This Privacy Policy describes how AgeChecker.net (“AgeChecker.net”, “we”, “us” or “our” ) collects, uses, stores, and discloses your information when (1) we provide our age and identity verification services (“Services”) through the websites of our business clients (“Business Clients” or “Merchants”); (2) you access and/or use our primary website, https://www.agechecker.net, and other digital properties where this Privacy Policy is posted (“Websites”); (3) you communicate with us in any manner, including by e-mail or telephone (“Communications”); and (4) when we interact with certain third-party data sources to perform our Services.

Our role is to act as a technology intermediary. We securely collect your information and relay it to our primary identity verification partner and report the verification results back to the Merchant whose site you are visiting. This helps our Business Clients meet their legal obligations for age-restricted sales. This policy explains how we handle the personal information we process to provide these Services.

If you are a resident of Nevada, please see our Nevada Privacy Notice below.

If you are a California resident, please see our California Privacy Notice below.

If you are a resident of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, or Virginia, please see our notice Other States in US Privacy Notice below.

If you are a resident of the European Economic Area (“EEA”), United Kingdom (“UK”), or Switzerland, please see our European Economic Area Privacy Notice below.

Depending on how you interact with our Websites and Services, we may collect the following pieces of your information:

• Basic Identifying Information. Information you provide such as your full name, postal address (for billing and/or shipping), e-mail address, and phone number.
• Device Identifier and other Unique Identifiers. Information such as your device identifier, internet protocol (IP) address, browser type, device type, cookies, beacons, pixel tags, mobile ad identifier, and other unique identifiers.
• Internet or Other Network Activity. Information such as your browsing or search history, and other information regarding your interactions with our Websites and verification platform, emails, and advertisements.
• Geolocation Data. Information that permits us to determine your location, primarily to identify if you are an international user and apply the appropriate verification rules as configured by our Business Clients.
• Commercial Information. Information about your transaction on our Business Client’s website, such as the fact that you are attempting to purchase an age-restricted product, which triggers the need for our Services.
• Demographic Information. Your date of birth, which we use for age verification purposes.
• Government-Issued Identification. To complete verification when automated methods are unsuccessful or as required by a Merchant, we will ask you to provide a photograph or scanned image of your government-issued photo ID (e.g., driver's license, state identification card, military ID, or passport). We read the necessary data from this image for verification.
• Inferences. Information such as inferences drawn from or created based on the information identified above, such as assessing fraud risk based on the information provided.

We collect your information in three ways: (1) directly from you when you use our Services and Communicate with us; (2) automatically using online technologies when you engage with our Websites and Services; and (3) from our Business Clients and data partners.

• Directly from you. We collect information directly from you when you enter your information into our verification pop-up on a partner website, including your date of birth, or when you upload an image of your photo ID using your webcam, mobile device, or by file upload. We also collect information when you engage in Communications with us, such as by emailing our support team.
• Automatically Using Online Technologies. When you visit our Websites or interact with our verification platform, we or other third parties may automatically collect certain information about you using online tracking technologies such as cookies, pixels, web beacons, and standard server logs.
• From Our Partners. We collect information from our Business Clients (the online stores where you are making a purchase). Our software may automatically pull your name and address from the billing or shipping forms you have already completed on their checkout page to minimize friction. We also receive verification results from our core data partner after submitting your information to them via a secure API.

We and our third-party partners use cookies, pixels, web beacons, software development kits, and other similar online tracking technologies to gather information about you when you use our Websites, interact with some of our Services, and engage with our Communications. Some of the online tracking technologies are used to maintain the security of our Websites, manage your account, prevent crashes, fix bugs, save your preferences, assist with basic Website functions, advertising, analytics, and other performance functions. We may deploy these technologies when you watch videos on our Websites, engage with our Services, or otherwise Communicate with us.

