US State Privacy Notice

ID.me NOTICE OF US STATE PRIVACY RIGHTS

This Notice is intended for all individuals residing in states with applicable privacy laws who access ID.me’s website(s), apps, or any other products or services, or otherwise interact with ID.me in a manner involving the collection of Personal Information. This notice is part of ID.me’s Privacy Policy, but is limited in application to only those individuals residing in those states with applicable privacy laws. The rights available to you depend on your state of residence, the information involved, and whether the applicable law covers ID.me’s processing of that information. Residents of other states may also have rights under laws that protect particular types of Personal Information.

1. Categories of Information We Collect

This notice lists the categories of Personal Information we have collected through any of the ID.me Services in the past 12 months. The particular categories of Personal Information collected by ID.me will vary depending on the specific Services you use, for example individuals who verify their identity for use with certain federal and state government agencies may be required to provide additional categories of Personal Information compared with those individuals verifying to qualify for group discounts.

This notice addresses the Personal Information collected by ID.me across our Services, so not every category will apply to every user. We collect information directly from you, automatically from your use of our Services and devices, and from sources used to verify information or support our Services, such as government and public records, telecommunications providers, verification providers, and our Partners. For more information on how we obtain this information, please refer to the “What Information We Collect About You” section of our Privacy Policy.

1. Identifiers — including name, address, email address, wallet name, IP address, cookie ID, ID number assigned to your wallet, Social Security Number, drivers license number, passport or passport card number, state identification card, date of birth, and phone number.
2. Demographic information — including your age, gender, race, military/veteran status, citizenship (based on passport information provided). This type of Personal Information includes what is also considered a protected classification characteristic under pre-existing applicable laws.
3. Biometric information – Photos on forms of identification (e.g., driver’s license, passport, student identification card, military identification card, or other state identification card(s), and associated facial geometry or faceprints derived from the identification photographs, “selfie” photographs, or recorded video sessions you provide for identity verification and fraud prevention, and fingerprints where required for the Services you request. Photographs and recordings are also visual or audio information. Whether an image or recording itself is considered biometric information depends on how it is used and applicable law. Additional information is provided in our Biometric Information Privacy Policy.
4. Commercial information on your interactions with the ID.me or our Partners — including purchases and other commercial engagements conducted through ID.me Shop.
5. Internet or other electronic network activity information — including browsing activity on our sites and apps, browser type, country of origin, and browser language. This also encompasses other information that gets collected automatically when you use our sites and apps or interact with us through social media.
6. Geolocation data – including approximate location inferred from your IP address and, where collected in connection with the Services you use, precise location sourced from your device.
7. Professional or employment-related data — including any documentation you may provide in connection with your verification as a member of a certain group (e.g., military and/or veterans, first responders, etc.)
8. Inferences drawn from any of the above Personal Information — about your preferences, predispositions and behavior as they relate to the ID.me Services, including any analytics regarding the usability and performance of our Services.
9. Non-public education information – including any educational transcripts and school identification cards that you choose to provide us.
10. Sensitive Personal Information — Certain information listed above is treated as sensitive under applicable state law, including Social Security, driver’s license, passport, and state identification numbers; wallet login information together with a password or other access credential; racial or ethnic origin; citizenship or immigration status; biometric information used to identify you; and precise geolocation. The categories considered sensitive vary by state. We obtain consent before processing sensitive Personal Information where required and provide any required notice and opportunity to opt out. We collect, process, or share sensitive data only where necessary to provide or maintain a specific product or Service you request, unless a specific legal exception applies.

2. The Purposes for Our Collection

Identity and/or group verification is the primary purpose of collecting the Personal Information you provide to ID.me. The categories of Personal Information you provide us may be used, individually or collectively, as needed to verify your identity or group eligibility. We also use relevant information to maintain your wallet, provide support, detect and prevent fraud, secure and improve our Services, and comply with our legal obligations.

