Biometric Information Privacy Policy
Effective Date: May 27, 2026 · Last Updated: May 27, 2026
Route Balance LLC uses biometric data to verify the identity of tool truck franchise customers and prevent fraud. This policy discloses how biometric information is collected, who processes it on our behalf, how long it is retained, how it is permanently destroyed, and your rights under the Illinois Biometric Information Privacy Act (BIPA), 740 ILCS 14.
1. Who Processes Your Biometric Data
Route Balance partners with Stripe, Inc. (Stripe Identity) to process biometric data for identity verification. Stripe Identity is the sole third-party biometric processor responsible for facial recognition, liveness verification, and document verification. Stripe Identity is a PCI DSS Level 1-certified service and operates under Stripe's global privacy and data security programs.
Route Balance does not store facial images, liveness video, or biometric templates. Stripe Identity processes all biometric data and returns only a pass/fail verification result to Route Balance.
2. Why We Collect Biometric Data
We collect the following biometric information for identity verification and fraud prevention:
- •Facial image(s) — one or more photos for comparison against a government-issued ID
- •Liveness proof — video or image sequence confirming you are physically present (not a photograph)
- •Government ID image — photo of your driver's license or passport for document verification
- •Biometric template — a mathematical representation of facial features created and retained solely by Stripe Identity
3. How Long Your Biometric Data Is Retained
Stripe Identity retains biometric data for the period specified in Stripe's Identity Data Processing Agreement (see stripe.com/legal/identity-privacy).
Once the retention period expires, all facial images, liveness video, and biometric templates are permanently destroyed by Stripe Identity. Route Balance retains only the non-biometric verification result (pass/fail, timestamp, document type) for fraud prevention and regulatory compliance purposes.
4. How Biometric Data Is Permanently Destroyed
Stripe Identity permanently destroys all biometric data no later than the end of the applicable retention period. Permanent destruction means:
- •Data is cryptographically erased from all Stripe Identity production servers and backup systems
- •Destruction follows NIST SP 800-88 secure data sanitization standards
- •No biometric data is sold, licensed, traded, or otherwise disclosed for secondary purposes
- •Stripe Identity provides written certification of destruction upon written request to [email protected]
5. Your Rights Under BIPA
Under Illinois law, you have the following rights:
- •Right to Decline — You may decline to provide biometric information. Declining means Route Balance cannot complete identity verification for your account through our standard process.
- •Right to Revoke Consent — You may revoke consent to biometric collection at any time by contacting [email protected]. Upon revocation, Route Balance will instruct Stripe Identity to delete your biometric data immediately, before the standard retention period expires.
- •Right to Know — You may request a copy of your verification result and a description of what biometric data Route Balance has requested Stripe Identity to retain on your behalf.
- •Right to Correct — If a verification result is incorrect, you may request re-verification at no cost.
Frequently Asked Questions
Does Route Balance sell my biometric data?
No. Route Balance does not sell, rent, lease, or otherwise profit from biometric data. Stripe Identity processes biometric data solely to return a pass/fail identity result to Route Balance.
Is an alternative identity verification method available?
Contact [email protected] to inquire about alternative methods. Availability depends on your location and account type.
Where is my biometric data stored?
Biometric data is stored on Stripe Identity's encrypted, access-controlled servers. Route Balance does not receive or store facial images or biometric templates — only the verification result.
How do I request immediate deletion?
Email [email protected] with subject line "Biometric Data Deletion Request." We will instruct Stripe Identity to delete your data within 5 business days — before the standard retention period expires.
Legal Framework
- •Illinois Biometric Information Privacy Act (BIPA) — 740 ILCS 14/1 et seq.
- •Stripe Identity Data Processing Agreement — stripe.com/legal/identity-privacy
- •NIST SP 800-88 — Guidelines for Media Sanitization (destruction standard)
- •GDPR Art. 9 — Where applicable for EU residents
Questions or Deletion Requests
For biometric data questions, consent revocation, or deletion requests:
Route Balance LLC · 1311 Commerce Lane, Suite 4, Jupiter, FL 33458