Verisoul Biometric Information Consent Form

Effective Date: May 25, 2026

Verisoul Inc., a Delaware Corporation

BY CLICKING “I AGREE,” OR AFFIRMATIVELY MARKING A CHECKBOX, YOU ACKNOWLEDGE AND AGREE THAT YOU HAVE READ, AND PROVIDE YOUR LEGALLY BINDING WRITTEN CONSENT AND RELEASE FOR VERISOUL’S COLLECTION, STORAGE, RETENTION, USE, AND DISCLOSURE OF BIOMETRIC INFORMATION, PHOTOGRAPHS, VIDEO RECORDINGS, AND IDENTITY DOCUMENTS AS SET FORTH HEREIN.

Verisoul helps businesses (our “Customers”) trust the person on the other end of every interaction by attempting to detect and prevent fraudulent activity. Verisoul has created a biometric verification process that allows you to verify that you’re a real, unique person. For this verification process, Verisoul determines certain purposes and means of processing, including fraud prevention and network integrity, and may act as an independent controller where applicable law recognizes that role.

To provide our verification and fraud prevention services (the “Services”) to our Customers, we will need to collect certain information from or about you, including biometric information, photographs, video recordings, and a government-issued identification document.

Note that the biometric information we collect is stored as a FaceMap — a 3D numerical representation of your face geometry that is mathematically vectorized, encrypted, and not human-readable. Your FaceMap is never sold, and it is never shared with third parties for their own independent use, except for our trusted service providers who host and process data strictly on our behalf, or if we are obligated to do so by law.

Please read this consent form carefully. You understand that you are free to decline to provide biometric identifiers, biometric information, photographs, video recordings, and identity documents to Verisoul, in which case we will not be able to verify your identity through the Services. Please contact us at [email protected] if you have any questions.

This consent form is subject to our Privacy Policy and Terms of Use.

Biometric Information

The Illinois Biometric Information Privacy Act, 740 ILCS 14/1, et seq. (“BIPA”), and certain other applicable laws may regulate the collection, storage, use, and retention of “biometric identifiers” and “biometric information.” “Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, human biological samples used for valid scientific testing or screening, demographic data, tattoo descriptions, or physical descriptions such as height, weight, hair color, or eye color. “Biometric information” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier used to identify an individual.

To verify you’re a real, unique person and to detect and prevent fraud across different Verisoul Customers, we will capture a selfie photo and/or a short video recording of your face, as well as a government-issued identification document. From each of these materials—including your selfie, your video recording, and the photograph contained on your identification document—we will extract and scan your facial geometry to generate your unique FaceMap. We use the video recording to confirm that you are a live, real person (liveness detection).

Depending on how our service is deployed by our Customer, this may be done upon account creation, re-authentication, and/or if we suspect that the account has been compromised, is fraudulent, or has been sold. To prevent cross-platform fraud, we may compare your unique FaceMap against the FaceMaps of other users across our Customer network to identify duplicate identities or known fraudulent actors. We do not use this biometric information for any purpose other than providing these identity verification and fraud prevention Services.

Photographs, Video Recordings, and Identity Documents

In addition to the biometric information described above, we collect and store the following materials during the verification process:

Under certain laws like BIPA, raw photographs, video recordings, and identity documents are distinct from “biometric identifiers.” However, we treat them with the same care as biometric information and apply the same retention period described below. We use these materials to (i) confirm you are a real, live person; (ii) match your face to the photo on your identity document; (iii) verify the authenticity of the document; and (iv) investigate suspected fraud.

Automated and AI-Assisted Analysis

Verisoul may use automated systems, machine learning models, and other AI-assisted technologies to analyze photographs, video recordings, identity-document images, and related verification data for the limited purposes of identity verification, liveness detection, fraud detection, duplicate-account detection, account-integrity protection, security, and risk scoring. These systems may evaluate signals such as whether the video depicts a live, real person; whether the face in the video appears to match other verification materials; whether the video or image appears to have been manipulated, spoofed, replayed, synthetically generated, including through AI deepfake technology, or otherwise submitted as part of suspicious activity; and other indicators of fraud or account-integrity risk.

Verisoul does not use these automated analyses to make decisions unrelated to providing the Services. Risk outputs may be provided to the Customer that initiated your verification to help that Customer make an identity-verification, fraud-prevention, or account-integrity decision about you. Where required by applicable law, Verisoul will provide additional notices, obtain any required consents, support applicable rights, and apply appropriate safeguards for automated processing.

Verisoul may use biometric information, photographs, video recordings, identity documents, and related verification outcomes to develop, test, monitor, and improve Verisoul’s fraud-prevention, liveness-detection, and identity-verification models, subject to access controls, security safeguards, data minimization, de-identification or anonymization techniques where feasible and legally effective, and the retention limits described in this Consent Form. Verisoul does not sell this information or use it to train models for third parties’ independent purposes.

Other Important Considerations

Disclosure:

We do not sell your biometric information, photographs, video recordings, or identity documents. Your FaceMap is never shared with third parties for their own independent use, nor do we disclose biometric information to our Customers.

Photographs, video recordings, and identity documents may be made available to the specific Customer that initiated your verification, solely to enable that Customer to make an identity-verification or fraud-prevention decision about you. We also use trusted third-party service providers (such as cloud infrastructure providers) to host and process information strictly on our behalf. Such service providers are contractually restricted with respect to their use and disclosure of information they host and process for us and are required to keep it secure.

Retention and Data Withdrawal Policy:

We store your biometric information, photographs, video recordings, and identity documents in an encrypted format.

In addition to completing your initial identity verification, Verisoul collects and retains biometric information, photographs, video recordings, and identity document information for ongoing fraud prevention, duplicate-account detection, account-integrity protection, security, legal compliance, dispute resolution, and enforcement of our rights. Because fraud-prevention and network-integrity risks may continue after your initial verification, the purpose for retaining limited verification records may continue for the duration of our retention period, subject to applicable law.

We will permanently destroy your biometric identifiers, biometric information, photographs, video recordings, and identity documents when the purpose for collecting or retaining them has been satisfied, or within three (3) years from your last interaction with Verisoul or a Verisoul-powered verification flow, whichever occurs first, unless a shorter retention period is required by applicable law.

Withdrawing Consent:

You may withdraw your consent to future biometric processing at any time by contacting [email protected]. Withdrawal will not affect processing that occurred before your withdrawal. After withdrawal, Verisoul will stop performing new biometric scans of your face unless another lawful basis applies.

Where necessary and permitted by applicable law, Verisoul may retain limited historical verification records and previously generated FaceMaps for security, fraud prevention, duplicate-account detection, account-integrity protection, legal compliance, dispute resolution, and enforcement of our rights, subject to our retention schedule. Any retained records will continue to be protected as described in this Consent Form and will be permanently destroyed in accordance with the retention period above.

Other State Laws:

Certain state biometric privacy laws, including laws in Illinois, Texas, Washington, and other jurisdictions, may impose specific notice, consent, disclosure, security, and retention requirements. Where those laws apply, Verisoul will collect, use, retain, disclose, and destroy biometric information in accordance with the applicable legal requirements.

International & Global User Addendum

If you are accessing our interface from the European Union (EU), European Economic Area (EEA), United Kingdom (UK), Canada, or other international jurisdictions, the following additional disclosures apply to you: