Photo ID and biometric notice
Some senders ask signers to confirm their identity with a government photo ID and a selfie before signing. The check is performed by Stripe Identity. This notice explains what is collected, who keeps it and for how long. It is given under privacy and biometric laws including Québec's Law 25 and Illinois' Biometric Information Privacy Act.
On this page · 7 sections
1. What happens
- You choose Start the check, and go to Stripe Identity's secure page.
- You photograph the front (and, for some documents, the back) of a driver's licence, passport or ID card, and take a live selfie.
- Stripe Identity checks that the ID is genuine and that the selfie matches the photo on it, and tells us the result.
- We compare the name on the ID with the name the sender entered. If they match, you continue to the document.
2. Your consent
Stripe Identity asks for your consent on its page before it collects anything. You can say no: you then cannot sign that document, and can ask the sender for another way to confirm your identity.
3. What we receive and keep
We receive and keep only the result, the name on the ID, its type, its issuing country and the time of the check. They are kept with the signing record and shown on its certificate, so the sender and the other parties can rely on it.
We never receive or keep the ID images, your selfie or any face measurements.
4. What Stripe Identity keeps
Stripe Identity keeps the images and the biometric data it creates under its own privacy policy and retention schedule, and deletes biometric data when the check's purpose is met, within the time the law allows. Stripe acts as our service provider, listed on our Sub-processors page.
5. How it is used
Only to confirm your identity for the document you are signing. Never for marketing, never sold, and never used to infer characteristics such as age or ethnicity.
6. If the names do not match
You cannot sign until the sender corrects your name and you check again. You can ask a person to review the result by writing to privacy@esorasign.com. Each signer can try the check 5 times per request.
7. Your rights
You can ask what information was used, ask for a copy, and ask for it to be corrected or deleted, as our Privacy notice explains. Deleting the result of a check may mean the sender can no longer rely on your signature, so we may pass your request to them first.