Identity and Biometric Privacy Notice and Consent
Version 1.0. Effective upon acceptance.
This notice is given by mjonesone, LLC, a California limited liability company doing business as ICONS ("ICONS", "we", "us", "our"). Read it before you start identity verification. It supplements the Privacy Policy, and it controls if the two conflict on identity or biometric data. Capitalized terms not defined here have the meanings in the Terms of Service.
At the end of this notice we ask for your written consent. You do not have to give it. If you do not, we cannot verify you, and you cannot become Bookable for paid work, but you can keep an Inquiry only profile.
1. Why we verify identity
ICONS lets Brands license a real person's Likeness and commission AI-generated content of them. To protect you and everyone else on the Service, we must confirm, before any paid work, that:
- you are a real, live person, not a recording, a mask or a synthetic image;
- you are at least 18 years old;
- you are the person shown in the profile and the person whose Likeness will be licensed, or, for a Virtual Persona, the verified adult rights owner; and
- no one else is using your face or name to sell your Likeness.
A signup checkbox, matching email, follower count or imported avatar is not identity proof. Verification is the only way a profile can become Bookable.
2. What we capture
| Item | What it is | Who captures it |
|---|---|---|
| Challenge code | A single-use code shown to you, valid for 10 minutes | ICONS |
| Challenge video | A 20 to 45 second video of you showing or saying the challenge code | You upload; ICONS stores it privately and shares it with the identity provider |
| Government ID | A photo of a government-issued photo ID, front and back where needed | Identity provider (and ICONS where the provider flow requires) |
| ID data | Legal name, date of birth, document type, number, issuing authority and expiry | Identity provider; ICONS receives legal name, date of birth and the result |
| Biometric Data | Facial geometry from the video and the ID photo, and liveness signals | Identity provider |
| Verification result | Approved, rejected or needs review, with reason codes | Identity provider and ICONS reviewers |
| Device and session data | IP address, device and browser, timestamps | ICONS and the identity provider |
"Biometric Data" means the facial geometry template, face scan and liveness measurements derived from your video and ID photo. It may be a biometric identifier or biometric information under the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, the Washington biometric identifier law, the California Consumer Privacy Act and similar laws.
3. How it is used
We and our identity provider use the information in Section 2 only to:
- confirm liveness and that the video was recorded in response to your current challenge code;
- compare your face in the video with the photo on your ID;
- confirm you are 18 or older;
- confirm that you are the person whose profile and Likeness are offered, and detect duplicate or impersonating accounts;
- let a trained ICONS identity reviewer resolve uncertain results manually;
- keep a record that verification happened, which the law, our Processors or a dispute may require; and
- prevent fraud and enforce the Acceptable Use and AI Content Policy.
We do not use your identity video, ID or Biometric Data to create content, as a reference for Production, to train any AI model, to build a reusable likeness or voice model, for marketing or advertising, for emotion or personality analysis, or to infer any characteristic other than age and identity match.
4. Who can see it
- Identity provider. A specialist provider acting on our behalf under a written contract that limits its use of your data to verification for ICONS, requires security safeguards and requires destruction on the schedule below. The provider's name is shown in the verification screen before you begin.
- ICONS identity reviewers. Only staff designated as identity reviewers, with logged access.
- Nobody else on the Service. Brands, Agencies (including their finance users), production vendors and other Users never see your identity video, ID, date of birth, Biometric Data or legal name from verification. They see only a "Verified" status.
- Legal disclosure. We may disclose verification records if required by law, subpoena or court order, or with your further consent.
We do not sell, lease, trade or otherwise profit from your identity or Biometric Data.
5. Retention and destruction schedule
| Item | Destroyed |
|---|---|
| Challenge code | Expires after 10 minutes; used once; never reusable |
| Challenge video | 30 days after the verification decision, unless an open dispute or legal requirement needs it longer |
| Government ID images | Kept with the identity provider where possible and deleted within the provider's retention period; any ICONS copy deleted 30 days after the decision |
| Biometric Data (facial templates and liveness signals) | At the earliest of: the purpose being satisfied (decision final and any dispute resolved); 3 years after your last interaction with ICONS; or a shorter period required by law |
| Legal name and date of birth | Kept in a restricted record while your account is open and as long as needed for signed contracts, tax and financial records (generally 7 years), then deleted |
| Verification result and audit record | 7 years, as part of contract and compliance records; contains no biometric template |
If a legal hold or open dispute requires us to keep something longer, we keep only what the hold requires, restrict access, and destroy it promptly when the hold ends. If you need to verify again, we collect new data under a new consent.
6. Security
Identity files are stored in a separate private storage area, encrypted in transit, accessible only through short-lived signed links, and never placed in public or enumerable locations. Object names do not contain your name. We protect this data using a reasonable standard of care within our industry and at least as carefully as our other most sensitive information.
7. Your rights
You may ask what identity information we hold about you, ask for correction, or ask for deletion by emailing privacy@iconsai.com. You may withdraw this consent at any time. Withdrawal stops any further collection, and we will destroy Biometric Data that is no longer needed on the schedule above. Withdrawal does not affect verification already completed or records the law requires us to keep, and it means your profile can no longer be Bookable for new paid work. California residents have the additional rights described in the Privacy Policy.
8. Virtual Personas
If your profile is a Virtual Persona, you verify yourself as the adult rights owner. You must not submit someone else's face, ID or voice. Verification of you does not verify the persona as a real person, and the persona must always be labeled as virtual.
9. Failed or uncertain verification
If verification fails or is uncertain, a human reviewer looks at it. You can ask for a review or appeal by emailing hello@iconsai.com. Until you pass, your profile cannot be Bookable, and we will not capture payment, start Production or grant rights in your Likeness.
10. Sandbox Mode
While identity verification runs in Sandbox Mode, results are labeled sandbox and do not count as live verification. This notice and your consent still govern any data you submit.
11. Written consent and release
By typing your full name and checking the consent box, you confirm that you have read this notice and you give your written consent, as a written release for the purposes of the Illinois Biometric Information Privacy Act and similar laws, for:
(a) ICONS and its identity provider to collect, capture, receive, store and use your challenge video, government ID, ID data and Biometric Data for the purposes in Section 3;
(b) ICONS to disclose this information to its identity provider and, where required, as described in Section 4; and
(c) retention and destruction according to the schedule in Section 5.
You confirm that you are at least 18 years old, that the face and ID you submit are your own, and that you are giving this consent voluntarily. You understand that you may decline, that declining only prevents identity verification and paid work, and that you may withdraw consent at any time by emailing privacy@iconsai.com.
This consent covers identity verification only. It does not license your Likeness for any campaign. Use of your Likeness in any Booking requires a separate AI Likeness and Digital Replica Rider that you personally sign for that Booking.
12. Contact
mjonesone, LLC (ICONS), Los Angeles, California. Privacy: privacy@iconsai.com. Legal: legal@iconsai.com. Support: hello@iconsai.com.