Biometric Data Policy

1. What we collect

IntimaShield, LLC collects one type of biometric identifier: a facial geometry template derived from a live selfie you provide during identity verification. The template is a mathematical representation of the geometry of your face. It is not a photograph.

We use Stripe Identity to verify your government-issued ID against the live selfie, and AWS Rekognition to match that template against images found online.

2. Why we collect it

To verify that content found online depicts you before filing any removal notice on your behalf. We never file a notice without biometric confirmation.This protects platforms from bad-faith notices and protects you from mistakes.

Your template is used only for this purpose. It is never used for advertising, profiling, surveillance, or any service unrelated to identifying non-consensual intimate imagery of you.

3. How long we keep it

Your facial geometry template is permanently deleted within 24 hours of your case closing or your subscription ending, whichever comes first. Every deletion is logged with a timestamp in our deletion_logs table for audit purposes.

  • Free Scan (unpaid): free scans use text-only search. No biometric data is collected.
  • Emergency Takedown ($499): your template is retained for the active life of the case. Deleted within 24 hours of case closure.
  • Shield Monitoring ($29/month): your template is retained for the active life of your subscription to enable ongoing verification. Deleted within 24 hours of subscription cancellation.
  • Abandoned sessions: any template associated with an incomplete verification session is deleted within 24 hours.

4. Ongoing use

For Shield subscribers, your enrolled facial template is used on an ongoing basis during active monitoring. When our systems find content online that may depict you, we compare that content against your template before any removal notice is filed.

External images we process during verification are never stored on our servers. They are fetched into temporary AWS processing, compared against your template, and deleted from temporary storage within seconds of the comparison completing. We store only the confidence score, a number between 0 and 1, along with the URL that was checked and a timestamp.

No facial geometry derived from external images is ever persisted.

5. We do not sell or share biometric data

Pursuant to 740 ILCS 14/15(c), IntimaShield will not sell, lease, trade, or otherwise profit from any biometric identifier or biometric information collected from users. Ever.

We do not share biometric data with advertisers, data brokers, analytics providers, or any third party other than the processors named below.

6. Third-party vendors

  • Stripe Identity — government ID verification and 3D liveness check. Operates under a data processing agreement that prohibits retention of biometric data beyond the verification session. Stripe Identity sessions are redacted upon case closure.
  • AWS Rekognition — facial matching via dedicated per-user collection. Your template is stored in an isolated collection identified by a random UUID, never linked to personally identifiable information inside AWS. The collection is deleted via API call when your subscription or case ends. AWS operates under a data processing agreement that prohibits use of your data for any purpose other than the service we request.

No other third parties receive biometric identifiers or biometric information from IntimaShield.

7. Your rights

You have the right to request destruction of your biometric data at any time. To exercise this right:

  • Email help@intimashield.com with the subject line "Biometric Data Deletion Request."
  • We will confirm deletion within 48 hours and email you a timestamped confirmation from our audit log.

Upon deletion, IntimaShield retains only the record of your original consent (IP address hash, timestamp, and policy version) as legally required proof that biometric processing was authorized. This consent record contains no biometric data.

Illinois residents: this policy satisfies the requirements of the Illinois Biometric Information Privacy Act, 740 ILCS 14.

8. Contact

For questions regarding this policy or to submit a BIPA-related request:

IntimaShield, LLC
3561 S Archer Ave #1036
Chicago, IL 60609
help@intimashield.com