Privacy Policy
Last updated: June 2, 2026
Introduction
This Privacy Policy describes how Metropolis Technologies, Inc. and its subsidiaries and affiliates (“Metropolis”, “we”, “us” or “our”) collect, use, store, and share personal information in connection with the operation of Metropolis’s business. You may interact with Metropolis by accessing and using our websites or mobile applications, visiting facilities that we operate or where our technology is deployed, communicating with us, interacting with our partners, business customers, and service providers, and otherwise engaging with our Services.
Our Services involve collecting biometric data. Please note that we do not sell biometric data or use it for advertising. We use biometric data only as described in this Privacy Policy.
To make this Privacy Policy easier to read, we refer to our online and offline offerings that link to or are otherwise subject to this Privacy Policy collectively as the “Services”.
To learn more about your choices concerning your personal information, see Your Privacy Rights and Choices below.
To learn more about how our Services and communications use cookies and related technologies (including from third parties), see Cookies and Related Online Tracking Technologies below.
For certain details about our use of automated license plate readers (ALPR), please see our Supplemental ALPR Privacy Notice attached as Exhibit A below.
Information We Collect When You Interact with Our Services
Depending on how you interact with Metropolis, the personal information you choose to provide to us, the nature of your communications, and how we interact with third parties, we may collect the following information:
Basic identifying information. Information you provide when you sign up for an account for our Services, such as your name, email address, phone number, vehicle license plate number and type, and account credentials.
Information about your vehicle. When you visit a property that uses Metropolis technology, we may use Automated License Plate Reader (ALPR) and similar systems to collect video or pictures of your vehicle and license plates. We may also collect information regarding the date, time, and location where these videos or pictures are captured.
Device identifier and other unique identifiers. Information such as device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, and other unique identifiers collected automatically from your devices that you use to interact with our Services.
Biometric and Behavioral Data. If you enroll as a Member in the Metropolis Recognition Platform (“MRP”) or interact with any MRP-enabled facility, we and our affiliates may collect the following categories of information for the purposes set out in this Privacy Policy: (a) photographs and video images of your face, captured during enrollment or at locations where MRP cameras are deployed; (b) facial geometry measurements and facial recognition templates (“faceprints”) derived from such images; (c) recognition event logs and timestamps generated when your faceprint is matched at an MRP-enabled location; and (d) inferences derived from body positioning and movement. For additional details about how we collect and process biometric and behavioral data in connection with the MRP, please see Exhibit B (Supplemental MRP Privacy Notice) below.
Internet or other network activity. Browsing or search history, information about your interaction with our emails and other communications, and other information regarding your interactions with our Services.
Precise geolocation. We collect the geolocation of the device you use to access our Services when you enable location sharing through your device settings.
Financial and payment information. We may use third-party payment processors to process payments made to us, in which case payment information is provided directly to our third-party processors, whose use of your personal information is governed by their privacy policies.
Commercial information. Personal information such as the Services you have purchased or considered, your preferences, how you use our Services, and related information about your commercial activities.
Communications and other user-generated content. Your communications with us and any other content you provide, such as survey responses, comments, reviews, testimonials, and other user-generated content.
Audio and visual information. Photographs, images, videos, and recordings of your vehicle or license plate.
Inferences. Inferences drawn from or created based on the information identified above.
Professional or employment-related information. Your resume and other application materials if you apply for a job with us, as well as personal information we collect at conferences, trade shows, or other events, and personal information we collect from individuals and third parties to assess and pursue potential business opportunities.
How We Collect Personal Information
We typically collect personal information in three ways: (1) directly from you, (2) automatically, and/or (3) from third parties.
Directly from you. We may collect personal information directly from you, including when you interact with our websites or Services (e.g., by creating an account or making a purchase), visit a property that uses Metropolis technology, participate in a survey, poll, or promotion, communicate with us, or subscribe to receive emails, text messages, or other communications.
