Privacy Policy

Effective August 2026

We do not sell your information nor will we ever do so. Protecting your privacy is why we exist. We want to empower you to make informed choices about how you share personal information. .

What This Policy Applies To

This Privacy Policy applies to visitors to our website and our App (available for downloading on Apple App Store and Google Play or from our website at https://nametag.co/install) or accessed via App Clip or Instant App, and other online properties and associated services that display this Privacy Policy. For individual end users who use Nametag directory, this Privacy Policy is incorporated into and governed by our End User License Agreement (EULA).

If you use Nametag because your employer, contractor-engaging entity, or other organization (“Customer”) has deployed Nametag for identity verification of its workforce, your use is governed by the contract between the Customer and Nametag, which incorporates this Privacy Policy. In this context, Nametag processes your personal information at the direction of, and on behalf of, the Customer. The Customer determines what data is collected, how long it is retained, and with whom it is shared, subject to applicable law. Your employer or organization can provide you with information about their specific data handling choices.

In both cases, this Privacy Policy is incorporated into the applicable agreement, describes our general data practices, and we comply with all applicable privacy laws.

Information We Collect and How We Use It

When you use Nametag

When you use Nametag and create an account to access our services, you will be asked to provide certain personal information, for example your name, telephone number, a scanned government photo ID (such as a valid driver’s license) and a scanned photo of your face (which will be matched with your photo ID to verify it’s you), and possibly other information. We share this information (and information derived from it) only as described in this Privacy Policy and we obtain with your permission where required. We do not share selfie or ID photos except with our service providers as described elsewhere in this Policy.

When you provide a government-issued photo ID and selfie, we derive additional personal information from your ID document, including: your legal name; your date of birth; your address; identification numbers from your identity document (e.g., driver’s license number); and a verified profile photo.

We may augment and cross-check information derived from your identity documents with information obtained from third parties (including government databases and commercial identity verification services) to verify your identity and detect fraud. We do not use information from third-party sources for any purpose other than identity verification and fraud prevention.

If you provide your phone number or email address, we use it as a convenient way to introduce yourself to companies and friends. We may also use it to communicate with you (via text, email, or in-app notifications) about your use of the websites, App and services (we do not use it for marketing purposes). If you don’t want to provide your phone number, you can use a QR code instead.

You can then build out your profile by accepting (or not) incoming requests for identity confirmation and data sharing. You are free to refuse any request for your personal information, with the understanding that we may be unable to provide you with some of our services.

Facial Matching Information Collection, Use, and Retention

With your consent, we use facial matching technology to verify your identity by comparing your government photo ID with a selfie photo of your face, or with previous photos you have already shared. The comparison produces a percentage-match score of two or more photos. We do not share this information (except with our service providers, as described below) or use it for any other purpose (e.g., we will not sell, lease, trade, or otherwise profit from your biometric information). We will request your prior written consent to use your photographs and related information (including biometric information) for using the facial matching technology in this manner.

We use commercial facial recognition technology provided by Amazon Web Services (AWS) to verify and authenticate user identities. This technology allows us to compare photographs you submit with an authoritative image (e.g., with the identity document you provide, with a photograph you previously provided, or with an image provided to us by our customer). AWS processes biometric data derived from your image. You can review the AWS Service Terms available at https://aws.amazon.com/service-terms/ for more information about how AWS uses and protects your biometric information.

During each verification, facial geometry (biometric data) is computed in real time to produce a match/no-match result. This biometric data is discarded immediately after the matching process is complete and is never written to persistent storage. Nametag does not maintain a biometric template database.

After verification, we may retain the following for the applicable retention period described below: (a) photographs of your government ID and selfie; (b) a verified profile photo derived from your ID or selfie; and (c) verification metadata (e.g., match score, timestamp, device information). These retained items are used to provide our services, enable express re-verification, detect and prevent fraud, and comply with applicable laws. These retained items are not biometric templates or biometric identifiers.

Your Consent

By providing your photograph for facial recognition purposes, you explicitly consent to our collection, transient processing, and use of biometric data as described above, as well as the retention of photographs and verification metadata. This consent constitutes a written release as required by applicable biometric privacy laws. You have the right to withdraw your consent at any time by contacting us directly at privacy@nametag.co or by using the “Delete my Data” feature in the App, subject to the exceptions described under Retention of Personal Information.

Use of Artificial Intelligence

Our AI models are trained with a strong focus on anonymization and non-identifiable information, ensuring user data is never misused or reconstructed. The resulting model stores and uses only anonymized data. We are committed to non-discrimination, ensuring our models treat all individuals fairly regardless of their demographic profiles. We continuously refine our systems to address emerging threats and enhance performance, ensuring our technology remains at the forefront of security and reliability.

