Bynaus, Inc. — Legal
Biometric Data Policy
Last Updated: October 5, 2026
1. What we process
When a customer enables facial verification, the Bynaus platform creates a facial template from a worker’s ID photo and compares it with a photo taken at clock-in. These templates, and the photos used to create them, are “Biometric Data”. Bynaus processes Biometric Data only on behalf of, and as instructed by, the customer (the worker’s employer or engaging company).
2. Purpose
Biometric Data is used solely to verify that the person clocking in or checking in is the enrolled worker, including liveness checks that prevent the use of photos or videos. It is never used for any other purpose, never sold, leased, traded or used to profit, and never shared except with our cloud infrastructure provider (Amazon Web Services) as needed to perform verification, or where required by law.
3. Notice and consent
Customers must give workers any required notice and obtain any required consent before enrolling them, and must offer an alternative where the law requires it.
4. Retention and deletion
The customer controls how long a worker’s Biometric Data is kept:
- When a customer deletes a worker or the worker’s ID photos in the platform, the worker’s facial template is removed.
- Customers are required to do this once the purpose of collection is satisfied, such as when the worker leaves, and within the time applicable law requires. Under Texas law, that is no later than one year after the purpose expires.
- When a customer’s account ends, Bynaus deletes that customer’s Biometric Data as part of account closure, within 90 days.
5. Security
Biometric Data is encrypted in transit and at rest, kept separate for each customer, and accessible only to automated verification and to the customer’s authorized administrators.
6. Requests
Workers should contact their employer to request deletion. Workers can also contact privacy@bynaus.ai or use our privacy request form, and we will work with the employer to respond.