We use your information for a limited set of purposes, centered on providing our core service:

• To Provide and Improve Our Verification Services. We use your information to: (1) securely transmit your personal information to our verification partner to verify your age and identity; (2) provide the verification result (e.g., pass/fail) to our Business Clients so they can complete your transaction; (3) create a secure record for our Business Clients to demonstrate their legal compliance; (4) streamline future verification processes for you on any website using our Services; and (5) answer your Communications and provide customer support.
• Security and Fraud Prevention. We use your information to detect, investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including fraudulent transactions. We also use your information to enforce our terms and procedures, prevent against security incidents, assess risk, improve the accuracy of our verification services, and prevent harm to other users of our Services.
• Legal Obligations. We use your information to comply with our legal and regulatory obligations, to establish and exercise our rights, and to defend against legal claims.
• Business Functions. We use your information to support our core business functions, including to maintain records related to business management, loss prevention, and identifying and repairing errors or problems in the Websites or Services.

We do not sell, rent, or share your personal information for marketing or cross-context behavioral advertising purposes. We may disclose or share your information with affiliated and non-affiliated third parties only in the following scenarios:

• With your Consent. We may disclose or share your information with your consent, which may be obtained online, through “click-through” agreements, or by other means when you agree to our terms to proceed with verification.
• In a Business Transfer. We may disclose or share your information as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which such information could be transferred to third parties as a business asset in the transaction.
• To Our Verification Partner. To perform the core verification service, we disclose your personal information (including name, address, date of birth, and data extracted from your photo ID) to our identity verification partner via a secure, closed-loop API. We have a data processing agreement in place with our core data partner governing their use of this data.
• To Our Business Clients. We provide the results of the verification to the Merchant from whose website you are using our Service. We also provide our Merchants with access to an audit log containing the information you submitted for verification, which Merchants use for their own record-keeping and compliance purposes.
• To Non-Affiliated Third Parties for Verification Purposes. We may disclose or share your information with certain non-affiliated third parties to facilitate your access and use of our Websites, our Services, and to provide us with certain business functions. This may include sharing your information with trusted partners such as identity databases or credit bureaus for the sole purpose of confirming the data you provide. We only share the minimum information necessary to complete the verification. We do not share your information with third parties like advertising networks or social media networks for their own use.
• For Legal Process And Protection. We may disclose or share your information to satisfy any law, regulation, legal process, or governmental request, or where we have a good faith belief that access, use, preservation, or disclosure of such information is reasonably necessary to: (1) enforce or apply our agreements; (2) protect our interests, property, or safety of others; (3) in connection with claims, disputes, or litigation; and (4) to protect our Websites and Services.

Although no system can guarantee complete security, we implement and maintain robust security measures to protect your information. These include:

• Strong Encryption: We use 256-bit AES encryption for your data both in transit (using SSL/TLS) and at rest in our secure storage. When you provide a photo ID, we may tokenize the ID, creating a secure imprint that is stored in our environment.
• Secure Infrastructure: Our systems, including all personal information, are stored on a private internal network that is not directly connected to the internet.
• Audits and Compliance: Our security controls are SOC 2 Type 2 audited, and we conduct regular internal security assessments and expert reviews.
• Prompt Deletion of Sensitive Data: As described below, photo IDs are deleted immediately after manual verification is complete, unless a specific compliance setting requires otherwise.

We retain your personal information for as long as necessary to provide the Services and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements. Our retention periods may be based on applicable state and federal law.

• Photo IDs: The retention period for your photo ID image depends on the specific compliance requirements and settings configured by the Merchant from whose website you are using our Service. For the vast majority of verifications, the image of your photo ID is used only to complete the verification process and is deleted from our active systems promptly thereafter (typically within 30 minutes). In this scenario, your ID image is not stored long-term. In specific cases where a Merchant has enabled a compliance setting to retain ID images (for example, as part of a pilot program), you will be explicitly notified at the point of upload. In these instances, you will be asked to provide clear consent to store the ID image for a longer period as part of the verification record. If you do not consent where required by a Merchant, you may not be able to complete the verification.
• Personal Information (Name, Date of Birth, Address): To facilitate faster, seamless verification for you on future purchases across any website using our services and for ongoing fraud screening, we securely store this information in accordance with our retention policies.
• Technical and Log Data: Information collected via cookies and server logs is retained for standard business periods in alignment with data protection best practices and legal guidelines.

Our Services are operated in the United States. If you are using our Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. While we provide services to international users, data submitted by these users may be subject to manual review by our United States based team and is stored on our servers in the United States. By using our Services, you consent to the transfer of your information to the United States and its use and disclosure as described in this Privacy Policy.