We also collect and use such information to maintain and improve the functionality, accuracy, quality, safety, and security of our products and services, including to train machine learning algorithms, enhance artificial intelligence models, detect and correct product errors, and develop enhanced solutions and services, as further described below.

Nametag employs a robust and secure approach to training our machine learning models, utilizing a combination of synthetic data (generated internally), commercially purchased data, and user data collected during the operation of our services. These models are crucial for verifying the authenticity of evidence we collect, such as ensuring the legitimacy of IDs and selfies. We responsibly source commercially purchased data from verified and legally compliant vendors, ensuring adherence to all applicable privacy laws and ethical standards.

Although our models are trained on images (for example, your driver’s license) that may contain personally identifiable information (PII), we ensure that PII is not captured in any model. Our models are trained on and look for characteristics of your driver’s license or other ID card (fonts, spacing, backgrounds, distorted watermarks, and other irregularities) rather than the PII in or on the card. Our models produce a single numerical output to indicate authenticity and are incapable of generating arbitrary text or images.

The models cannot reproduce any of the PII present in the training materials. The resulting model stores and uses only anonymized, generalized characteristics data, and does not store or retain PII, providing an additional layer of security and privacy during inference. No sensitive data is ever reconstructed or reproduced during model inference.

Any personal information obtained from your driver’s licenses or other ID card is used solely for the specific purpose of identity verification for which it was collected, consistent with applicable laws. We do not sell, lease, share, or otherwise use your ID personal information for any unrelated purpose, including marketing, advertising, or training artificial intelligence systems for purposes other than those described in this section, without your explicit informed consent. As noted above, our AI models analyze general characteristics of ID documents (such as fonts, layouts, backgrounds, watermarks, and security features) rather than the personally identifiable information (PII) on the document, and they do not extract or retain PII from your ID.

If at any time you wish to withdraw your consent, or request deletion of information obtained from your ID card, you can do so by contacting us or using the “Delete my Data” feature in our App, after which such data will be promptly excluded from all subsequent processing and training activities, subject to the exceptions described under Retention of Personal Information.

Nametag uses machine-vision models exclusively for fraud detection and identity verification. During the applicable retention period, Nametag may use retained images, which are not biometric templates, to train these models. These models are classifiers that produce only numerical outputs and cannot reconstruct or reproduce any personal information. By using Nametag, you consent to this use of your images for the purposes described in this section. You may withdraw that consent at any time as described above.

Nametag does not train generative artificial intelligence models or large language models (LLMs) using any customer or end-user data. We do use private, confidential instances of generative artificial intelligence for limited operational purposes such as classifying and comparing names. No data is retained within those environments, and no data is used to train the underlying models.

If you use Nametag through an employer or other organization, that organization may opt out of machine-vision model training, and of large language model name processing, through its contractual configuration with Nametag.

Web Logs and Online Trackers

We log activity on our websites and services to help us manage and improve them. On our main website, getnametag.com, we deploy tracking technologies (e.g. web beacons or pixels) for marketing purposes. On our product website (nametag.co) and our App, we use tracking technologies for technical purposes, such as debugging and performance monitoring, however we do not use these for marketing purposes.

App Information

Our App generates and stores technical information including device identifiers, the type of device you are using, your IP address, which language you prefer, and encryption keys. When you scan your ID or take a selfie, we collect images of your ID document or your face. In some cases, we may collect intermediate images along with other technical information to assist us in protecting your account and to improve your experience. We collect and store some of this information to operate the App and services.

Unique identifiers

Each company you decide to share with also gets its own randomly-generated identifier for you. Because each company gets a different identifier, companies cannot use Nametag to cooperate with each other to get more information about you than what you’ve shared. We also generate a unique identifier only for our internal use, but this identifier is not shared.

End User Information

Any and all information you post to your account and/or profile is considered “End User Information,” which is defined and governed by our End User License Agreement and the included Acceptable Use Policy. If you use Nametag directly as an individual, you retain control of your End User Information at all times; you decide what information to share or not share with companies and other users, and companies only have control of data that users explicitly consent to share. For workforce users, the applicable Customer agreement and Customer configuration govern authorized processing, sharing, and retention, subject to individual rights required by applicable law. Nonetheless, think carefully before posting any End User Information or agreeing to share it, especially if that includes your personal information. You also are responsible for ensuring that all posting and shared End User Information is accurate and complete.