Additionally, as part of ID.me Shop, we may use your information to send promotional messages and newsletters via email, or otherwise alert you to products or Services we think might be of interest to you. You may unsubscribe from receiving marketing communications from us at any time by logging in to your wallet and navigating to "My Preferences" to manage your subscriptions. Please note, if you are using ID.me Services in connection with legal identity verification for a state or federal government agency, or in association with Electronic Prescriptions for Controlled Substance Services, we will not use any Personal Information provided as part of your verification for any type of marketing or promotional purposes related to ID.me Shop without your consent.

Additional Protections for Younger Users — Where our Services are available to individuals under 18, we apply the additional protections required by state law. We obtain consent from the individual or a parent or guardian where required before processing Personal Information for purposes that require that consent. We do not sell or share Personal Information of individuals we know are under 18 for targeted advertising or cross-context behavioral advertising, or use their Personal Information for targeted advertising. Accepting our Terms of Service or this notice is not a substitute for any separate consent required by law.

3. Who We Share Your Personal Information With and Why

ID.me does not sell, rent, or trade your Personal Information. ID.me will only transfer your Personal Information with your consent, for use by third parties to verify your identity or group eligibility, or as required for the prevention of fraud or as otherwise permitted by law. We also disclose information to providers that help us operate our Services, to sources that help us validate information, and where necessary and permitted by law to prevent fraud or comply with legal obligations. Additional details about how we may use the Personal Information we collect can be found the “Who We Share Your Information With and Why” section of our Privacy Policy.

We may use Personal Information to perform reporting with our public sector third party partners.

In order to better serve our users and facilitate the identity verification process, ID.me may share a limited set of Personal Information with the state or federal government agency for which you are verifying your identity. This may include identifiers, contact information, and information about your progress through verification, for agency outreach, reporting, or related administrative functions. We explain the information to be shared and the purpose of the reporting and obtain your consent where required by applicable law.

The categories of information disclosed depend on the purpose and recipient. Partners you authorize may receive identifiers, verification results, and the demographic, professional, educational, or other information you choose to share. Providers supporting our Services may receive the categories listed in Section 1 as needed for hosting, security, customer support, communications, analytics, and verification. Verification sources may receive identifiers and relevant supporting information to validate your information. Government agencies, law enforcement, and professional advisers may receive relevant categories where a disclosure is required or specifically permitted by law. Biometric information is disclosed only as described in our Biometric Information Privacy Policy and subject to applicable consent and disclosure restrictions.

California Sale and Sharing — ID.me does not sell Personal Information or share it for cross-context behavioral advertising, and has not done so during the past 12 months. “Sharing” in this context means making Personal Information available for advertising based on your activity across different businesses, websites, or services; it does not mean every disclosure described in this notice. We do not use or disclose sensitive Personal Information for purposes other than providing reasonably expected Services, protecting security, preventing fraud, and other purposes permitted without offering a right to limit under California law.