Our Websites and Services may contain links to third-party websites and services. Please note that these links are provided for your convenience and information, and the websites and services may operate independently from us and have their own privacy policies or notices, which we strongly suggest you review.

• Accounts: You may access, update, or remove certain information that you have provided to us through your account by visiting your account settings or sending an email to the email address set out in the Contact Us section below. We may require additional information from you to allow us to confirm your identity. Please note that we will retain and use information about you as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
• Communications: The following is information about how to opt out of receiving certain communications from us, depending on the means of delivery:
  • E-mails. You can opt-out of receiving promotional emails from us at any time by following the instructions as provided in emails to click on the unsubscribe link or emailing us at the email address set out in the Contact Us section below with the word UNSUBSCRIBE in the subject field of the email. Please note that you cannot opt-out of non-promotional emails, such as those about your account, transactions, servicing, or our ongoing business relations.
  • Phone & SMS Text Messaging. You can opt-out of receiving text messages or calls to your phone number at any time by: (i) for text messages, texting “STOP” in response to any text message you receive from us or contacting us as set out in the Contact Us section below and specifying you want to opt-out of text messages; and (ii) for calls, requesting opt-out during any call you receive from us or contacting us as set out in the Contact Us section below and specifying you want to opt-out of calls.
• Analytics: Google provides tools to allow you to opt out of the use of certain information collected by Google Analytics at https://tools.google.com/dlpage/gaoptout and by Google Analytics for Display Advertising or the Google Display Network at https://www.google.com/settings/ads/onweb/.
• Cookies and Tracking Technologies: The following disclosures relate to your rights and choices in connection with cookies and other tracking technologies:
  • Do Not Track. Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. We do not currently monitor or take action with respect to “Do Not Track” signals. For more information on “Do Not Track,” visit http://www.allaboutdnt.com.
  • Cookies and Pixels. Most browsers accept cookies by default. You can instruct your browser by changing its settings, to decline or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations.

Please be aware that if you disable or remove tracking technologies some parts of the Service may not function correctly.

Nevada Resident Rights 

For individuals who are residents of Nevada, please see our Nevada Privacy Notice.

California Resident Rights 

For individuals in California, please see our California Privacy Notice.

Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana Resident Rights 

For individuals who are residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, or Montana, please see our Other States in US Privacy Notice.

Our Websites and Services are not intended for or directed to individuals under the age of 18, and in many cases, under the age of 21, depending on the products being sold by our Business Clients. We do not knowingly collect personal information from individuals under the legal age required for the transaction. If we become aware that we have collected information from a person under the applicable legal age, we will delete it.

We may change this Policy from time to time. Any and all changes will be reflected on this page, and where appropriate provided in person or by another electronic method. The effective date will be stated at the top of this Policy. You should regularly check this page for any changes to this Policy.

If you require a copy of this Privacy Policy in an alternative format, please Contact Us. 

Email: privacy@agechecker.net

If you are a Nevada resident, you have the right to submit a request directing us not to make any sale of your personal information, as defined under Nevada law. We do not sell your personal information as defined under Nevada law. However, to request email confirmation that we do not sell your personal information, and will not do so in the future, please send an email to privacy@agechecker.net.

The following disclosures are made pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act and its implementing regulations (collectively, the “CCPA”).

Definitions. 

• Personal information: This is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you or your household.
• Sensitive Personal Information: This is information such as your social security number, driver's license number, state identification card, passport number, account log-in and password, financial account and password, debit or credit card number and access code, precise geolocation information, race, ethnic origin, religious or philosophical beliefs, union membership, the content of your mail, email or texts other than those communications you have with us, genetic data, biometric information, health information, or information that concerns your sex life or sexual orientation.
• Sell, sale, or sold: This means the selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or other means, your personal information to a third party for money or other valuable consideration.
• Share, shared, or sharing: This means the sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or other means, your personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

Your Rights. 

You or an authorized agent you designate on your behalf may submit the individual requests outlined below. Upon receipt, we will take reasonable steps to verify you and your authorized agent's identity prior to responding to the request, which may include in certain circumstances you signing a declaration under penalty of perjury. If an authorized agent is submitting a request on your behalf, you must submit a copy of: (1) a written authorization demonstrating you have authorized the agent to submit a request on your behalf; and (2) provide separate proof verifying your identity.

