Privacy Policy
What This Policy Covers
This Privacy Policy explains how WelcomeVerify™ LLC ("WelcomeVerify," "we," "us," or "our") collects, uses, shares, and protects your information when you use the WelcomeVerify™ mobile application and our website at welcomeverify.com. It should be read together with our Terms of Use, which is incorporated by reference.
Information We Collect
To confirm that the person checking in matches the reservation, the app collects:
- Contact details: your name and phone number, and, for hosts, your email address
- Government-issued ID: the images and data from the ID you scan. These are collected and processed by Persona; WelcomeVerify does not receive or store the raw ID images
- Live Selfie, liveness & biometric information: a live selfie, liveness information, and the facial-geometry data used to confirm the ID belongs to you. These are collected and processed by Persona; WelcomeVerify does not receive or store the raw selfie images, facial-geometry data, or biometric templates
- Precise location: a one-time GPS check confirming you are at the property; we do not continuously track your location
- Check-in records: your digital signature and completed check-in form
- Device & purchase data: a push-notification token (delivered via Apple Push Notification service on iPhone and Google Firebase Cloud Messaging on Android) and, for hosts, subscription and purchase history through Apple In-App Purchase or Google Play Billing
Some guests complete check-in in a web browser instead of the app, using a secure link sent by their host. That browser-based check-in collects the same information listed above — your name, email address, government-issued ID and Live Selfie (processed by Persona), a one-time location check, and your signature. It works exactly like the app, and the same retention and deletion rules apply.
On the rest of our website we only receive information you choose to send us (for example, if you email us). We use no tracking cookies, advertising cookies, or analytics anywhere on the site.
How We Use Your Information
We use the information above only to:
- Verify your identity and confirm you are at the property before access is granted
- Deliver the verification result and your signed check-in form to your host
- Send SMS one-time codes and host notifications
- Manage host accounts and subscriptions
- Maintain security and comply with applicable law
We never use your information for advertising, and we never sell it.
Third-Party Service Providers
We share information only with the trusted providers that help deliver the service, and only to the extent needed to perform their function:
- Persona Identities, Inc. (“Persona”): WelcomeVerify's third-party identity-verification provider. Persona collects and processes the government-issued ID images, live selfie images, liveness information, and facial-geometry/biometric information on WelcomeVerify's behalf. WelcomeVerify receives the verification result and related transaction/check-in information
- Twilio: SMS one-time passcodes
- Resend: host email notifications
- Google: delivery of push notifications to Android devices via Firebase Cloud Messaging, and, for hosts on Android, in-app purchases through Google Play Billing. Google receives only the device token needed to deliver a notification — never your ID, selfie, or biometric data.
- Cloudflare: secure infrastructure and data storage in the United States
- Apple: in-app purchases; payment is handled entirely by Apple and we never receive your card details
What Your Host Receives
Your host receives only the verification result (passed, needs review, or failed) and your signed check-in form. Hosts never receive your government-issued ID images, selfie images, facial-geometry data, or biometric templates.
Data Retention
Guest check-in records. Your check-in record in WelcomeVerify — including your name, contact details, signature, location check, and the generated check-in form — is retained for up to 48 hours after check-in and is then automatically and permanently deleted from WelcomeVerify systems.
Host Check-in Forms. Completed Host Check-in Forms are retained by WelcomeVerify for up to 48 hours after check-in. If the host does not elect to save the form for future use during that period, the form is automatically deleted from WelcomeVerify systems. If the host chooses to save the form, the form remains available within the host's account until the host deletes it or another applicable retention requirement applies.
Hosts are responsible for appropriately protecting and managing any forms they elect to save, and for retaining them only for a legitimate, lawful purpose.
Biometric information. WelcomeVerify does not retain the raw biometric information processed by Persona. Persona may retain biometric information for up to 90 days, subject to applicable law, contractual requirements, and any shorter legally required retention period, after which it is deleted in accordance with the applicable retention policy. See Biometric Information below.
Your host also keeps the signed check-in sheet emailed to them as their own record, outside WelcomeVerify systems.
You may request earlier deletion at any time by contacting us at the address below.
Biometric Information
What is processed. To confirm that the person checking in is the person shown on the government-issued ID, the verification includes government-issued ID images, a live selfie, liveness information, and the facial-geometry data derived from it. This is biometric information.
Who processes it. WelcomeVerify uses Persona Identities, Inc. (“Persona”) as its third-party identity-verification provider. Persona collects and processes the government-issued ID images, live selfie images, liveness information, and facial-geometry/biometric information used for identity verification on WelcomeVerify's behalf.
WelcomeVerify does not receive or store the raw government-issued ID images, selfie images, facial-geometry data, or biometric templates. WelcomeVerify receives the verification result and the related transaction and check-in information necessary to operate the service.
Why it is used. Biometric information is used for identity verification, fraud prevention, secure guest check-in, and property-access security.
No sale, no advertising. WelcomeVerify does not sell, lease, trade, license, or otherwise profit from biometric identifiers or biometric information. WelcomeVerify does not use biometric information for advertising or for unrelated marketing or profiling.
Consent. Biometric verification requires your affirmative consent before the biometric verification process begins. The biometric consent notice identifies, as applicable: that biometric information will be collected and processed; the purpose of the collection and processing; Persona as the identity-verification provider; the applicable retention period; and your consent to the biometric verification process. You may decline, though verification cannot be completed without it.
Where applicable law requires a separate biometric consent, WelcomeVerify does not rely solely on your acceptance of the general Terms of Use as that consent.
Retention. WelcomeVerify does not retain the raw biometric information processed by Persona. Persona may retain biometric information for up to 90 days, subject to applicable law, contractual requirements, and any shorter legally required retention period, after which the information is deleted in accordance with the applicable retention policy.
