← Back

Biometric Information Disclosure

Effective Date: January 1, 2025

1. Purpose of Biometric Data Collection

As part of our identity verification process, we use Stripe Identity, a third-party service provider, to verify your identity through facial recognition technology. This process involves:

• Capturing an image of your government-issued identification document
• Capturing a selfie photograph of your face
• Using facial recognition technology to compare your selfie to the photo on your ID

2. What Biometric Data is Collected

The following biometric identifiers and biometric information may be collected:

• Facial Geometry: Mathematical representations of facial features extracted from your selfie photograph and ID photo
• Facial Recognition Scan: The process of comparing facial geometry between images to verify identity

3. How Biometric Data is Used

Biometric information (if used) is collected and used solely to verify identity, prevent fraud, and protect parties to a claim transfer transaction. We do not sell, lease, trade, or otherwise profit from biometric information.

4. Third-Party Processing

Biometric data is processed by Stripe, Inc. ("Stripe"), our third-party identity verification service provider. By consenting to this disclosure:

• You authorize Eterna Claims Group to disclose your biometric data to Stripe for identity verification purposes
• Stripe processes biometric data according to their Privacy Policy
• Eterna Claims Group does not directly access, view, or store your biometric data - we receive only verification results

5. Data Retention and Destruction

Biometric information is retained only as long as necessary to complete identity verification and comply with applicable legal requirements. In no event will biometric information be retained longer than three (3) years after an individual's last interaction with our portal, unless a longer period is required by law or a valid legal hold applies.

Regarding the retention of biometric data:

• Eterna Claims Group: We do not store biometric data. We receive only the verification result (verified/not verified) and basic verified identity information.
• Stripe: Stripe retains biometric data in accordance with their retention policy and applicable law. Biometric information may be disclosed to and processed by our identity verification provider solely for the purposes described above.

6. Protection of Biometric Data

We require that our service providers, including Stripe, protect biometric data using security measures that are the same as or more protective than the measures used to protect other confidential and sensitive information, including:

• Encryption of biometric data in transit and at rest
• Access controls limiting who can access biometric data
• Security audits and assessments
• Contractual requirements for data protection

7. No Sale or Profit from Biometric Data

Neither Eterna Claims Group nor Stripe will sell, lease, trade, or otherwise profit from your biometric data. Biometric data is used solely for identity verification purposes.

8. Your Consent

Before collecting biometric data, we require your informed written consent. By checking the biometric consent box on our portal, you:

• Acknowledge that you have read and understand this disclosure
• Consent to the collection and use of your biometric data as described herein
• Authorize the disclosure of your biometric data to Stripe for identity verification
• Consent to Stripe's retention and destruction schedule for biometric data

9. Right to Refuse

You have the right to refuse to provide biometric data. However, if you choose not to provide biometric data, we will be unable to verify your identity and process your claim transaction through our online portal. Alternative verification methods may be available by contacting us directly.

10. Your Rights Under BIPA

If you are an Illinois resident, you have certain rights under the Illinois Biometric Information Privacy Act, including:

• The right to be informed about the collection of your biometric data
• The right to consent to or refuse the collection of your biometric data
• The right to sue for violations of BIPA