• Right to Know: You have a right to request that we disclose, subject to certain exceptions, information concerning: (1) the categories of personal information we have collected from or about you; (2) the categories of sources from which we have collected that personal information, and the business or commercial purpose for the collection; (3) the categories of third parties with whom we have shared, sold, or disclosed your personal information, including the business or commercial purpose for said sharing, selling, or disclosure; and (4) specific pieces of your personal information, subject to appropriate exceptions.
• Right to Delete: You have a right to request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You have a right to request that we correct your personal information, subject to certain exceptions.
• Right to Non-Discrimination: You have a right to exercise the above rights without being discriminated against under the CCPA.

Exercising Your Rights To submit a request, you may send an email to privacy@agechecker.net. You may also designate an authorized agent to submit a request on your behalf by sending an email with written proof of such authorization to privacy@agechecker.net.

Responding To Requests. Once you have submitted your request, we will respond within the time frame permitted by applicable law.

Notice of Collection. 

• To learn more about the categories of personal information we collect about California residents, please see What Type Of Information Do We Collect? above.
• For more information about how we use those categories of personal information, please see How Do We Use Your Information? above.
• For more information about how we collect categories of personal information, please see How Do We Collect Your Information? and Cookies And Related Online Tracking Technologies above.
• To learn more about how we disclose categories of personal information, and the categories of third parties with whom we disclose such information, please see How Do We Disclose Your Information? above.
• To learn more about how long we keep your information, please see How Long Do We Keep Your Information? above.

Notice of Disclosure for a Business Purpose. 

To learn more about the categories of personal information we have disclosed for a business purpose, and the categories of third parties with whom we've disclosed such information, please see How Do We Disclose Your Information? above. Specifically, we disclose personal information to our Business Clients (Merchants) and our verification partner to provide our Services.

Notice of Sale or Sharing of Personal Information. 

We do not “sell” or “share” your personal information as those terms are defined under the CCPA. We have no actual knowledge that we sell or share the personal information of California residents who are under 16 years of age.

Notice of Use of Sensitive Personal Information. 

We may collect sensitive personal information, such as a driver’s license or other government-issued ID. However, we do not use this sensitive personal information for any purpose other than what is permissible under the CCPA and its regulations. Specifically, we use it solely for the purpose of verifying your identity and age, preventing fraud, and complying with legal obligations. We do not use it to derive characteristics about you.

The following disclosures are made pursuant to the Colorado Privacy Act, Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, Iowa Consumer Data Protection Act, Montana Consumer Data Privacy Act, Nebraska Data Privacy Act, New Hampshire Data Privacy Act, New Jersey Data Privacy Act, Oregon Consumer Privacy Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act and Virginia Consumer Data Protection Act, and their respective implementing regulations (collectively, “U.S. Consumer Privacy Laws”). This Notice supplements our Privacy Policy and applies solely to Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah and Virginia consumers, except as otherwise noted. Terms used but not defined shall have the meanings ascribed to them in the applicable U.S. Consumer Privacy Laws. This Notice does not apply to personal information that we process as a service provider on behalf of our customers or that we collect from job applicants, contractors or employees.

Notice of Collection. 

To learn more about the categories of personal information we collect about you, please see What Type Of Information Do We Collect? above.

For more information about how we use those categories of personal information, please see How Do We Use Your Information? above.

To learn more about how we disclose categories of personal information, and the categories of third parties with whom we disclose such information, please see How Do We Disclose Your Information? above.

Rights 

• Right to Know. You have a right to confirm whether we're processing your personal data and to access such personal data, subject to certain exceptions. To submit this request, send an email to privacy@agechecker.net.
• Right to Delete. You have a right to request that we delete your personal information, subject to certain exceptions. To submit this request, send an email to privacy@agechecker.net.
• Right to Correct. You have a right to request that we correct inaccuracies in your personal information, subject to certain exceptions. To submit this request, send an email to privacy@agechecker.net.
• Right to Opt-Out of Sale or Targeted Advertising. We do not sell personal data or process it for targeted advertising, as defined by these laws. Therefore, there is no need to opt-out.
• Right to Opt-Out of Profiling. You may have a right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. Our service is designed to verify age for legal compliance, a process which may be considered profiling. To inquire about this process or your rights, please contact us at privacy@agechecker.net.

