California Consumer Privacy Notice
This California Privacy Notice supplements our Privacy Policy and applies solely to California consumers.
The sections below describe how we process California consumers’ personal information based on definitions laid out in the California Consumer Privacy Act, as amended by the California Privacy Rights Act(“CCPA”).
Categories of Personal Data We Collect
The table below describes the categories of personal information we collect under the CCPA, along with the sources, third parties with whom we share it, and our business purposes. Not all items are relevant to every user.
Identifiers Name, email, phone, postal address, IP address, date of birth, nationality, SSN, driver’s license number, passport number, tax ID, device identifiers, cookies
Individuals undergoing verification; Customers (via API/platform); Third-party data sources; Automatically collected
Verification and data partners; Customers; Government databases; Service providers; Analytics partners
Verification services; Fraud detection; Platform operations; Marketing; Legal compliance
Personal Records (Cal. Civ. Code § 1798.80(e))
Government-issued identity documents, financial statements, corporate filings, proof of address documents
Individuals undergoing verification; Customers (via API/platform); Government databases and registries
Verification and data partners; AI/ML providers (document analysis); Customers
Verification services; Fraud detection; Platform operations; Marketing; Legal compliance
Protected Classifications Age, date of birth, nationality, citizenship
Individuals undergoing verification (from identity documents); Third-party data sources
Verification and data partners; Customers
Verification services; Compliance screening; Legal compliance
Commercial Information Customer account and billing records, subscription details, transaction patterns and amounts
Customers (account creation, billing); AML monitoring services
Payment processors; Service providers
Platform operations; AML monitoring; Legal compliance
Biometric Information Facial images (selfies), face geometry, faceprints, liveness detection signals
Individuals undergoing verification
Biometric verification providers; See separate Biometric Data Policy
Verification services; Fraud detection
Internet/Network Activity Website browsing behavior, API call logs, dashboard activity, feature usage, session data
Automatically collected (website, platform); Customers (API usage)
Analytics partners; Service providers
Platform operations; Marketing; Service improvement
Geolocation Data
IP-derived location, device geolocation data
Automatically collected during verification and website visits
Service providers; Fraud detection partners
Verification services; Fraud detection; Legal compliance
Sensory Information Photos of identity documents, selfie images, video for liveness detection
Individuals undergoing verification
Verification and data partners; AI/ML providers
Verification services; Fraud detection
Professional/
Employment Information
Business contact information, job titles, company affiliations
Customers (account creation); Website visitors (demo requests)
Marketing platforms; Service providers
Marketing; Platform operations
Inferences
Fraud risk scores, verification confidence levels, identity match results, risk indicators
Created from verification data, third-party data sources, and behavioral signals
Customers; Other Customers (de-identified, via fraud network only)
Verification services; Fraud detection
Business Purposes for Collection
We use the personal information described above for the following purposes:
- Verification and Compliance Services: Performing identity verification (KYC), business verification (KYB), beneficial ownership checks, sanctions and watchlist screening, document verification, fraud and risk scoring, AML monitoring, and delivering verification results to Customers
- Fraud Detection and Prevention: Operating our fraud detection and verification network; processing fraud flags and risk indicators; making de-identified fraud intelligence available across our Customer base
- Platform Operations: Managing Customer accounts; processing billing and payments; providing customer support; improving the Services through research, testing, and analytics; ensuring platform security and preventing unauthorized access
- Marketing and Communications: Marketing our Services; responding to demo requests and inquiries; sending product updates and communications according to preferences
- Legal and Safety Compliance: Complying with applicable laws, regulations, and legal processes; protecting rights, property, and safety; enforcing agreements and resolving disputes
Sensitive Personal Information
As part of our identity verification and compliance Services, we may collect information categorized as “sensitive personal information” under the CCPA, including social security numbers, driver’s license and state identification card numbers, passport numbers, precise geolocation data, and biometric information (facial images and face geometry). We collect this sensitive personal information solely to provide verification, fraud detection, and compliance services on behalf of our Customers. We do not use sensitive personal information for purposes other than providing and improving our Services and protecting against fraud, and we do not use sensitive personal information to infer characteristics about you. Our collection and use of biometric information is further described in our separate Biometric Data Policy, available upon request by contacting privacy@aiprise.com.
Information Retention
We keep your personal information only as long as we need it for legitimate business purposes and as permitted by applicable law.
Customers may request deletion of verification data and related records by contacting privacy@aiprise.com. Following account termination, we delete active data within 30 days except as described below.
As instructed by Customer, or 7 years after completion if no instruction
Service delivery; subject to Customer’s DPA
See separate Biometric Data Policy
Biometric privacy law compliance
7 years
Fraud prevention across the AiPrise network
7 years after account closure
Tax, accounting, and legal compliance
7 years
Customer care, enforce rights, defend claims
7 years after resolution
Security monitoring and incident investigation
90 days after deletion
Disaster recovery
Indefinitely
Service improvement, fraud intelligence
California Consumer Privacy Rights
Know what personal information we have collected and request a copy of specific pieces
Opt out of our sale or sharing of your personal information
Request that we correct inaccurate information we hold about you
Request deletion of personal information we have collected from you
Not receive discriminatory treatment for exercising your privacy rights
Limit our use or disclosure of sensitive personal information
How to Submit a Request
If you are a California resident who has provided personal information to AiPrise, you may submit a request that AiPrise honor your right to access, correct, or delete by sending an email to AiPrise at privacy@aiprise.com.
Notice of Opt-Out of Sale/Sharing
We do not sell personal information for monetary consideration. However, under California law, certain advertising-related activities may constitute “sharing” or “sales” of personal information. To the extent we engage in such activities on our website, they may involve the following categories of personal information and third parties:
Identifiers (IP address, cookie ID, email address)
Advertising networks
Internet or electronic network activity (pages visited, browsing activity)
Data analytics providers
We do not sell or share personal information collected during verification services performed on behalf of our Customers.
You can opt out of these activities by emailing privacy@aiprise.com with the subject line “California Do Not Sell Request”.
We do not knowingly “share” or “sell” personal information about individuals under 18.
You have the right to limit our use and disclosure of your sensitive personal information.
You have the right to limit our use and disclosure of your sensitive personal information.
Verification of Requests
For your security and to comply with the CCPA, we will need to verify your identity to respond to any requests you submit to exercise your rights.
The type and amount of personal information we request depends on your relationship with us and the type of request you’re making. For example:
- If you have an account with us that is password-protected, we may try to verify your identity through our existing account authentication practices.
- If you do not have an account with us, and your request concerns “categories” of personal information collected, we may request from you two data points of personal information to verify your identity.
- If you do not have an account with us, and your request concerns specific pieces of personal information, we may request from you at least three data points of personal information as well as a signed declaration with penalty of perjury to verify your identity.
The procedures above are for illustrative purposes only. We may ask you for additional or different information as we determine reasonably necessary to complete your request in compliance with the CCPA.
Authorized Agents
You may use an authorized agent to submit a request on your behalf. If you do, we may ask for evidence that you have provided the agent valid power of attorney or other written permission to submit requests on your behalf, and we may also take steps to verify your identity directly. If you are an authorized agent seeking to make a request, please contact us and include proof of your authorization.
Contact Us
If you have any questions about our privacy policies or practices or this notice, please contact us at privacy@aiprise.com.
