Biometric data retention and destruction
Last updated September 22, 2026
Identity verification on Warmarket is performed by Socure. That provider collects a government-issued ID image and a live selfie and performs a face match. Those materials, and any face template derived from them, are biometric data.
What Warmarket receives
Warmarket does not receive, cache, log, or store the ID image, the selfie, or any face template. We receive a pass or fail result and limited non-biometric fields needed to operate the marketplace: date of birth, city, and state. Warmarket does not sell, lease, or otherwise profit from biometric data.
Retention by the provider
Socure retains verification session data according to its own identity verification data retention policy. Warmarket's use of the service is limited to a one-time identity and age check for the account. When an account is deleted, or when verification is no longer needed to operate that account, Warmarket deletes the pass/fail result and associated non-biometric fields it holds, except where a longer period is required for fraud prevention, dispute resolution, or legal compliance.
Destruction trigger
Warmarket permanently deletes identity verification status and related non-biometric fields from its systems when (a) the account is deleted and no legal hold applies, or (b) the user requests deletion of identity data and no legal hold applies. Because Warmarket never receives biometric images or templates, there is nothing of that kind for Warmarket to destroy. Requests about the provider's copies of ID images, selfies, or templates should be directed to Socure.
Written release
Before verification starts, the user must give a separate written (electronic) release naming the purpose (identity and age verification), the recipient (Socure), and this retention term. That release is not bundled into general Terms of Service acceptance. Warmarket logs the consent text, version, timestamp, IP address, and user agent.