HYPR Affirm Biometric Data Policy and Consent

Notice and Consent

This Biometric Data Policy and Consent to Collect Use and Disclose Biometric Data describes how HYPR collects and processes certain categories of Personal Information in connection with the Affirm Services provided by HYPR ("Services").

HYPR Affirm is used by the company that is providing the services you wish to access or that employs you or may be is considering you for a position (“Company”) to verify your identity.

Please carefully review the details below prior to consenting to our collection and use of your Biometric Data.

If you refuse to provide the Biometric Data, you must reach out to the Company which requested the use of Affirm and sent you to Affirm to determine if there are  alternative means of completing their required identity verification.  

Consent To Receipt Of SMS/Text Messaging

As part of the Affirm verification process, you may be contacted by MMS or SMS. By indicating below, you agree that you are providing express written consent to permit HYPR to contact you at the number provided to HYPR by Company to verify your identity, including through the use of automated technology, SMS/MMS messages, AI generative voice and pre-recorded and/or artificial voice messages. You acknowledge that if you do not consent, you may need to contact the Company which requested Affirm to verify your identity in another manner.

The type of Biometric Data Collected:

In connection with your Company’s use of the HYPR Affirm platform to verify your identity, HYPR may collect, capture, receive, or otherwise acquire one or more of the following biometric identifiers about you (collectively, "Biometric Data"):

• Face geometry (“Facial Recognition”)
• Voice print (“Voice Verification “)
• Video and audio footage to verify customer biometric data (“Video Verification”)

Use of Your Biometric Data:

HYPR may collect, use, disclose, and otherwise process Your Biometric Data necessary for the following:

• Comparing Facial Recognition data extracted from your photo in your identity document or electronic ID to the facial scan data extracted from the photo/video to verify your identity;
• Comparing Facial Recognition data from a reference image (for example the photo/video in your identity document or face you upload when you first enroll), to the facial scan data provided when you authenticate yourself as an authorized user of services;
• Comparing your voice print for Voice Verification;
• Allowing Video Verification;
• Detecting and preventing fraud, including to determine whether HYPR has previously verified a user’s identity;
• Detecting whether there is a genuine human or physical document in the photo/video (instead of a bot, for example) or signs of tampering with an identity document, electronic ID, or photo/video; and
• Improving and developing HYPR’s services, where permitted by applicable law;
• Completing a transaction, in accordance with the requesting Company’s instructions and as requested and authorized by you or your legally authorized representative;
• Completing a financial transaction requested or authorized by you or your legally authorized representative;
• As may be required by state or federal law, or municipal ordinance;
• Preventing harm, loss or injury to others; and
• As may be expressly consented to by you.

(collectively, "Permitted Purposes").

You consent to HYPR's collection, use, and storage of your Biometric Data for the Permitted Purposes and any other purposes that you specifically consent to from time to time.

Your consent will be valid for twelve months from the initial data of consent. HYPR will require you to again provide your consent to the collection of your Biometric Data after the initial date of consent.

Disclosure of Biometric Data:

HYPR will not disclose or disseminate any Biometric Data except in furtherance of the Permitted Purposes, as follows:

• To the organization who has subscribed to the HYPR Affirm services for authentication and verification purposes;
• As required with other third parties and where permitted by law to enforce our Terms of Service,
• To third party service providers that perform functions on our behalf. These service providers are limited to using Your Biometric Data to assist in our provision of Services and must maintain any Biometric Data we share in a secure fashion.

Retention of Biometric Data:

HYPR may retain your Biometric Data as long as is necessary or relevant for the Permitted Purposes.

Under no circumstances will HYPR retain this information for longer than thirty-six (36) months absent a subpoena, warrant, or other legally compelling justification. HYPR’s goal is to destroy your Biometric Data within twelve months or upon a shorter maximum retention period as may be provided by the Company, unless otherwise required by law. 

For users who are residents of Illinois, in accordance with Illinois state law HYPR will retain Biometric Data only until the occurrence of the first of the following:(a) the initial purpose for collecting or obtaining such Biometric Data has been satisfied; (b) the retention period of storage set by the Company; or (c) three (3) years following your last interaction with HYPR.

Safeguarding Your Biometric Data: 

We use robust physical, organizational, technical, and administrative measures to safeguard all data we hold or process, and we regularly re-assess and revise our policies and practices to improve security. While we go to great lengths to protect your Biometric Data, no method of data transmission or storage is totally secure; therefore, we cannot guarantee the security of data in our control.

Your rights with respect to your Biometric Data:

Under various state and federal and international law, you may have the following rights with respect to your Biometric Data:
•    The right to delete your Biometric Data
•    The right to withdraw your consent to the use of your Biometric Data (subject to the limitation set forth below). 

Verification of your request: 

In order to safeguard the privacy of your sensitive Biometric Data and to prevent fraud to you and the Company which has contracted with us for services, we also require verification of your request.  This verification may result in a delay while we contact your company or take other appropriate actions to verify the request.

Deletion of your Biometric Data:

You may request that we delete your Biometric Data after verification by contacting us at notices@hypr.com. HYPR reserves the right to retain this information as needed to comply with our legal obligations, including warrants, subpoenas or other court orders, or to help prevent fraud.

Right to Withdraw Consent:

You may withdraw your consent at any time by contacting HYPR at www.hypr.com/contact. Please note that once consent has been provided for the collection and processing of your information as part of your verification it may not be revoked where it is required to complete the verification services.    

Acknowledgements:

By clicking on the “Accept” button or otherwise proceeding to use the HYPR Affirm technology, you agree that:

(1) I have read, understand, and voluntarily consent to this Biometric Data Policy and Consent to Use and Collect Biometric Data and Consent to Receipt of SMS/Text Messaging, and HYPR’s Privacy Policy https://www.hypr.com/trust-center/privacy-policy

(2) I release in favor of HYPR any claims related to my Biometric Data collected by the Affirm services, and

(3) I confirm that I am not accessing HYPR’s Affirm services in any jurisdiction where the services are not permitted by applicable law.