Photo Consent Disclosure

Version 1.0.0 · Effective May 7, 2026 · Last revised May 7, 2026

ATAC Global CX offers an optional photo verification feature on assessments. This disclosure explains, in plain language, exactly what photos are captured, where they are stored, who can access them, and how to request deletion. Please read this before selecting a photo verification tier.

1. What Is Captured

What we collect depends on the tier you choose at the start of your assessment:

The headshot is a profile photo you upload before starting your assessment. The selfie is a single still image captured by your device camera at the moment your assessment begins. We do not capture facial recognition data, biometric templates, or running camera feeds beyond the moment of selfie capture.

2. Where It Is Stored

Headshots and selfies are stored separately, on different infrastructure, by design:

• Headshots are pinned to IPFS via Pinata. IPFS is a public content-addressable network, so the headshot is intentionally publicly retrievable, since it appears on your verify page and printed certificate.
• Selfies are stored only in our private database, never on a public network or third-party storage service.

3. Who Can Access It

• Headshots are publicly accessible by design, since they appear on your public verify page and printed certificate.
• Selfies are accessible only to ATAC Global CX administrators, and to employers on a per-request basis when verifying a credential. The selfie is never publicly accessible.

4. Retention

Photos are retained for the lifetime of your credential.

If your credential is revoked, the headshot's IPFS pin remains (we cannot remove it from the broader IPFS network) and the selfie remains in our database for fraud-investigation audit purposes.

5. Deletion Path

To request deletion of your photos, contact support@atacglobalcx.com. We will:

• Delete the selfie from our database within 30 days
• Best-effort unpin the headshot from our Pinata account

6. Consent Scope

This consent applies only when you select a Headshot or Verified Identity tier. The No Photo tier requires no photo consent and remains available regardless.

You may change tiers on a future assessment attempt. Changing tiers does NOT delete previously-stored photos. To delete prior photos, you must use the deletion path above.

7. Data Minimization

We capture only what is necessary to support the selected tier:

• The No Photo tier requires no photos
• The Headshot tier requires only the headshot you upload
• The Verified Identity tier requires the headshot plus a single selfie at assessment start

We do not capture facial recognition data, biometric templates, running camera feeds, mid-assessment photos, or any continuous video.

8. Your Consent

By selecting a Headshot or Verified Identity tier and confirming the consent dialog inside the assessment platform, you acknowledge that you have read this disclosure and consent to:

• The collection and storage of your photos as described in Sections 1, 2, and 3
• The retention of your photos for the lifetime of your credential as described in Section 4
• The deletion process and limitations described in Section 5

You may withdraw consent for future assessments at any time by switching to the No Photo tier on a future attempt. Previously-collected photos remain subject to the deletion path in Section 5.

9. Questions

If you have questions about photo collection, storage, or deletion, please contact us before selecting a tier: