Pindrop Solutions
Last updated: July 7, 2023
Pindrop (“Pindrop,” “we,” “us,” or “our”) is a leading provider of authentication and anti-fraud solutions for enterprise-level businesses across a variety of sectors. When our customers purchase our authentication and anti-fraud solutions, our solutions may process the information of individuals at our customers’ direction on their behalf. Where Pindrop is acting as a service provider or processor to our customers, our customer’s privacy policy and/or their agreements with their clients and consumers will dictate and govern the scope and manner of processing.
Our Authentication and Anti-fraud Services
When providing our authentication and anti-fraud services to our business customers, our solutions process certain information provided by our business customers. This information includes phone numbers and technical details about phone calls to our customers’ call center, and also may include audio recordings from those phone calls. Our solutions use this information to help authenticate and/or verify individuals according to our customers’ specifications and to inform fraud risk analyses products and services when our customers confirm that certain information were involved in actual or suspected fraud. In accordance with GLBA and other applicable laws, we may disclose the information we process for authentication and anti-fraud services as permitted by our customer agreements, to our service providers, and as permitted by applicable law for our everyday business purposes.
We have implemented safeguards designed to protect the information we process from unauthorized access; these measures include technical, physical, and administrative security controls. Further, Pindrop solutions do not process or store names, addresses, account numbers, government identification numbers, or third-party usernames and/or passwords. If an individual consumer believes the information processed by Pindrop was incorrect or otherwise unauthorized, or if you have other concerns related to Pindrop’s solutions deployed at your provider (our business customer), please contact your provider and submit a request to access, correct or delete your information. As a service provider to its business customers, Pindrop will comply with the requirements set forth in applicable data protection and privacy laws, including responding to and fulfilling consumer rights requests, as further defined below.
Notice Of Consumer Rights
Some states have enacted data protection and privacy laws that include certain rights (“Consumer Rights”) available to its residents with respect to personal information processed or stored by a business. These rights may include:
- Right to Know what personal information the business have collected, sold or shared about the consumer, including:
- the categories of personal information,
- the categories of sources from which the personal information is collected,
- the business or commercial purpose for collecting, selling, or sharing personal information,
- the categories of third parties to whom the business discloses personal information, and
- the specific pieces of personal information the business has collected about the consumer.
- Right to Delete. The right to delete personal information that a business has collected from you subject to certain exemptions.
- Right to Correct inaccurate personal information that a business maintains about a consumer.
- Right to Opt-Out of the Sale/Sharing of Personal Information – the right to opt out of the sale or sharing of their personal information by the business.
Applicable data protection and/or privacy laws may make additional data rights available to you. For more information on the Consumer Rights available to you as a resident of your state, please review your applicable data protection laws or consult your local data protection authority.
Methods Of Submitting Consumer Rights Requests
If a Consumer Right is available to you, and you believe Pindrop or its solutions process or store your personal information, you can submit a Consumer Rights request to Pindrop in the following ways:
- Clicking here or go to https://pindrop.com/privacy/submit-a-request to submit a request.
- Emailing us at [email protected] to submit a request.
Consumer Rights Verification Process
When you submit your request, we will take steps to attempt to verify your identity. We will seek to match the information in your request to the limited personal information we maintain about you. As part of our verification process, we may ask you to submit additional information, use identity verification services to assist us, or, if you have created an account, we may ask you to sign into your account as part of our identity verification process.
Authorized agents can make requests on behalf of consumers via the Methods of Submitting Requests section above. Authorized agents will be required to provide proof of their authorization, and we may also require the relevant individual to directly verify their identity and the authority of the authorized agent.
If you have questions or concerns about our information practices, please contact us via email at [email protected].
RETENTION INFORMATION FOR PINDROP SOLUTIONS AND SERVICES
Pindrop follows the laws and regulations in various jurisdictions that regulate the retention of personal information and biometric information to the extent those terms (or substantially similar terms), laws, and regulations are applicable to Pindrop. To the extent allowed by law, Pindrop retains information as follows: Pindrop will generally retain personal information for as long as the purpose for which we originally collected the information exists. In some circumstances, we may retain personal information for other periods of time, for instance where we are required to do so in accordance with legal, tax, and accounting requirements or if required to do so by a legal process, legal authority, or other governmental entity having authority to make the request, for so long as required. In specific circumstances, we may also retain your personal information for longer periods of time corresponding to a statute of limitations so that we have an accurate record of your dealings with us in the event of any complaints or challenges.
During the course of services provided to its customers, Pindrop’s solutions will interface with audio recordings generated during our customers’ service calls with their customers to extract content-agnostic data points from the speech of the audio. Referred to as ‘voice features,’ these data points are retained by Pindrop for a period of up to three (3) years and deleted thereafter. In some situations, Pindrop’s customers have chosen to use Pindrop’s anti-fraud solutions on their own premises, in which case these voice features may be retained on the customer’s premises for varying periods of time, depending on the customer and its business. Pindrop’s solutions and services may also create what some refer to as ‘voiceprints’ which are a combination of voice features and other data points delivered from this audio interface. These voiceprints are not retained by Pindrop.