Property Shield Logo
Legal

Identity Verification Privacy Policy

Last updated: October 14, 2026

This Identity Verification Privacy Policy (this “IDV Policy”) is published by Prop Shield, Inc., a Delaware (US) for-profit business corporation doing business as Property Shield, together with its affiliates and subsidiaries (“Property Shield,” “we,” “us,” or “our”). It supplements our Privacy Policy (available at propertyshield.co/privacy-policy) and applies to every individual who is asked to confirm their identity through our Ownership Verification service (each a “Verified Individual” or “you”). It explains exactly what information is collected during verification (“Verification Data”), who collects it, why, how it is protected, how long it is kept, when and how it is permanently destroyed, and the rights and choices you have.

This IDV Policy also serves as our publicly available written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information, as required by the Illinois Biometric Information Privacy Act, 740 ILCS 14/15(a), and as our notice under the Texas Capture or Use of Biometric Identifier Act, the Washington biometric identifiers law (RCW ch. 19.375), the biometric data provisions of the Colorado Privacy Act, and similar laws.

If anything in this IDV Policy conflicts with our Privacy Policy or Terms of Service on the subject of identity verification data, this IDV Policy controls.

Your participation in Ownership Verification is also governed by our Terms of Service (available at propertyshield.co/terms), including Sections 13 and 20 thereof. Section 20 contains a binding individual arbitration provision and a class action and jury trial waiver. Capitalized terms used but not defined in this IDV Policy have the meanings given to them in the Terms of Service.

1.Who We Are and Our Role

Property Shield provides fraud-prevention services to multiple listing services, REALTOR® associations, brokerages, property owners and operators, and other organizations (our “Clients”). Ownership Verification is a feature of those services. A Client or one of its Authorized Users (for example, a listing agent) initiates a verification by entering your name, email address, phone number, and the address of the relevant property. We then send you an invitation to verify by email and, if a mobile number was provided, by text message. These are transactional messages sent at the Client’s request, not marketing, and you may stop text messages at any time by replying STOP.

Property Shield determines what information is collected in the verification flow, for what purposes, on what retention schedule, and with what safeguards. For those reasons, Property Shield is responsible to you for the verification flow and is a “business,” “controller,” or “private entity” (as those terms are used in applicable privacy and biometric laws) with respect to your Verification Data, jointly with the requesting Client where applicable law so provides. The Client that requested your verification is also responsible for its decision to request verification and for its use of the result. Our identity verification service provider, Deep Identity Inc. (“deepidv”), processes your data solely on our documented instructions as our “service provider” or “processor” under a written agreement. Property Shield may collect your biometric identifiers, biometric information, and identity document data through deepidv, and Property Shield is responsible for providing the notices and obtaining the consents described in Section 4 before any of that information is collected.

2.Information Collected During Verification

2.1Identity Document Data

You will be asked to photograph a government-issued identity document, such as a driver’s license, state identification card, passport, passport card, or permanent resident card. The following data may then extracted and analyzed: your full legal name, date of birth, sex, address, document type, number, issuing authority, and issue and expiration dates, the document photograph, and machine-readable zone or barcode data. The document’s security features (such as holograms, microprinting, and ultraviolet features) are analyzed to detect forgeries, alterations, and tampering.

2.2Biometric Identifiers and Biometric Information

You will be asked to capture a live photograph of your face or short video. On our behalf, deepidv derives measurements of facial geometry (a “biometric identifier”) from photographs of faces and documents and compares them to determine whether the two faces match. The liveness capture is analyzed to confirm that a physically present, live person, rather than a photograph, screen, mask, or synthetic (‘deepfake’) video, is completing the verification. Facial geometry is a biometric identifier, and the match and liveness scores derived from it are “biometric information”, to the extent set forth under applicable law. We apply the same protections to the underlying images and liveness recording.

Biometric data is used solely to confirm that the person completing the verification is the person shown on the identity document. It is not used to identify you in any other database, to track you across sessions or services, or for any purpose unrelated to the specific verification you are completing.

2.3Device and Session Data

To detect attempts to defeat verification, deepidv collects, on our behalf, information about the device and session used to complete the verification. deepidv processes this information as our service provider, on our instructions, however, you are still subject to deepidv’s terms of service and privacy policy, as applicable.

2.4Verification Result

At the end of the process, deepidv returns to Property Shield a verification result consisting of: the document authenticity outcome, the face-match outcome and confidence indicator, the liveness outcome and confidence indicator, deepfake and presentation-attack indicators, the name and, where necessary to compare against property records, the address extracted from the document, and session risk flags. Property Shield then compares the name against property ownership records for the specified address, obtained from licensed property-data providers and public records, and produces an ownership-match indicator. Together, these make up the “Verification Result.”

2.5Information Collected Through deepidv

Your identity document images, your photographs or videos of your face, your facial geometry and any biometric template, your document number, and your date of birth are collected by Property Shield through deepidv, which processes them on our behalf and only on our instructions. Property Shield receives information from deepidv, including the Verification Result described in Section 2.4, and may receive other Verification Data from deepidv to the extent necessary for the purposes in Section 3.