This section provides additional information for individuals located in the EEA, UK, or Switzerland ("you") in connection with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”).

Our Role. 

When you use our age verification Services on a Merchant’s website, the Merchant is the business that is primarily responsible for your personal data. We act as a technology intermediary, providing the verification service on behalf of the Merchant to help them meet their legal compliance obligations.

We process your personal data on the following bases:

• To Fulfill a Service for the Merchant: We process your personal data to fulfill our service of verifying your age. This is based on the legitimate interest of the Merchant to engage in lawful commerce by ensuring customers meet the minimum legal age for purchasing age-restricted products and to prevent fraud.
• Your Consent: In specific cases where a Merchant requires that an image of your photo ID be stored for their compliance records, we will process that data only after you provide your explicit, affirmative consent at the time of upload.
• Legal Obligations: We may process your data as necessary to comply with our own legal and regulatory obligations.

Your Data Protection Rights 

Under applicable data protection laws, you have certain rights regarding your personal data. Subject to legal and contractual limitations, you may have the right to:

• Access your personal data.
• Correct inaccurate personal data.
• Erase your personal data.
• Restrict the processing of your personal data.
• Receive your data in a portable format.
• Object to the processing of your personal data.

As we provide this service on behalf of the Merchant, we recommend that you direct any request to exercise your data protection rights to the Merchant from whose website you initiated the verification. However, you may also contact us at privacy@agechecker.net, and we will assist you as appropriate and cooperate with the relevant Merchant to address your request.

Automated Decision-Making. 

Our Service involves automated processing to verify your age, which may constitute automated decision-making. You have the right to obtain human intervention upon request, to express your point of view, and to contest a decision by contacting us at privacy@agechecker.net.

International Data Transfers. 

Our Services are operated in the United States. When you use our Services from the EEA, UK, or Switzerland, your personal data is transferred to, stored, and processed on our servers in the U.S. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy. By using our Services, you acknowledge that your personal data will be processed in the United States.

Lodging a Complaint. 

You have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction if you believe our processing of your personal data infringes applicable law.

This Privacy Policy describes how AgeChecker.net ("AgeChecker", "we", "us", or "our") collects, uses, discloses, retains, and protects personal information when business customers, customer personnel, prospective customers, website visitors, and other individuals interact with our websites, dashboards, Platform, Services, communications, and support channels. Capitalized terms not defined in this Privacy Policy have the meanings given in the Customer Terms of Service.

We process personal information in different roles depending on the context. For personal information about Customer administrators, account contacts, billing contacts, website visitors, prospects, and vendors, we generally act as a business, controller, or similar role. For User Data submitted by or on behalf of a Customer for age verification, identity verification, fraud prevention, compliance, or related Services, we generally act as the Customer's service provider, processor, or similar role, and the Customer remains responsible for determining the purposes and means of processing, providing required notices, obtaining required consents, and responding to privacy rights requests.

This Privacy Policy is intended to provide notice. It is not intended to obtain consent where Applicable Law requires a separate, express consent. Where we or our Customers are required to obtain consent, we or the applicable Customer will do so through a separate consent flow, notice, contract, or other legally sufficient mechanism.

We may collect the following categories of personal information, depending on the individual, product, integration, jurisdiction, and Customer instructions:

Identifiers.

• Examples:  Name, alias, postal address, email address, telephone number, account username, IP address, device identifier, online identifier, government identification number, or similar identifiers.
• Sources:  You, Customers, Users, devices, integrations, data providers, fraud-prevention partners, and service providers.
• Purposes:  Provide Services; verify age or identity; operate accounts; authenticate users; prevent fraud; secure the Platform; provide support; comply with law.
• Disclosures:  Customers; service providers; sub-processors; data providers; payment processors; professional advisers; authorities when legally required.
• Retention Criteria:  Retained for the period reasonably necessary for the disclosed purpose, legal compliance, audit, dispute resolution, security, and backup deletion cycles.

