Your platform partners with Stripe to process payments. Stripe Identity helps businesses verify your identity by validating your government ID document and using biometric information to verify that the ID document belongs to you. Below are resources to help you better understand how you can manage the data captured in that process and how your data is kept safe.
When you interact with businesses in-person, identity verification happens all the time. For example:
As more businesses move online and no longer interact with customers face-to-face, Stripe Identity helps these businesses confirm that you are who you claim to be.
There are multiple ways businesses can choose to confirm your identity through Stripe, including:
Stripe’s identity verification technology uses computer vision to create biometric identifiers of your face from the selfies and the picture on your photo ID—and compares the two. This mimics what a person does to verify that your face matches the face on your ID document in-person, like a cashier who reviews your driver's license to verify that it’s real, then checks that you look like the photo on the ID document.
The accuracy of this biometric technology (which matches a selfie with a photo in the ID document) is constantly being improved on in order to reduce cases where legitimate users are falsely rejected or fraudsters pretending to be someone else are approved. This is why Stripe asks for your permission to use your images for training purposes.
There are two different sets of permissions that Stripe will ask of you for Stripe Identity.
Stripe will capture images of you and your photo ID document to confirm your identity. Stripe will use the captured images to check that the ID document is valid, and to confirm that the ID document presented belongs to you. Stripe will have access to your verification status, captured images, and extracted data from images such as name, date of birth, and ID number, to the extent permissible by law. If a business uses Stripe to verify your identity, the business will also have access to the same information (e.g., your verification status, insights regarding why Stripe was or was not able to verify your identity, captured images, and the extracted data from those images). The business will not see the biometric identifiers used to confirm that your selfie matches the photo ID document, and those identifiers will be removed from our systems within one year. Stripe retains biometrics for one year to identify fraud over time and across photo IDs, but you can opt-out at any time by contacting privacy@stripe.com. With this retained data, Stripe also cross checks new selfies against past submissions. As for the non-biometric data that you submitted (e.g., photo and ID document), Stripe retains that data in your account for 3 years.
If you are not comfortable sharing your information in this way, you can exit. If a business requested your verification, please get in touch with the business for an alternative way to confirm your identity.
Stripe will use the captured images to improve the accuracy of our biometric verification technology. This will help reduce cases where Stripe falsely rejects legitimate users or approves fraudsters pretending to be someone else. If you give permission, Stripe will occasionally generate additional biometric identifiers for training purposes—which will be deleted within one year. You can withdraw your consent to Stripe’s use of your biometric information at any point by contacting privacy@stripe.com.
If you are not comfortable letting Stripe use your data to improve our services, you can click to decline consent and Stripe will only use your biometric information for the initial verification. You can learn more about how we handle and store your images and extracted data in our Privacy Policy.
More information about how to delete data submitted through Stripe Identity.