometric identifiers or biometric information, and will not do so. This prohibition applies regardless of consent.
6. Retention Schedule
Biometric identifiers and biometric information are retained only as long as necessary to fulfill the verification purpose, and are destroyed in accordance with our Biometric Retention & Destruction Policy — which, consistent with BIPA, provides for destruction when the initial purpose has been satisfied or within three (3) years of your last interaction with Corbivo, whichever occurs first. Because Didit holds this data, destruction occurs at Didit under our contractual instructions and Didit's published retention policy.
7. Destruction
Upon a triggering event (see the Retention & Destruction Policy), Corbivo instructs Didit to permanently destroy the applicable biometric identifiers and biometric information using commercially reasonable methods that render the data unrecoverable, subject to narrow legal-hold exceptions.
8. Security
Biometric data is protected using a reasonable standard of care that is the same as or more protective than the manner in which we protect other confidential and sensitive information. Because biometric data resides with Didit, we require Didit by contract to maintain appropriate technical and organizational safeguards. Corbivo further reduces risk by not storing biometric identifiers itself.
9. Your Rights
- Request information about the biometric processing associated with your verification.
- Withdraw consent and request deletion, subject to legal exceptions; withdrawal will limit or end access to verified features.
- Contact us with questions or complaints regarding biometric processing.
10. Contact Information
Corbivo LLC · 8735 Dunwoody Place, Suite R, Atlanta, GA 30350 · privacy@corbivo.com