Biometric Data Notice & Consent

Effective: April 5, 2025 | Last revised: September 2, 2026

This is a standalone notice published by Veripod Corp pursuant to the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14/1) and the Texas Capture or Use of Biometric Identifier Act (CUBI). It applies to all drivers who complete identity verification on the Veripod Corp platform.

What Biometric Data We Collect

When you complete driver identity verification on the Veripod Corp platform, Plaid Technologies, Inc. (acting as both a service provider to Veripod Corp and as an independent data controller) collects the following on Veripod Corp's behalf and under Plaid's own Biometric Policy and Release:

▸A photograph of your government-issued driver's license (front and back)
▸A real-time selfie photograph for liveness verification
▸A facial geometry comparison (biometric identifier) generated by comparing your selfie to your ID photograph
▸Your phone number, collected and SMS-verified by Plaid as a standard step in the identity verification flow (separate from any SMS sent by Veripod Corp)
▸Data extracted from your license: name, CDL number, state, date of birth, expiration date, and address

Who Processes It

Plaid Technologies, Inc. processes biometric data as both a service provider to Veripod Corp and as an independent data controller with its own direct privacy relationship with you. This means Plaid collects, stores, and manages certain data under its own policies — not solely at Veripod Corp's direction.

You may view, manage, or request deletion of data Plaid holds directly through Plaid Portal (my.plaid.com) or by submitting a Plaid data subject request.

Plaid's End-User Privacy Policy and Biometric Policy: plaid.com/legal .

Purpose

Driver identity verification required before freight assignment, ensuring compliance with Veripod Corp's platform safety standards and applicable law. Biometric data is used solely for this purpose and is not used for any other commercial purpose.

Retention & Destruction Policy

Data held by Veripod Corp directly:

Biometric identifiers and biometric information that Veripod Corp holds will be retained no longer than:

•The date on which the driver's verification purpose ends (account deletion, or termination of the driver's relationship with the platform), OR
•One (1) year from the end of the driver's active relationship with Veripod Corp

— whichever occurs first.

In no event will Veripod Corp retain biometric identifiers beyond three (3) years from the date of collection, the outer limit set by the Illinois Biometric Information Privacy Act. The one-year schedule above is the commitment Veripod Corp makes to drivers, and is the wording shown on the consent screen in the Veripod Driver app before any biometric data is collected.

Upon reaching the applicable retention limit, Veripod Corp will delete the biometric-related records it directly holds. If Veripod Corp changes this schedule, updated notice will be posted here at least 30 days in advance.

Data held by Plaid Technologies, Inc.:

Because Plaid acts as an independent data controller, the biometric and identity data Plaid holds is governed by Plaid's own Biometric Policy and Release — not by Veripod Corp. Plaid's published policy provides for a maximum retention of three (3) years. You may request deletion of data Plaid holds directly through Plaid's data subject request form.

No Sale of Biometric Data

Veripod Corp does not sell, lease, trade, or profit from biometric identifiers or biometric information. This prohibition applies regardless of the form of consideration and survives termination of your account.

Illinois Residents (BIPA)

This notice satisfies the requirements of the Illinois Biometric Information Privacy Act (740 ILCS 14/1), specifically §15(a) (public policy disclosure) and §15(b) (written release requirement). Your written consent is captured electronically and timestamped when you agree during driver onboarding. You may request a copy of Veripod Corp's full biometric data policy by emailing compliance@veripod.ai.

Texas Residents (CUBI)

This notice satisfies the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code §503.001). Biometric data will not be retained beyond one (1) year from your last active use on the platform, or the three-year maximum above, whichever is earlier.

Your Consent

By checking the biometric consent box during driver onboarding, you authorize Veripod Corp and Plaid Technologies, Inc. to collect, store, use, and process your biometric data as described in this notice. This authorization is required to use the Veripod Corp driver platform and is logged with a timestamp and policy version number.