Customer Records / Personal Information Under Cal. Civ. Code § 1798.80(e).

• Examples:  Name, signature, physical characteristics or description, address, telephone number, government identification information, payment information, and similar records.
• Sources:  You, Customers, Users, payment processors, identity documents, and data providers.
• Purposes:  Provide verification Services; process payments; maintain records; prevent fraud; comply with legal and data-source requirements.
• Disclosures:  Customers; service providers; sub-processors; payment processors; data providers; authorities when legally required.
• Retention Criteria:  Retained as necessary for service delivery, compliance, audit, disputes, fraud prevention, and legal obligations.

Protected Classification Characteristics.

• Examples:  Date of birth, age, and information visible on an identification document that may reflect protected characteristics.
• Sources:  Users, Customers, identity documents, data providers.
• Purposes:  Verify age or identity; prevent fraud; comply with age-restricted transaction requirements.
• Disclosures:  Customers; service providers; sub-processors; data providers; authorities when legally required.
• Retention Criteria:  Retained only as reasonably necessary for verification, compliance, audit, disputes, fraud prevention, and legal obligations.

Commercial Information.

• Examples:  Customer account records, subscription records, transaction records, verification request records, billing records, payment status, and product usage.
• Sources:  Customers, dashboard users, payment processors, and the Platform.
• Purposes:  Provide Services; process payments; administer accounts; analyze usage; enforce agreements; prevent fraud.
• Disclosures:  Service providers; payment processors; professional advisers; authorities when legally required.
• Retention Criteria:  Retained as necessary for account administration, payment, tax, accounting, legal compliance, disputes, and security.

Internet or Network Activity.

• Examples:  Login records, API calls, device data, browser type, operating system, pages viewed, referring pages, timestamps, error logs, authentication events, export logs, cookie identifiers, and interaction data.
• Sources:  Automatically from devices, browsers, servers, cookies, APIs, SDKs, and integrations.
• Purposes:  Security; authentication; debugging; analytics; fraud prevention; abuse detection; service improvement; enforcement.
• Disclosures:  Hosting providers; analytics providers; security providers; service providers; authorities when legally required.
• Retention Criteria:  Retained as necessary for security, fraud prevention, operations, debugging, legal compliance, audit, and backup deletion cycles.

Approximate Geolocation.

• Examples:  Approximate location inferred from IP address or device/network information.
• Sources:  Automatically from devices, networks, and security tools.
• Purposes:  Security; fraud prevention; compliance; localization; abuse detection.
• Disclosures:  Service providers; security providers; fraud-prevention partners; authorities when legally required.
• Retention Criteria:  Retained as necessary for security, fraud prevention, compliance, and operations.

Sensitive Personal Information.

• Examples:  Government identification numbers, identification document images, date of birth, account login credentials, precise geolocation if ever collected, and biometric information if we separately offer and enable a biometric or face-match feature.
• Sources:  Users, Customers, identity documents, data providers, and security systems.
• Purposes:  Verify age or identity; detect fraud; secure accounts; comply with law; provide Services requested by Customers.
• Disclosures:  Customers; service providers; sub-processors; data providers; fraud-prevention partners; authorities when legally required.
• Retention Criteria:  Retained only as reasonably necessary for verification, compliance, audit, security, fraud prevention, disputes, legal obligations, and backup deletion cycles.

Inferences and Verification Outputs.

• Examples:  Verification status, confidence scores, mismatch indicators, risk flags, fraud indicators, and aggregated usage trends.
• Sources:  Derived from information submitted to or processed through the Services.
• Purposes:  Provide verification results; prevent fraud; improve and secure Services; support compliance.
• Disclosures:  Customers; service providers; sub-processors; fraud-prevention partners; authorities when legally required.
• Retention Criteria:  Retained as necessary for service delivery, audit, fraud prevention, dispute resolution, legal compliance, and service improvement in aggregated or deidentified form where feasible.

We do not intentionally collect all categories above in every context. The categories collected depend on the Services used, the Customer's configuration, the User's interaction, and applicable data-source requirements.

We may collect personal information directly from you, from Customers, from Users, through the Platform, APIs, SDKs, plugins, forms, checkout flows, dashboards, support channels, emails, cookies and similar technologies, servers, logs, security tools, payment processors, fraud-prevention providers, identity verification providers, data providers, governmental sources, and other service providers.