Technical Support

We want to help you use the Nametag App and we are here to talk. Contact us via email at help@nametag.co. Information you share with us when we are providing technical support will be kept for purposes of diagnosing and solving your problem and contacting you to help you. To assist with technical support, we may collect your city and country location from your IP address; however, we do not use this location data for any other purpose.

Application Metadata

For participating companies that integrate with Nametag, we collect and store the name of the application, the icon you share with us, and other metadata.

Information We May Share and With Whom

With companies using Nametag

Companies use Nametag to request that you share information with them. For example, your employer would invite its employees to use Nametag to verify their identities and to access their account. We check to make sure that the companies are who they claim to be, and they are required to adhere to certain privacy and data handling practices. If you use Nametag directly as an individual, it is up to you to decide whether you accept requests from participating companies. For workforce users, such requests are governed by the applicable Customer agreement and Customer configuration, subject to individual rights required by applicable law.

If you use Nametag directly as an individual, you can revoke a company’s access to your information at any time. When you do so, we immediately stop sharing your data and tell the company that you’ve revoked access. However, they may have stored the information you’ve shared. As you may expect, your use of other companies’ services is governed by their respective privacy policies. For workforce users, authorized processing and sharing are governed by the applicable Customer agreement and Customer configuration, as described under What This Policy Applies To, subject to individual rights required by applicable law.

Service providers

We work with designated third-party vendors to support our services and may disclose your personal information (including biometric information) to a third party for one or more business purposes. For example, we use a vendor to store and process your photos and facial information for our identity service, and a vendor to send text messages to our users. In the course of verifying your phone number or email address, our vendor will have access to your phone number or email address. That being said, we encrypt everything and everywhere we can: when we store it and when we move it between the parts of the system that comprise Nametag, it is always encrypted. In addition, we may deploy third-party cookies to learn how a website is used. All our service providers are required to protect your information and not disclose it to others unless we have authorized them to do so. Specifically, when we disclose personal information (including biometric information) for a business purpose, such as to service providers, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. Any resale or secondary use of your personal information by such third parties is contractually prohibited, consistent with state and federal privacy laws.

Legal Purposes and Official Demands

If we receive a legal or official demand from a government or court (e.g., a subpoena or court order), we may be required to share your data. We will try to let you know about the request before we comply so you can object. But keep in mind that we may not be allowed to let you know of the demand, or we may be required to comply with the demand before you have time to respond. We will carefully scrutinize each demand before we comply in an effort to protect your legal rights and comply with our obligations to the extent legally permissible. We may preserve or share your personal information to enforce our EULA and any other agreement, terms and conditions relating to your use of the App and services. We also may preserve or share information as needed to ensure the safety and security of our App and services, and our users, and to detect, prevent, or otherwise address fraud, security, or technical issues.

Business transfers

We may share your personal information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about our users are among the assets transferred. In the event of such a transfer, we will require the successor entity to adhere to privacy standards and data protection practices that are at least as protective as this Privacy Policy. If the successor’s privacy practices differ materially from ours or if your rights under this Privacy Policy could be affected, we will provide you with notice of such changes, and you will be given the opportunity to opt out or request deletion of your Personal Information..

Your Access, Choices and Other Rights

You control your information that you provide to us. You have the right to request from us a copy of what personal information that we have collected or to ask to correct or update the information we maintain. Our full App includes a “Delete my Data” option (My Vault > Settings > Delete my Data) that enables you to delete your account information (including User Content and any personal information), subject to the exceptions described under Retention of Personal Information.

Retention of Personal Information

We retain your photos and other personal information (including verification metadata) only as long as we need this information to provide the App and our services to you, to detect and prevent fraud, to maintain compliance with applicable laws (such as the Illinois Biometric Information Privacy Act and applicable data privacy regulations), and to meet other defined operational obligations. Our retention practices are as follows:

Unless otherwise configured or required under applicable law or regulation, we will permanently destroy your personal information in a secure, irrecoverable, and confidential manner in compliance with applicable laws when we no longer need it to provide the App or our services to you (e.g., when you stop using our App), or within three (3) years of your last interaction with us, whichever occurs first.

If you use Nametag because your employer, contractor-engaging entity, or other organization has deployed Nametag for identity verification of its workforce, your employer or organization may configure a shorter retention period (from as little as one hour up to three years). In that case, Nametag enforces the retention schedule set by your employer or organization. No data is retained longer than your organization’s configured policy permits, except as described below.

For employees located in Texas, data is retained for no longer than one (1) year from the last interaction with Nametag, in compliance with the Texas Capture or Use of Biometric Identifier (CUBI) law, unless a shorter period is configured by the Customer.

