Biometric Identity Verification Consent

Version 1.0.0 · Effective June 11, 2026

1. What We Collect and Process

When you use ATAC's identity-verified certification, we collect: (a) a headshot photograph you upload, and (b) selfie photographs captured by your device camera at the start of your written assessment and at the start of your voice simulator. We process these images to generate and compare facial-geometry measurements ("biometric identifiers") for the sole purpose of confirming that the same individual completes each stage of certification.

2. Purpose — and Only This Purpose

The only purpose is identity verification and fraud prevention: confirming you are the same person from signup through the assessment, the simulator, and credential issuance. We do not use your biometric information for marketing, advertising, profiling, surveillance, training artificial-intelligence systems, or any purpose other than verifying your identity for certification.

3. How the Comparison Works

Facial comparison is performed using Amazon Web Services (AWS) Rekognition's CompareFaces function, within AWS's Canadian region (ca-central-1). This is a stateless comparison: AWS returns only a numerical similarity score and does not retain a facial template or your images. We store the resulting similarity scores and the captured images as described in Section 4.

4. What We Store, and Where

Your uploaded headshot is stored and appears on your public credential. Your selfie images are stored privately, are never published, and are never shown to employers or other third parties except on a per-credential-verification request as part of an employer's fraud-prevention review. We store the numerical similarity scores of each comparison. We do not create or retain a persistent biometric template or "faceprint."

5. Retention and Destruction

We retain your selfie images and comparison scores for the lifetime of your credential, and in no case longer than three (3) years after your last interaction with ATAC, whichever occurs first, after which the selfie images are permanently deleted. Your headshot is retained for the life of the credential as part of the credential record. We will also delete your selfie images and comparison scores upon your withdrawal of this consent or upon request.

6. Third Parties

We share your images only with AWS, solely to perform the comparison described above, under AWS's data-processing terms. We do not sell, lease, trade, or otherwise profit from your biometric information, and we do not disclose it to any other party except as required by law.

7. Your Rights

You may request access to, correction of, or deletion of your biometric information at any time by contacting privacy@atacglobalcx.com. You may withdraw this consent at any time; withdrawal stops any future biometric processing but does not affect a credential already issued. Depending on where you live, you may have additional rights under PIPEDA (Canada), the GDPR (EU/UK), BIPA (Illinois), or other applicable laws.

8. Voluntary

Providing this consent is voluntary. It is required only to earn an identity-verified ATAC credential. If you decline, you may still use ATAC's non-verified certification options (the No Photo or Headshot tiers), but you cannot complete identity-verified certification.

9. Consent

By accepting this disclosure, you acknowledge that you have read this notice and understand that ATAC Anagenesis Inc. ("ATAC"), and its processor AWS, will collect, store, and compare your facial-geometry biometric identifiers for the purpose and term stated above, and you voluntarily consent in writing to that collection, storage, and processing.