4. Your Privacy Rights

• Right to Know — Depending on applicable law, you have the right to request that ID.me confirm whether we process your Personal Information and disclose information about how we have handled it, including the:
  • categories of Personal Information collected
  • categories of sources of Personal Information
  • business and/or commercial purposes for collecting, using, or disclosing your Personal Information
  • categories of third parties to whom we have disclosed your Personal Information
  • categories of Personal Information that we have disclosed to a third party for a business purpose; and
  • categories of Personal Information sold or shared for cross-context behavioral advertising, and the categories of recipients, if applicable.
• Right to Access — You have the right to request access to your Personal Information and, where applicable, a copy in a portable and readily usable format. We will provide information for the period required by applicable law. For your protection, we may describe rather than disclose certain sensitive information, such as complete government identification numbers, account passwords, or biometric data, where required or permitted by law.
• Right to Deletion — You have the right to request that ID.me delete Personal Information we have collected from or about you, subject to applicable law. You may also close your ID.me wallet. If we retain information under an exception, such as to meet a legal obligation or prevent fraud, we will explain our decision and limit the retained information to the permitted purpose.
• Right to Correction — Where provided by applicable law, you have the right to request that we correct inaccurate Personal Information, taking into account the nature of the information and the purpose for which we use it.
• Right to Opt Out — ID.me requires your consent to share your Personal Information and does not sell your Personal Information. ID.me does not use your Personal Information for cross-context behavioral advertising. In order to opt-out from any continued sharing of your Personal Information you must log in to your ID.me wallet and revoke access to a an application with each specific partner, or close your ID.me wallet.
• Rights Regarding Sensitive Information — Where applicable, you may withdraw consent to processing sensitive Personal Information, opt out of such processing, or limit its use or disclosure. California residents have a right to limit uses and disclosures that go beyond the purposes permitted by California law. You may submit a request through the methods in Section 5. We stop processing based on withdrawn consent within the period required by applicable law, including within 15 days where required.
• Right to Appeal — Where provided by applicable law, you may appeal our decision on your privacy request using the process in Section 5.

5. Exercising Your Privacy Rights

Submitting Your Privacy Rights Request
You may exercise your privacy rights by submitting a request using one of the following methods: (a) through your ID.me member wallet; (b) through the “ID.me Privacy Center”; or (c) by emailing privacy@id.me. You may also contact the ID.me Member Support team for help submitting a request. Please note, if you do not have an ID.me wallet, ID.me has not collected your Personal Information, therefore in order to submit a verified request you must have created an ID.me wallet. Please tell us the right you wish to exercise and provide the information reasonably needed to locate your records. Do not send your Social Security number, password, or copies of identification documents by email.

Verifying Your Identity
We require you to verify your identity to respond to requests to know, access, correct, or delete Personal Information. If you have a password-protected wallet, we may use our existing authentication practices. If you cannot log in or do not have a wallet, we may ask you to confirm information we already hold. We use information provided for verification only to handle your request, protect against fraud, and meet applicable legal requirements. We do not require verification of your identity for requests to opt out of sale, sharing, or targeted advertising, or to limit use of sensitive Personal Information, except as permitted by law.

Timing for Our Response
We will acknowledge requests to know, access, correct, or delete Personal Information within 10 business days. If you do not receive an acknowledgment, please email privacy@id.me so we can help.

We will respond to your request within 45 calendar days after receipt. Where permitted by applicable law, we may extend this period by up to an additional 45 calendar days and will explain the reason before the initial period expires. Requests are generally free of charge; we will explain any fee or refusal permitted by law before charging a fee.

6. Notice of Financial Incentives

Our partners may offer you certain financial incentives permitted under applicable regulations that can result in different prices, rates, or quality levels. Any permitted financial incentive offered to you by our partners will reasonably relate to your Personal Information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent directly with our partners, which you may revoke at any time.

7. Non-Discrimination

We will not discriminate against you because you exercised any of your rights under applicable data privacy laws including: (1) denying goods or services; (2) charging different prices or rates for goods or services through discounts, benefits, or imposing penalties; (3) providing different level of quality of goods or services; or (4) suggesting that you will receive a different price, rate, quality, or level of goods or services.

Please note that if you do exercise your data privacy rights, you may not be eligible to receive discounts, cash back rebates and other benefits from merchants and other service providers since they will not be able to verify your identity and/or eligibility.

8. Contact Us

Whether you’re a new or loyal customer, marketer, publisher, media member or job seeker we’d like to stay connected and want to hear from you!

Corporate Address.
ID.me, Inc. 8280 Greensboro Drive, Suite 800 McLean, VA 22102

For Users and Customers.
Member Service Inquiries may be directed to our support team.

For Legal Notices.
Legal notices may be directed to legal@id.me.

Copyright © 2026 IDMe, Inc. All rights reserved.