Automatically, using tracking technologies. We may collect information automatically, including when you visit a property that uses Metropolis technology, visit our websites, use our Services, open or click on emails we send you or related communications, or interact with our advertisements. We or other third parties may automatically collect information about your use of cookies, pixels, web beacons, software development kits, and other tracking technologies. For more information, see Cookies and Online Tracking Technologies below.
From third parties and other sources. We may collect personal information about you from third parties, including our business customers, service providers, data analytics providers, marketing or advertising providers, security service providers, survey providers, payment processors, and other third parties.
Cookies and Online Tracking Technologies
We may deploy, or allow third parties to deploy, technologies on our Services and in our communications with you, including cookies, pixels, web beacons, software development kits, and other similar online tracking technologies. These technologies may be used to gather personal information about you when you use our websites, interact with our Services, and engage with our communications.
Our use of these technologies is detailed below under How We Use Personal Information. For example, we use certain online tracking technologies to maintain the security of our websites, manage your account, prevent crashes, fix bugs, save your preferences, manage and process payments, and assist with basic website functions. Others may be used for advertising, analytics, and other performance or targeting purposes. Some of these technologies are managed by us, and others are managed by third parties.
Our websites use Google Analytics. You can learn more about Google Analytics by visiting Google Analytics’ Privacy Policy. To learn more about how to opt out of Google Analytics’ use of your personal information, please click here.
You may have certain choices surrounding these technologies. To learn more, see Your Privacy Rights and Choices below.
How We Use Personal Information
We use personal information to:
Provide and improve our Services, develop new services, and operate our business, including to facilitate your access to and use of our Services, support our core business functions, and maintain records.
Communicate with you, including to respond to your requests, inquiries, issues, feedback, and to provide customer service.
Train AI systems, including large language models and other machine learning systems.
Market and advertise, including to send marketing, advertising, and promotional communications to you by email, text message, and postal mail, as well as to show you advertisements for our Services, administer sweepstakes, surveys, and other contests, and market additional products and services to you.
Conduct analytics and personalization, including understanding your interaction with our websites, advertisements, Services, and our communications with you, and to personalize your experience.
Create de-identified and/or aggregated information that is no longer associated with you. If we receive de-identified information, we will not attempt to re-identify such information unless permitted by, or required to comply with, applicable laws.
Help prevent fraud and maintain security, including to detect, investigate, prevent, safeguard against and respond to security incidents and malicious, deceptive, fraudulent, or illegal activity, enforce our terms and procedures, secure our facilities and infrastructure, and help prevent harm to us and others.
Comply with legal obligations, including to comply with applicable law and legal process, establish and exercise our rights, and defend against legal claims.
Operate Recognition Services and BLNQ. Metropolis uses biometric and behavioral data to provide the services you request, operate and improve our business, and comply with applicable law. Depending on the Services for which you sign up, we use the data to identify Members at MRP-enabled locations through facial recognition and license plate recognition (LPR) technology; to facilitate personalized hospitality services through BLNQ, including arrival notifications, preference delivery, and no-touch valet services; to operate Security Services watchlists and behavioral analytics for security monitoring at participating facilities; to enable sharing of Member preference data across properties within the Metropolis Hospitality Network (subject to your opt-out rights described below); and to share Member profile information with authorized Hospitality Customers and their staff for service delivery purposes.
How We Disclose Personal Information
We disclose personal information to:
Service providers that perform services on our behalf.
Business customers, such as hospitality customers within the Metropolis Hospitality Network, hotels or employers whose garages we operate, and other facilities that deploy our technology. Our business customers process your personal information in accordance with their own privacy policies. We are not responsible for our customers’ processing of your personal information. When you enroll as a Member in BLNQ, your Member profile — including recognition event logs, preference data, and visit history recorded at Hospitality Customer locations—may be disclosed to hospitality customers within the Metropolis Hospitality Network where you have an active MRP membership. This sharing enables those properties to deliver personalized services to you upon recognition.
