Biometric Data Retention and Destruction Policy

Last updated: [date of publication]

Purpose and scope

Let Loose (operated by Baracuna, LLC — "we," "us," "our") offers optional identity verification for guests and hosts to support trust and safety on the platform. This policy explains how biometric identifiers and biometric information involved in that process are collected, used, retained, and destroyed. It's written with reference to — though isn't a substitute for legal advice about — state biometric privacy laws including the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, and Washington's biometric privacy statute.

What we mean by "biometric identifier"

A scan of face geometry — measurements and spatial relationships derived from a photo — used to confirm your identity. This does not include the photos themselves, which are handled separately (see below).

How verification works

Identity verification is performed by our payment processor, Stripe, Inc. ("Stripe"), through its Stripe Identity product. When you choose to verify, you submit a government-issued ID and a live selfie; Stripe analyzes facial geometry across both to confirm a match.

We do not receive or store your raw ID images, selfie photos, or facial-geometry data. We receive and retain only:

1. The verification result (verified / not verified).
2. The timestamp of the verification.

Stripe's role and retention

Stripe acts as our processor for this feature and holds the underlying images and biometric data under its own privacy policy. Per Stripe's own published retention practices: facial-geometry identifiers are retained for up to one year from capture, then permanently deleted; the underlying ID document images and extracted ID data are retained for up to three years. Longer retention may apply where required by law (for example, anti-money-laundering or sanctions-compliance obligations).

Our own retention

We retain the verification result and timestamp for as long as your account is active, plus a limited period afterward for fraud-prevention and dispute-recordkeeping purposes, consistent with the retention periods described in our Privacy Policy.

No sale, no advertising use

We do not sell, lease, trade, or use biometric identifiers or biometric information for advertising. Verification data is used solely to confirm identity and support trust and safety on the platform.

Your choice

Providing biometric data for identity verification is voluntary. If you prefer not to, contact [email protected] for a manual alternative.

Questions

Contact [email protected] with any question about this policy.