State Privacy Rights & Biometric Notices
Residents of certain U.S. states have additional rights regarding biometric and other sensitive personal information. Where required by applicable law, WelcomeVerify provides the notices that law requires and obtains consent before biometric information is processed.
Depending on your state of residence, you may have the right to know what personal information is collected, request access or deletion, correct inaccurate information, and withdraw consent. To exercise any of these rights, contact us using the details below. We honor verified requests regardless of the state you live in.
Illinois — Biometric Information Privacy Act (BIPA). To the extent BIPA applies to a WelcomeVerify transaction:
- notice is provided before covered biometric information is collected or processed;
- the individual is informed that biometric information is being collected or stored;
- the specific purpose and the applicable retention period are disclosed;
- the written release or electronic consent required by law is obtained;
- biometric identifiers and biometric information are not sold, leased, traded, or otherwise used for profit; and
- covered biometric information is retained and destroyed in accordance with the applicable publicly available retention and destruction policy and applicable law.
Texas — Business & Commerce Code Chapter 503. To the extent Chapter 503 applies:
- informed consent is obtained before a covered biometric identifier is captured for a commercial purpose;
- the biometric identifier is used for the disclosed identity-verification and security purpose;
- WelcomeVerify does not sell, lease, or otherwise improperly disclose biometric identifiers; and
- covered biometric identifiers are destroyed within the timeframe required by Texas law after the purpose for collection has been satisfied.
Washington. To the extent Washington biometric privacy law applies to a WelcomeVerify transaction, WelcomeVerify provides the required notice, obtains the required consent before a covered biometric identifier is enrolled for a commercial purpose, does not sell, lease, or otherwise disclose covered biometric identifiers except as permitted by that law, applies security measures appropriate to the information, uses covered biometric identifiers only for the identity-verification and security purposes described in this Policy, and retains them no longer than reasonably necessary for those purposes. Washington law contains its own definitions, exclusions, and provisions concerning security-related uses, and not every WelcomeVerify facial-verification transaction necessarily falls within every provision of that statute.
Colorado — Colorado Privacy Act. To the extent the Colorado Privacy Act's biometric-data provisions apply, WelcomeVerify provides the required disclosures, obtains consent before processing covered biometric identifiers, maintains or requires appropriate biometric retention and deletion practices, maintains appropriate security and incident-response practices, and honors applicable consumer rights relating to covered biometric information.
Other states. Illinois, Texas, Washington, and Colorado are not the only U.S. states whose privacy laws may apply. Residents of other states may have additional rights concerning biometric information, sensitive personal information, access, correction, deletion, or withdrawal of consent. WelcomeVerify will honor those rights where they apply.
Data Security
Data is stored on infrastructure provided by Cloudflare, Inc. and is encrypted in transit and at rest. We use security practices we consider appropriate to the sensitivity of the information we handle, and we limit access to it to what is needed to operate the service.
No method of transmission over the internet or of electronic storage is completely secure, however, and we cannot guarantee that unauthorized access, disclosure, alteration, or loss will never occur. If we become aware of a security incident affecting your information, we will notify you and any regulator as required by the law that applies to you.
Your government-issued ID images and facial biometric data are captured and processed by Persona Identities, Inc. and are protected under Persona's own security programme and privacy policy. WelcomeVerify™ does not receive or store those images.
We Do Not Sell Your Data
WelcomeVerify™ LLC does not sell, rent, lease, or trade your personal or biometric information to any third party, for any purpose, at any time.
AI Chat & Automated Assistance
WelcomeVerify may provide an AI-powered chat or automated assistance feature on the website to help users navigate the site, understand WelcomeVerify features, find general information, and obtain basic support.
Information entered into the AI chat may be processed by WelcomeVerify and its technology service provider(s) for purposes such as generating a response, providing support, maintaining security, troubleshooting, and improving service quality where permitted.
Who processes chat content. Messages you send to the chat are relayed by WelcomeVerify's servers to OpenRouter, Inc., which routes them to the underlying model provider, Anthropic. WelcomeVerify does not store your chat conversations in its own database. WelcomeVerify does not control, and makes no representation about, how those providers handle, retain, or review content under their own terms.
Do not submit sensitive information through the AI chat unless the feature specifically requests it for an authorized purpose. In particular, do not enter government-issued identification numbers, copies of identification documents, Social Security numbers, payment card information, passwords, access codes, biometric information, facial images, or other highly sensitive personal information into the AI chat.
The AI chat is not used to complete identity verification. Government-issued ID images, live selfies, liveness information, and facial-geometry/biometric information used for identity verification are processed through the authorized WelcomeVerify verification flow and Persona — not through the general website AI chat.
Responses generated by the AI chat may be automated and may not always be complete, current, or accurate. AI-generated responses are provided for general informational and support purposes and do not constitute legal, financial, housing, compliance, or other professional advice.
Where applicable, you should verify important information through the relevant WelcomeVerify policy, account feature, support channel, booking platform, or a qualified professional before relying on an AI-generated response.
Cookies & Tracking
The welcomeverify.com website does not use tracking cookies, advertising pixels, or third-party analytics. The app contains no advertising and does not track you across other apps or websites.
Your Choices & Rights
You may request to access, correct, or delete your personal information, or withdraw your consent, by contacting us. You can also decline biometric verification, though verification cannot be completed without it.
Children
WelcomeVerify™ is intended only for individuals 18 years of age or older and is not directed to children.
Contact Us
Questions, requests, or deletion requests? Reach us at:
WelcomeVerify™ LLC
Privacy, data, and support inquiries: support@welcomeverify.com
General inquiries: info@welcomeverify.com