We use personal information to provide, operate, maintain, secure, and improve the Platform and Services; perform age verification, identity verification, fraud prevention, compliance checks, and related Services; authenticate accounts; process payments; provide support; communicate with Customers and prospects; monitor and enforce the Terms of Service; detect, prevent, and investigate fraud, scraping, credential sharing, competitive misuse, security incidents, and unlawful activity; debug and improve functionality; comply with law, legal process, and data-source requirements; protect rights, safety, and property; conduct internal analytics and business operations; and market our business Services to current and prospective business customers.

For User Data submitted by or on behalf of a Customer, we process the information only for the Business Purposes described in our Terms of Service, the applicable Customer agreement, this Privacy Policy, and the Customer's instructions, or as otherwise permitted by Applicable Privacy Laws.

We may disclose personal information to the Customer that requested the verification or related Services; service providers and sub-processors that provide hosting, storage, security, analytics, communications, support, payment processing, identity verification, fraud prevention, and data-source services; professional advisers; auditors; insurers; payment processors; data providers; fraud-prevention partners; government authorities, law enforcement, courts, regulators, or other parties when disclosure is required or permitted by law; parties involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets; and other parties with your direction or consent.

We do not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined by the CCPA. We do not have actual knowledge that we sell or share personal information of individuals under 16 years of age.

When we process User Data as a service provider, processor, or similar role for a Customer, we will process User Data only for the purposes described in the Terms of Service, the applicable Customer agreement, this Privacy Policy, and the Customer's instructions, or as otherwise permitted by Applicable Privacy Laws. We will not sell or share User Data. We will not retain, use, or disclose User Data outside the direct business relationship with the Customer except as permitted by Applicable Privacy Laws. We will not combine User Data with personal information received from another source except as permitted by Applicable Privacy Laws. We will assist Customers with privacy rights requests, risk assessments, data protection assessments, cybersecurity audits, and security obligations to the extent required by Applicable Privacy Laws and the Customer agreement.

We use sensitive personal information only for purposes reasonably necessary and proportionate to provide the Services requested by Customers, verify age or identity, detect and prevent fraud, secure the Platform, comply with law, and perform other purposes permitted by Applicable Privacy Laws. We do not use sensitive personal information to infer characteristics about individuals or for cross-context behavioral advertising.

If we offer or enable biometric or face-match functionality, we will provide any required biometric privacy notice, consent mechanism, retention schedule, and release before collecting or processing biometric identifiers or biometric information, to the extent required by Applicable Law. Do not submit biometric information through the Services unless the feature has been expressly enabled by AgeChecker and all required notices and consents have been provided and obtained.

Our business-facing website, dashboard, and account services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through those services. Because we provide age verification and identity verification services, Customers may submit information relating to minors when doing so is lawful and necessary for an age-restricted transaction, safety, compliance, fraud prevention, or another legitimate purpose. Customers are responsible for complying with children's privacy, age verification, parental consent, and minor-data requirements applicable to their products, services, and jurisdictions, including the Children's Online Privacy Protection Act where applicable. If you believe a minor's information was submitted improperly, contact the relevant Customer or contact us at privacy@agechecker.net.

We use cookies, pixels, local storage, SDKs, server logs, and similar technologies for authentication, security, session management, account preferences, fraud prevention, analytics, debugging, and Platform functionality. We do not use these technologies to sell personal information or share personal information for cross-context behavioral advertising. Where required, we will honor legally recognized opt-out preference signals, such as Global Privacy Control, in a frictionless manner for browsers or devices that communicate the signal and for the rights to which the signal applies.

We may create and use aggregated, anonymized, or deidentified information for analytics, service improvement, security, fraud prevention, benchmarking, research, and lawful business purposes. We will maintain and use deidentified information without attempting to reidentify it, except to test whether our deidentification processes comply with Applicable Law or as otherwise permitted by Applicable Law. We require recipients of deidentified information to comply with applicable restrictions where required by law.

