Disclosure and Consent for Collection, Use, and Storage of Personal Information
Last Updated: November 15, 2019
When you register for an account with Fortress Identity (“Account”), you will provide us with certain personal information, including, but not limited to, your name, company name, physical address, phone number, e-mail address, and biometric data (“Personal Information”). This Personal Information is necessary for us to provide you with access to and use of the onboarding and compound biometric authentication services we offer (“Services”).
Included in the Personal Information is certain biometric data derived from specific technical processing relating to an individual’s physical, physiological, or behavioral characteristics that can be used to identify such individual (“Biometric Data”). The Biometric Data you provide at registration and throughout your enrollment in the Services may be derived from your voice, fingerprint, face, behavior, and/or other biometric means.
Your Biometric Data will be encrypted and stored on the servers of our third party providers; and/or our servers and/or your designated device(s). In order to better serve you and detect and prevent fraud, we may, but are not obligated to, continue to process your Biometric Data until the earlier of (i) one year from the date that you deactivate your Account or your Account is otherwise closed, (ii) the time at which the purpose of the initial collection of your Biometric Data has been satisfied, or (iii) three years from your last interaction with us or the Services, whereupon your Biometric Data will be permanently destroyed. If you re-open your Account or open a new Account after the one-year anniversary of the closing of your Account, you will need to re-provide the requested Biometric Data and may be required to re-provide other Personal Information. We may continue, but are not obligated, to process all Personal Information other than Biometric Data for as long as we deem necessary for the provision of your Account and the applicable Services.
We will not sell, lease, trade, or otherwise profit from your Personal Information, including Biometric Data, except for sharing your Personal Information, including Biometric Data, with vendors and partners we contract with as necessary to provide you with the Services; provided, however, we will not disclose your Personal Information, including Biometric Data, unless (i) your prior written consent is obtained, (ii) disclosure is required by law, or (iii) disclosure is required by a subpoena. We will store and transmit your Personal Information, including Biometric Data, using a reasonable standard of care andappropriate organizational, physical, and technical security practices and procedures.