Corporate affiliates, such as our parent and subsidiary entities, to the extent these entities are involved in providing our Services.
Advertising partners. These third-party advertising partners may set cookies and other tracking tools on our Services to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks. This practice is commonly referred to as “interest-based advertising” or “targeted advertising.”
Biometric technology providers. We disclose biometric data, including faceprints, recognition event logs, and LPR data, to Oosto, a Metropolis subsidiary, and other third-party vendors that operate facial recognition, LPR, and behavioral analytics infrastructure on our behalf.
We may also disclose personal information:
To comply with legal process and protect Metropolis, our business customers, users, and others. We may disclose or make available your information to satisfy any law, regulation, legal process, governmental request, or where we have a good faith belief that the disclosure is reasonably necessary or advisable to enforce our agreements or policies, protect our, your, or a third party’s interests, property, or safety, in connection with claims, disputes, or litigation, and to assist with an investigation or prosecution of suspected or actual illegal activity.
In connection with a business transaction. We may disclose personal information to others in connection with a corporate business transaction, such as due diligence, a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets. We may also disclose personal information in the unlikely event of insolvency, bankruptcy, or receivership, in which such information could be transferred to third parties as a full or partial asset in the transaction or to potential purchasers of certain assets and other related third parties, such as courts, attorneys, and other individuals tied to such transactions.
Notwithstanding the above, all the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Cross-Border Data Transfers
Your personal information may be stored and processed in any country or region where we have facilities or engage service providers. You understand that your personal information may be transferred to countries outside of your country or region of residence, including to the United States, which may have data protection rules that are different from those of your country or region. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries or regions may be entitled to access your personal information.Where applicable, we have put in place adequate measures, such as the standard contractual clauses adopted by the relevant authority, to protect your personal information. You may obtain a copy of these measures by contacting us as specified in the Contact Us section below.
Retention of Personal Information
We may keep personal information for as long as necessary to achieve the purpose for which it was collected, our business needs, and any other purpose permitted under law. Metropolis retains biometric data collected in connection with the Metropolis Recognition Platform (MRP), as described in Exhibit B (Supplemental MRP Privacy Notice) below.
Data Security
We use technical and organizational security measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. However, no security measures are failsafe, and we cannot guarantee the security of personal information.
Links to Third-Party Sites
Our Services may contain links to third-party websites or services. These links are provided for your convenience and information only, and the websites and services may operate independently from us and have their own privacy policies or notices that you should review. We encourage you to read those policies and notices before engaging with those third-party sites.
Do Not Track
Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
Your Privacy Rights and Choices
Depending on where you are located, the nature of our business in that jurisdiction, and other factors, you may have the following rights:
Right to know / access / portability. The right to request that we confirm whether we are processing your personal information, obtain details about such processing, and obtain a copy of such personal information.
Right to delete. The right to request that we delete your personal information.
Right to correct. The right to request that we correct your personal information.
Right to opt out of targeted advertising, selling, sharing for behavioral advertising, and certain profiling. The right to request an opt-out of certain processing activities including, as applicable, if we process your personal information for “targeted advertising” (as “targeted advertising” is defined by applicable privacy laws), if we “sell” your personal information (as “sell” is defined by applicable privacy laws), if we “share” your personal information for “cross-context behavioral advertising”, or if we engage in “profiling” in furtherance of certain “decisions that produce legal or similarly significant effects” concerning you (as such terms are defined by applicable privacy laws).
If you would like to opt out of the sale of your data, please Click Here. We will process such requests in accordance with applicable laws. You have the right to be free from unlawful discrimination for exercising your rights under applicable law.
If you would like to opt out of the sharing of your data via cookies, including for cross-context advertising, please follow these steps: (a) clear your browser cookies, (b) revisit our site, and (c) select “Decline” in the cookie banner. When you select “Decline”:
Marketing and advertising cookies will be blocked.
