Privacy policy clauses for Jumio
Jumio is an AI-powered identity verification platform that uses government ID document analysis and facial biometric technology to confirm user identity and comply with Know Your Customer (KYC) requirements. Websites integrate Jumio to prevent fraud, verify account holders, and meet regulatory compliance obligations.
Free scan · No signup · Results in 60 seconds
What data Jumio collects
Your privacy policy must disclose each of the following data types when you use Jumio.
When does Jumio trigger privacy obligations?
Jumio integration triggers obligations the moment you embed its SDK or API and begin collecting identity documents and facial biometric data from users. This is not optional compliance—biometric data collection is explicitly regulated across multiple jurisdictions.
GDPR (EU/EEA users): Biometric data is classified as a special category under GDPR Article 9(1), meaning you cannot process it without explicit legal basis. Article 9(2) permits processing only with explicit consent (Article 7) or for specific statutory reasons (e.g., employment, public interest). You must also comply with Article 13/14 (transparent disclosure) and Article 35 (DPIA—data protection impact assessment is mandatory for biometric processing). First step: Conduct a DPIA before deployment.
