The Alibaba Cloud ID Verification service collects, uses, processes, and protects personal information. This policy applies to Customers who use the ID Verification service.
About This Privacy Policy
ID Verification is an identity verification service provided by Alibaba Cloud. This Privacy Policy ("Policy") describes the types of personal information we collect, how we use and share it, and the measures we take to protect it. When we provide the ID Verification service, we act as a processor or service provider for our Customer. We process data that we receive from and on behalf of our Customer, in accordance with applicable laws and regulations.
The Customer is responsible for obtaining all necessary consents and authorizations from their end users before enabling the use of ID Verification.
Information We Collect
At the Customer's request, ID Verification may collect and process the following categories of information from the Customer's end users:
-
Device data. Basic device information (manufacturer, brand, model, operating system, memory, storage, CPU information, screen resolution, system time zone, system language), device network information (carrier, network type, IP addresses), and device application information (SDK host application name, version, installation time).
-
Identity documents and face images. When an end user enables camera permissions and provides consent, we may capture images of their identity document (such as a national ID card, passport, or driver's license) and extract data using Optical Character Recognition (OCR), including name and document number. We also collect face images and video streams for real-time face detection and identity verification.
-
NFC document data. When an end user uses the ID_NFC function, we read identity document information using the Near Field Communication (NFC) permission on their device.
-
Device permission data. To support the product's features and ensure secure and stable operation, ID Verification requests or uses certain permissions from the end user's operating system. For details on the specific permissions required, see the developer guide.
-
Log data. We automatically collect and save detailed service usage data in operation logs, including operation parameters, operation time, service response time, operation steps, verification results, and error reasons.
How We Use Information
We use the collected information solely for the following purposes:
-
Providing, maintaining, and improving the ID Verification service
-
Performing identity verification and fraud prevention
-
Troubleshooting technical issues and resolving service-related problems
-
Complying with applicable legal and regulatory obligations
Information Sharing
We do not sell, rent, or trade personal information collected through the ID Verification service. We may share information only in the following circumstances:
-
With the Customer, as a processor acting on the Customer's behalf
-
When required by applicable law, regulation, legal process, or governmental request
-
To protect the rights, property, or safety of Alibaba Cloud, its Customers, or the public
We do not comply with requests made directly by a Customer's end users or their authorized agents. The Customer is responsible for responding to requests from end users who are exercising their rights under applicable laws, such as the right to know, opt out, limit, or delete personal information. We provide necessary support to the Customer as required by applicable law.
Data Retention
We retain the collected data for 30 days to troubleshoot and resolve service-related issues. After this period, we permanently delete the data. Within this 30-day period, the Customer can request to delete this data.
Information Security
We implement industry-standard technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments.
While we strive to use commercially acceptable means to protect personal information, no method of transmission over the Internet or electronic storage is 100% secure.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in legal, regulatory, technical, or business developments. Changes will be communicated by posting an amended version on this website. The updated Privacy Policy is effective immediately after it is posted or on a date specified by Alibaba Cloud.
If we make any material changes, we will notify you by email (sent to the email address specified in your account) or by a notice on this website before the change becomes effective. To the extent permitted by law, you agree to be bound by the current version of this Privacy Policy. Check this page regularly for updated information about how we handle your personal information.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us through Alibaba Cloud Support.