Non-essential analytics cookies will be blocked.
Only strictly necessary cookies required for the website to function will be placed.
Only you, or someone legally authorized to act on your behalf in certain jurisdictions, may make a request to exercise the rights listed above regarding your personal information. If your personal information is subject to a law that allows an authorized agent to act on your behalf in exercising your privacy rights and you wish to designate an authorized agent, please provide written authorization signed by you and your designated agent by Clicking Here and asking us for additional instructions.
We will take steps to verify your identity before fulfilling requests submitted under applicable privacy laws. These steps may involve asking you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. Examples of our verification process may include asking you to confirm the email address we have associated with you.
Some laws may allow you to appeal our decision if we decline to process your request. If applicable laws grant you an appeal right, and you would like to appeal our decision with respect to your request, you may do so by informing us of this and providing us with information supporting your appeal.
Regardless of what privacy laws apply to your personal information, Metropolis may offer you the following choices:
Opt out of marketing emails. If you would like to stop receiving marketing emails, you can update your email preferences by clicking the “unsubscribe” button found at the bottom of the email.
Opt out of marketing texts. If you would like to stop receiving marketing text messages, reply STOP to text messages. Text HELP for help. Message and data rates may apply.
Adjust push notification preferences. You may limit push notifications in our mobile apps by adjusting the permissions on your device.
Adjust location preferences. You can revoke our access to your device’s precise geolocation by adjusting your device settings.
Opt out of collection of precise geolocation from your device. You may at any time opt out from allowing us to access your device’s precise geolocation data by adjusting your device’s permissions.
Withdraw consent to BLNQ enrollment. If you are enrolled in BLNQ, you may withdraw your consent to biometric processing and request deletion of your biometric data at any time by visiting your Account settings or submitting a written request to privacy@metropolis.io. Withdrawal of consent will result in de-enrollment from BLNQ and deletion of your faceprint and associated biometric data. Withdrawal does not affect the lawfulness of biometric data processing that occurred prior to withdrawal.
Opt out of Cross-Network Hospitality Data Sharing. If you are enrolled in BLNQ, you may opt out of the sharing of your Member profile and preference data across properties within the Metropolis Hospitality Network by visiting your Account settings or by submitting a written request to privacy@metropolis.io. Opting out of cross-network sharing will not affect your ability to use BLNQ at individual properties; staff at those properties will only have access to preference data collected at that specific location.
Uninstall the mobile application. You can uninstall our mobile application at any time. You may use the standard uninstall process available as part of your mobile device or via the mobile application marketplace or network. If you uninstall the mobile application from your device, the unique identifier associated with your device will continue to be stored. If you re-install the application on the same device, we will be able to re-associate this identifier to your previous transactions and activities.
Delete your account on iPhone or Android devices. You may delete your account at any time from your mobile application. We will email you instructions to confirm your identity and finalize your deletion after you submit your account deletion request.
Children
Our Services are not intended for children under the age of 16.
Changes to Our Privacy Policy
We may change this Policy from time to time. Any and all changes will be reflected on this page, and, where appropriate, we may also send other communications. The effective date will be stated at the top of this Privacy Policy. You should regularly check this page for any changes to this Privacy Policy.
Contact Us
Metropolis Technologies, Inc.
Privacy Officer
Attn: Legal Department
501 Commerce Street, Suite 1210
Nashville, TN 37203
Exhibit A – Supplemental ALPR Privacy Notice
This Supplemental ALPR Privacy Notice supplements our Privacy Policy and provides additional details regarding our use of ALPR Systems at certain parking facilities. Nothing in this Notice limits our rights under the Privacy Policy.
For purposes of this Notice, the following definitions apply:
“ALPR Systems” means a searchable computerized database resulting from the operation of one or more mobile or fixed cameras combined with computer algorithms to read and convert images of registration plates and the characters they contain into computer-readable data.
“ALPR Information” means information or data collected through the use of an ALPR System.
