privacy data use · Privacy Policy

Didit policy finding

“ This section supplements this Privacy Policy for California residents and applies whenever Didit is a "business" under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). When Didit is a "service provider" or "contractor" to a Didit customer (a "business" under the CCPA), the customer's privacy notice governs the relevant verification flow and Didit processes personal information under the relevant Data Processing Agreement. Categories of personal information collected in the last 12 months (CCPA categories): Identifiers (name, email, phone, IP address, device identifiers). Customer records (billing, contact, account). Internet or network activity (browsing, interactions, telemetry). Geolocation data (inferred from IP). Sensory data (selfies, face images, liveness video, document images). Professional or employment data (for candidates). Sensitive personal information (SPI), including biometric information used to uniquely identify a consumer, government identifiers contained in identity documents, and account log-in credentials. Inferences drawn from any of the above (risk scores, fraud signals, decision outcomes). Purposes , the purposes listed in Section 4. Sale or sharing of personal information. Didit does not sell or share (as those terms are defined under the CCPA/CPRA) personal information, including biometric information. Use and disclosure of sensitive personal information. ”

Document

Privacy Policy

Captured

2026-07-20

Location

§ 12

Snapshot SHA-256

c76647e4473d37e9d292a8df885eb195d38b83057b5950d7acde9825f2e04663

Informational only, not legal advice. Terms change; verify the source and capture date.