3.Purposes of Collection and Use

We collect and use Verification Data only for the following purposes:

(i)

Identity confirmation. To confirm that the person completing verification is the person shown on a genuine, unexpired government-issued identity document.

(ii)

Ownership comparison. To compare the verified name against the record owner of the specified property so that the requesting Client can assess whether it is dealing with the true owner.

(iii)

Fraud prevention. To detect impersonation, forged or altered documents, synthetic identities, deepfakes, and presentation attacks in connection with the specific verification, and to detect attempts to defeat the verification process.

(iv)

Delivering the result. To provide the Verification Result to the Client and Authorized User who requested it.

(v)

Security, integrity, and audit. To maintain records demonstrating that verification was performed, that consent was obtained, and that the process operated correctly, and to investigate security incidents.

(vi)

Legal compliance. To comply with applicable law and respond to lawful requests, and to establish, exercise, or defend legal claims.

We do not use Verification Data in identifiable form, and we do not permit deepidv to use it, to train artificial-intelligence or machine-learning models, to build profiles of you, to market to you, or for any purpose not listed above. Aggregated statistics that cannot identify any individual (for example, the percentage of verifications in a given month that detected a forged document) may be used to measure and improve the service.

4.Consent Before Collection

4.1Written release

You will be asked to give your express written consent and release by taking a clear affirmative action, such as checking an unticked box and pressing a button labeled “I consent,” that is separate from acceptance of any other terms. The consent text you will see appears in Appendix A. We record the date, time, and version of the consent you give.

4.2Voluntary; alternatives

Verification is voluntary. If you prefer not to provide biometric data, you may decline, and the requesting Client may verify your identity by other means or decide how to proceed. Property Shield does not make that decision. Declining verification has no effect on any rights you have with Property Shield.

4.3Withdrawal

You may stop the process at any time before you submit your images. If you stop before submission, no biometric data is created. After submission, you may withdraw consent to further processing and request deletion as described in Section 8, subject to the retention required to document the verification that has already occurred.

4.4Legal bases

Where applicable law requires a legal basis for processing, we rely on your explicit consent for the collection and processing of biometric data and identity document data; on the legitimate interests of Property Shield, our Clients, and property owners in preventing real estate fraud for the processing of device and session data and the generation of the Verification Result; on the performance of our contract with the requesting Client; and on compliance with legal obligations for record-keeping and responding to lawful requests.

5.Disclosure of Verification Data

5.1No sale, lease, trade, or profit

Property Shield does not, and will never, sell, lease, trade, or otherwise profit from your biometric identifiers, biometric information, or identity document data. We do not “share” it for cross-context behavioral advertising. We are compensated by our Clients for providing a fraud-prevention service, not for your data.

5.2To deepidv

Your identity document images, photograph of your face, and liveness capture, and device and session data are collected on our behalf and processed by deepidv, our verification service provider, under a written agreement that requires deepidv to process the data only on our instructions and only for the purposes in Section 3.

5.3To the requesting Client only

The Verification Result is disclosed only to the Client and the Authorized User who initiated your verification. It is presented as a fraud-risk signal for the Client’s own evaluation. It is never disclosed to any other Client and never used to make automated decisions about you.

5.4To property-data providers

To perform the ownership comparison, we send the property address to our licensed property-data provider and receive ownership records for that address. We do not send your identity document data or biometric data to property-data providers.

5.5Legal disclosures

We may disclose Verification Data, including information held on our behalf by deepidv, when required by a valid subpoena, warrant, or court order or as otherwise required by applicable law, or with your consent. Where legally required, we will notify you of such a disclosure.

5.6Corporate transactions

If Property Shield is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, Verification Data may be transferred to the successor or acquirer, which will remain bound by this IDV Policy or a policy that is at least as protective, and you will be notified as required by law.

We will not disclose your biometric identifiers or biometric information to anyone other than as described in this Section 5 without first obtaining your consent.

6.Retention and Destruction

Where a legal hold, litigation, or governmental investigation requires us to preserve specific records, we will suspend destruction of those records only to the extent and for the time required, isolate them from ordinary processing, and destroy them when the hold is lifted. Biometric identifiers and biometric information collected on our behalf are retained by deepidv only on our instructions and are destroyed within the periods described in Appendix A.

7.How Verification Data Is Protected

Property Shield and deepidv protect Verification Data using a standard of care at least as protective as that used for the most confidential and sensitive information in our respective industries, and at minimum in the manner required by applicable law. Safeguards include:

(a)

Encryption. All Verification Data is encrypted in transit and at rest. Biometric data receives additional protection through a multi-party key-management scheme under which no single party, including deepidv, can decrypt biometric data acting alone. Encryption keys are managed in hardware security modules and rotated regularly.

(b)

Access controls. Access to Verification Data is restricted to personnel with a need to know, protected by multi-factor authentication and role-based, least-privilege permissions, and logged. Property Shield personnel have no access to biometric data or document images.

(c)

Isolation. Verification Results are logically separated by Client within Property Shield’s systems.

(d)

Fraud-resistant flow. The verification flow is delivered over authenticated, single-use links that are tied to the specific request and expire after a limited time, and the flow includes controls to detect injected or replayed media.