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized or illegal access, destruction, use, modification, or disclosure. These safeguards may include access controls, multi-factor authentication, encryption in transit and at rest where appropriate, logging and monitoring, vulnerability management, personnel training, vendor controls, incident response procedures, and periodic security assessments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as reasonably necessary and proportionate to achieve the purposes described in this Privacy Policy, comply with legal and regulatory obligations, satisfy data-source and audit requirements, resolve disputes, prevent fraud, enforce agreements, maintain security, and complete backup deletion cycles. Retention periods vary depending on the category of information, the Services used, Customer instructions, legal obligations, data-source requirements, and sensitivity of the information. Where feasible, we delete, anonymize, or deidentify personal information when it is no longer reasonably necessary for the purposes described.

Depending on your jurisdiction and our role with respect to your personal information, you may have rights to request access to, correction of, deletion of, or portability of personal information; to opt out of sale, sharing, targeted advertising, profiling, or certain automated decision making technology ("ADMT"); to limit certain uses or disclosures of sensitive personal information; to withdraw consent where processing is based on consent; to appeal a denial of a privacy rights request; and to be free from unlawful discrimination for exercising privacy rights.

To exercise rights for personal information we process as a business or controller, contact us at privacy@agechecker.net or use agechecker.net/account/support. We will verify your request using information reasonably related to your request and will respond within the time required by Applicable Law. For California requests to delete, correct, know, access ADMT, or appeal ADMT, we will confirm receipt no later than 10 business days after receiving the request and respond no later than 45 calendar days after receipt, unless an extension is permitted by law.

For User Data submitted by or on behalf of a Customer, please contact the Customer first because the Customer controls the data and is responsible for responding to your request. We will assist the Customer as required by Applicable Law and our agreement with the Customer. We may be unable to fulfill a request directly if doing so would conflict with the Customer's lawful instructions or our role as service provider or processor.

Where permitted by Applicable Law, you may use an authorized agent to submit a privacy rights request. We may require the agent to provide proof of authorization and may require you to verify your identity directly with us, unless prohibited by Applicable Law.

Where Applicable Law provides an appeal right and we deny your request in whole or in part, you may appeal by contacting us at privacy@agechecker.net and stating that you are appealing our decision. We will respond within the time required by Applicable Law and provide information about any further rights available to you.

We may send business-to-business marketing communications to current or prospective Customers. You may opt out of marketing emails by using the unsubscribe link in the email or contacting us at privacy@agechecker.net. We may still send transactional, service, security, legal, or administrative communications.

We are based in the United States. If personal information is transferred from another country to the United States, we will use lawful transfer mechanisms where required by Applicable Law. Customer is responsible for ensuring that Customer's transfer of User Data to the Services complies with Applicable Law.

The Platform may link to third-party websites, integrations, or services. We are not responsible for the privacy practices of third parties. Review their privacy notices before providing personal information to them.

We may update this Privacy Policy from time to time. The "Last Updated" date shows when this Privacy Policy was last revised. If we make material changes, we will provide notice as required by Applicable Law, which may include posting notice on the Platform, sending email, or providing dashboard notice.

AgeChecker.Net

Attn: Privacy

Email: privacy@agechecker.net

Mailing Address: 29899 Agoura Rd #210, Agoura Hills, CA, 91301 United States

We collect the categories of personal information listed in Section 2 for the purposes listed in Sections 2 and 4, from the sources listed in Sections 2 and 3, and disclose them to the categories of recipients listed in Sections 2 and 5. We retain personal information according to the criteria described in Sections 2 and 12. We do not sell personal information or share personal information for cross-context behavioral advertising. We use sensitive personal information only for purposes permitted by the CCPA and do not use it to infer characteristics about individuals.

California residents may have the rights described in Section 13, including the right to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, access certain ADMT information where applicable, appeal certain ADMT decisions where applicable, and non-discrimination. Requests may be submitted using the methods described in Section 13.

California Civil Code Section 1798.83 permits California residents to request certain information regarding disclosure of personal information to third parties for their direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing purposes unless we provide any notice and choice required by law.

If your personal information was submitted by a Customer through the Services, the Customer's privacy policy and terms also apply to the Customer's collection and use of your information. Contact the Customer for questions about the Customer's products, services, notices, consents, legal bases, and privacy rights responses.