Face-data processing for your identity check and photo checks

I agree that Nuva processes my face data (biometric data) to verify my identity and to check that the photos I upload show me. Nuva uses ZOLOZ (Ant Group), its identity partner, which processes the data outside Thailand, in Singapore: ZOLOZ scans my ID document, takes a selfie with a live-person check and sends Nuva the results. Nuva keeps the results and the name and date of birth read from my ID — not images of my ID and not my document number, only a coded fingerprint of the number that cannot be turned back into it, used to spot the same document on several accounts. When a check needs a person to look at it, a member of Nuva's identity team may view the images of my ID document and the selfie of that check that ZOLOZ holds, only after a second sign-in step. Nuva does not keep a copy: each view is prepared for that one viewing, marked with the viewer's identity, held encrypted for at most 15 minutes and then destroyed, and every view is recorded. Nuva keeps one encrypted image of my face from the selfie. A member of Nuva's identity team compares each photo I add — and, after a new identity check, the photos I have already uploaded — with that image; they see it only after a second sign-in step, every view is recorded, and it is never shown to producers or the public. If Nuva starts using ZOLOZ's automatic photo comparison, my photos may be compared by ZOLOZ instead. ZOLOZ keeps the data of my check under its own retention rules; Nuva asks ZOLOZ to delete it when Nuva no longer needs it, or earlier if I withdraw or close my account. Nuva may ask me to verify my identity again. I can withdraw this consent in my account; that stops new checks and new licenses, and Nuva asks the producers who hold my photos to delete them.