(e)

Security program. Property Shield maintains vulnerability management, secure development practices, logging and monitoring, incident response planning, and personnel training.

(f)

Breach notification. If a security incident affects your Verification Data, we will notify you and any required regulators as required by applicable law.

8.Your Rights and How to Exercise Them

Subject to applicable law, you may have the following rights with respect to your Verification Data:

(a)

Access. To confirm whether we hold Verification Data about you and to receive a copy of the Verification Result and the consent record, together with information about the categories of data processed, the purposes, and the recipients.

(b)

Correction. To request correction of inaccurate information in the Verification Result, including where the ownership-match indicator did not reflect the current property records (for example, because the property is held in a trust or business entity or a recent transfer had not yet been recorded).

(c)

Deletion. To request deletion of your Verification Data. Property Shield will delete the Verification Result. We may retain the consent record and the fact that a deletion request was made, and we may retain information necessary to comply with law, to complete a pending dispute, or to detect and prevent fraud where the session was flagged as fraudulent, in each case limited to what the applicable law permits.

(d)

Withdraw consent. To withdraw your consent to further processing of your personal data at any time.

(e)

Human review. To request that a Property Shield team member review the Verification Result with you and explain what it does and does not indicate.

(f)

Appeal and complaint. To appeal our response to any request, you may appeal by emailing privacy@propertyshield.co with the subject line “Privacy Appeal”, or you may lodge a complaint with your state Attorney General or, where applicable, your data protection authority.

To exercise any of these rights, email verify@propertyshield.co with the subject line “Verification Data Request,” use the form at propertyshield.co/privacy-request, or write to Prop Shield, Inc., Attn: Privacy, 815 E. Worthington Avenue, Charlotte, NC 28203. We will verify your request by confirming certain information, and may ask for additional information reasonably necessary to confirm your identity. We will never ask you to submit identity document images or a selfie to verify a rights request. You may have the right to designate an authorized agent to submit a request on your behalf, however, we may require proof of the agent’s authority and may verify your identity directly.

9.Children

Ownership Verification is available only to individuals eighteen (18) years of age or older. If a verification session indicates that the individual is under eighteen (18), the session is terminated and all data collected is promptly destroyed.

10.Changes to This IDV Policy

We may update this IDV Policy from time to time. When we do, we will revise the “Last Updated” date above. The version of the notice and consent presented to you at the time of your verification is recorded and will be provided to you on request.

11.Contact Us

Prop Shield, Inc. (d/b/a Property Shield)Attn: Privacy — Identity Verification815 E. Worthington AvenueCharlotte, North Carolina 28203United StatesVerification data requests: verify@propertyshield.co (subject line “Verification Data Request”)General privacy inquiries: privacy@propertyshield.coLegal notices: legal@propertyshield.coSecurity: security@propertyshield.co

APPENDIX A

Biometric Notice and Consent Presented Before Capture

The following text is displayed to each Verified Individual, in full, without requiring the individual to scroll to reach the consent controls, immediately before the identity document and selfie are captured. Consent is recorded only upon the Verified Individual checking the unticked box and selecting “I consent.” The “Decline” option is displayed with equal prominence.

Verify your identity with Property Shield

[Client / Agent Name] has asked Property Shield to confirm that you are who you say you are and that your name matches the ownership records for [Property Address]. This helps protect you and your property from listing fraud.

What we will collect. A photo of your government-issued ID and a live selfie. From these, our identity verification service provider will, on behalf of Property Shield, measure the geometry of your face to compare your selfie to your ID photo (this is a biometric identifier), check that your ID is genuine, and confirm a live person is present.

Why. Solely to confirm your identity for this request and to detect fraud in this verification. Your biometric data will not be used to identify you anywhere else, to track you, or for marketing.

How long. Your facial geometry, selfie, and liveness data are permanently destroyed within 24 hours. Your ID images are destroyed within 90 days. Property Shield collects your ID images, photographs of your face, facial geometry, and ID number through our identity verification service provider, which processes them on our behalf. We keep the result (pass/fail and risk flags) and a record of your consent for up to 3 years and, if fraud is detected, a limited fraud record (with no biometric data or ID images) for up to 7 years.

Who sees it. Only [Client / Agent Name]. Your result is never sold, never shared with anyone else except as required by law, and never added to any shared database.

Your choice. Verification is voluntary. You may decline, and [Client / Agent Name] may verify you another way. You can stop at any time before submitting. You may withdraw consent or request deletion at any time at verify@propertyshield.co.

Full details: [Identity Verification Privacy Policy] · [Privacy Policy] · [Terms of Service]

☐ I have read and agree to the Property Shield Terms of Service.

☐ I have read and agree to the Property Shield Privacy Policy.

☐ I have read the notice above and the Identity Verification Privacy Policy. I consent to, and provide my written release for, the collection, use, and storage by Property Shield and its identity verification service provider of my biometric identifiers and biometric information, and of images and data from my government-issued identity document, for the purposes and retention periods allowed by law. I confirm I am at least 18 years old and that the identity document and images I submit are my own.

[ I consent ] [ Decline ]