Biometric policy.

01Purpose

Greenfly, Inc. ("we," "us," or "our") is committed to protecting the confidentiality and integrity of individual biometric data collected from or on behalf of our customers. This Biometric Data Policy and Notice ("Policy") describes our practices regarding the collection, use, storage, and destruction of biometric identifiers and information, in accordance with applicable laws, including the Illinois Biometric Information Privacy Act and other state biometric laws.

02Definitions

Biometric data, as the term is used in the Policy, refers to both a "biometric identifier" (a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry) and "biometric information" (any information based on an individual's biometric identifier used to identify an individual).

03Collection and use of biometric data

We may collect, use, and store scans of face geometry, or "faceprints," and associated biometric identifiers and information via our mobile app and websites in providing our services to customers for the purpose of identifying individuals in certain images and videos.

04Storage and protection of biometric data

We store biometric data securely using industry-standard security measures, including but not limited to encryption, access controls, and secure storage. Biometric data will not be sold, leased, traded, or otherwise disclosed to third parties, except in cases where:

1. disclosure is required by law or legal process; or
2. disclosure is consented to by the individual whose data is collected.

05Retention and destruction of biometric data

Biometric data will be retained only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Biometric data will be permanently destroyed when the initial purpose for collecting or obtaining such data has been satisfied, or within three (3) years of the individual's last interaction with us, whichever occurs first. Destruction of biometric data will be carried out in a secure manner, using techniques such as data wiping or shredding.

06Individual rights

Individuals whose biometric data we collect have the right to:

1. be informed about the collection and use of their biometric data;
2. request a copy of the specific biometric data we have collected about the individual;
3. request the deletion of their biometric data; and
4. withdraw their consent to the collection, use, or storage of their biometric data at any time, subject to applicable legal requirements.

07Consent

We will obtain written consent of the individual, or require our customer to obtain such consent, as appropriate, before collecting, using, or storing biometric data.

08Changes to this policy

We may update this Policy from time to time. Any changes will be posted on our website and will become effective upon posting. Continued use of our services following any changes indicates acceptance of the new Policy.

09Contact information

If you have any questions or concerns about this Policy or wish to exercise your individual rights under this Policy, please contact us at privacy@greenfly.com.