Data related to known or reasonably suspected fraud is retained indefinitely, regardless of retention period settings or deletion requests. We may also retain data as required by a valid legal obligation, court order, or regulatory requirement.

You may request deletion of your data at any time using the “Delete my Data” feature in the App or by contacting us at privacy@nametag.co. Deletion requests are honored within 30 days, except that deletion does not apply to data related to known or suspected fraud or data subject to a legal hold.

We may send you in-App notifications, text messages, or email (if you give us your phone number or email) about your use of our App and services. If we want to send you any messages about any new products or services that may be of interest to you, we will first ask for your permission.

Google provides website visitors the ability to prevent their data from being used by Google Analytics. To opt out of Google Analytics, install the Google Analytics Opt-out Browser Add-on.

Your State Privacy Rights

The following states currently provide their residents with additional rights regarding our use of their personal information: California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Residents of these states have the right to:

• Confirm whether we process their personal information.

• Access and delete certain personal information.

• Correct inaccuracies in their personal information, taking into account the information’s nature processing purpose.

• Data portability.

• Opt-out of personal data processing for:

  • targeted advertising;

  • sales; or

  • profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).

• Either limit (opt-out of) or require consent to process sensitive personal information (including biometric information). We may obtain your consent through various user interactions, including but not limited to clicking a button, checking a box, or other clear affirmative actions that indicate your agreement to the processing of your personal information.

Under certain laws (such as the GDPR, the California Privacy Rights Act (CPRA), and other state privacy laws), our identity verification processes and procedures can constitute “automated decision-making” or “profiling,” as they involve automatic processing of sensitive personal data to determine your eligibility or access rights to our services. We are committed to fair and transparent processing. You have the explicit right to challenge, contest, or seek human review of decisions made solely through automated means, such as identity verification results. If our automated systems deny your request or limit your access to our services, and you believe this is incorrect or unfair, please contact us as described below. Upon your request, a human reviewer will assess your case, revisit the automated decision, and promptly communicate the outcome and rationale of that human review process.

The exact scope of these rights may vary by state. To exercise any of these rights please contact us as described below. You may also contact us to appeal a decision regarding a consumer rights request. More information about state privacy laws can be found at the US State Privacy Legislation Tracker available on the website operated by the International Association of Privacy Professionals (IAPP). (We are not responsible for content found on the IAPP website or any other third-party websites)

Users in California

For users in California, please review our California Privacy Policy for further information, including how to submit “Requests to Know” or “Requests to Delete” in accordance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Users in Europe and in the UK

For users in the European Union: We have appointed Prighter Group and its local partners as our privacy representative and your point of contact for privacy-related requests in accordance with the EU General Data Protection Regulation (EU GDPR). Please visit https://prighter.com/q/11923048432.

Your Right to Complain (UK Data Subjects)

Effective June 19, 2026, UK data subjects may complain directly to Nametag if they believe their personal data has been handled in a way that does not comply with UK data protection law. If you have a data protection concern, you may contact us at privacy@nametag.co. You may also contact the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Security

Data security is at the heart of all we do. All the data you share with us is encrypted, both at-rest and in transit. We use advanced encryption and up to date security practices to protect the data you share, and we are audited to maintain industry standard certifications. Where required by law or otherwise necessary, we will apply enhanced security measures to sensitive or special categories of personal information.

Children

Our websites, App, and services are not intended for children under 16 years of age. We do not knowingly collect or sell personal information from children under the age of 16. If you are under the age of 16, do not use or provide any information on or to the websites or App or through any of their features. You must be 16 years old or older to use our websites, App and services. If you become aware that we have inadvertently collected information about children younger than 16, please notify us and we will delete it right away. If you are the parent or guardian of a child under 16 years of age whom you believe might have provided us with their personal information, you may contact us (as described below) to request the personal information be deleted.

Changes to Our Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our privacy practices, applicable laws, and evolving best practices. When we make changes, we will update the “Effective” date at the top of the Privacy Policy at https://nametag.co/privacy (or another publicly accessible location).

If the changes are material, for example, if they affect what personal information we collect or how we use it, we will highlight them at the top of the policy or in a banner or notice on our website. We encourage you to review our Privacy Policy regularly to stay informed about how we protect your information.

If you would like to be notified directly when we make material changes, you may contact us at privacy@nametag.co to request notification.

Contact Us

We love talking about privacy, so if you have any questions about how we handle user data and personal information, feel free to contact us at privacy@nametag.co.

Or if letters are more your thing, write us at:

Nametag Inc.
520 East Denny Way
Seattle, WA 98122