Privacy by design
Identity checks involve sensitive data, so we collect little, look at it with people rather than algorithms and delete it quickly.
Roles
- You (the client) are the data controller. We are your processor and act only on your instructions, under a data processing agreement that you accept before going live.
- Applicants are told who is asking, why and for how long, on the first screen of the flow.
Only what the flow needs
- You choose the steps: ID front, ID back, selfie, liveness video and proof of address. Nothing else is collected.
- A flow can return a minimal result (approved, plus age-over flags) instead of extracted fields and media.
No face recognition
- The selfie and the liveness video are compared by a human reviewer. We compute no face templates, embeddings or similarity scores, so the service does not process biometric data for identification.
- The automatic checks are non-biometric: image quality, reading the document's machine-readable zone and its check digits, expiry, age and per-client duplicates.
Retention
- Images and videos are deleted 30 days after the decision by default. You can shorten this, but never extend it past the platform maximum.
- A minimal record of the result is kept for 5 years by default, which you can also shorten.
- Abandoned sessions are purged after 72 hours and test-mode sessions after 24 hours.
Rights of the people involved
- From the dashboard you can export everything about a verification and erase it immediately, evidence and record, leaving only a trace without personal data.
- Only the reviewers and the staff of your account can see an applicant's data. No cross-client matching is done.
Where it is processed
- In the European Union. The list of sub-processors is public and changes are announced in advance.
LegitFlash is not for AML/KYC-regulated onboarding and does not provide qualified or legally binding digital identities.
Questions about privacy? Write to support@example.com.