Data Protection Policy (KYC)

Legal basis and purpose

Processing relies on your explicit, timestamped consent, collected before any verification. Its sole purpose is fraud prevention and securing the provider/client match — never marketing or commercial profiling.

What data, and who can access it

ID document, live selfie, facial comparison score, and liveness detection result.

ID and selfie images are encrypted (AES-256-GCM) and are never exposed by the API, even to an admin account. Only the status, similarity score, and liveness result (never the image) are viewable.

Retention periods

Rejected verification: documents kept for 90 days, then automatically purged.

Expired verification: documents kept for 180 days after expiry, then purged.

Verified status: valid for 18 months, then automatically moves to expired status and follows the purge delay above.

Purging only erases the images — status, scores and history are kept for anti-fraud traceability, as required by applicable regulation; no raw biometric data is retained beyond the delays above.

Background check (sensitive categories)

For jobs involving unsupervised home access or transportation of persons, an additional background check is required, valid for 12 months. Where no national registry is connected to TalentCore, verification remains declarative (self-attestation) and undergoes human review — this is explicitly indicated on the relevant profile.

Your rights

You can request erasure of your KYC data — purging is immediate, unless a legal retention obligation is in effect (active dispute, open fraud investigation), in which case it is deferred until that obligation lifts.