Authorized purposes
The authorized purposes for using ALPR Systems and collecting ALPR Information include parking enforcement, validating accurate parking rates, performing vehicle inventories, and those purposes set forth in our Privacy Policy.
Authorized personnel
ALPR Systems and ALPR Information may be used or accessed by authorized Metropolis personnel whose jobs require such use or access including, without limitation, lot checkers, parking attendants, enforcement agents, and facility managers, or independent contractors who are required to access such information in order to provide a service to Metropolis or its clients. Such personnel are required to be trained on information security procedures and receive personalized training at the local parking facility level.
ALPR system monitoring
ALPR Information collected and stored by Metropolis is monitored by the Metropolis IT Information Security Department.
For ALPR Information at parking facilities in California, Metropolis:
May maintain a record of access to its ALPR Information which shows:
The date and time the information is accessed; and
The license plate number or other data elements used to query the ALPR System.
Requires that ALPR Information is only used for the authorized purposes identified in this Notice.
Disclosures of ALPR Information
ALPR Information may be disclosed in accordance with our Privacy Policy. In states where collection is permitted for unpaid parking citations, we will share parking violation information with a third-party collection agency.
Responsible personnel
This Notice is implemented by the Director of Operations Support and the Director of Information Security.
Information regarding ALPR information accuracy and corrections
Metropolis is capable of reviewing ALPR Information captured by ALPR Systems for accuracy by comparing it to customer records and data from parking access and revenue control equipment at the parking facilities. Metropolis also has a customer dispute procedure in place for customers to report inaccurate charges.
Retention of ALPR information
ALPR Information may be retained by Metropolis in accordance with our Privacy Policy. For example, Metropolis may retain ALPR Information about paid parking customers for at least ninety (90) days and ALPR Information about unpaid parking customers where a citation has been issued for at least five (5) years.
Exhibit B – Supplemental MRP Privacy Notice
This Supplemental MRP Privacy Notice (“Notice”) supplements the Metropolis Privacy Policy and provides additional details regarding our collection, use, storage, and sharing of biometric, recognition, and behavioral data in connection with the Metropolis Recognition Platform (“MRP”) and its associated services, including BLNQ and Security Services. Nothing in this Notice limits our rights under the Privacy Policy. Capitalized terms used but not defined in this Notice have the meanings given in the Privacy Policy or the applicable Terms of Service.
1. What is the MRP?
The Metropolis Recognition Platform (“MRP”) is Metropolis’s proprietary vision AI platform that leverages facial recognition, License Plate Recognition (LPR), and Behavioral Analytics technology, including technology developed and operated by Oosto, a subsidiary of Metropolis. The MRP powers two primary service lines:
BLNQ is Metropolis’s hospitality recognition and experience platform for luxury hotels, private member clubs, and similar venues. BLNQ uses facial recognition and LPR to identify Members upon arrival and to facilitate delivery of personalized hospitality services.
Security Services are facial recognition, watchlist monitoring, and Behavioral Analytics services for corporate campuses, educational institutions, and similar environments operated by Metropolis’s enterprise customers.
2. Data We Collect
In connection with the MRP, we and our affiliates (including Oosto) may collect the following categories of data:
Facial images and faceprints. Photographs submitted during enrollment and video images captured by cameras at MRP-enabled locations, together with the facial geometry measurements and facial recognition templates (“faceprints”) derived from such images.
License plate data. Images and alphanumeric data from your vehicle’s license plate, captured by LPR cameras at MRP-enabled locations and associated with your Member profile.
Recognition event logs. Records of each event at which your faceprint or license plate is matched at an MRP-enabled location, including timestamp, location identifier, and triggering service (e.g., BLNQ arrival, Security Services watchlist match).
Behavioral Analytics data. Inferences derived from body positioning, posture, and movement captured by cameras at Security Services locations. Behavioral Analytics data is used for security monitoring and does not independently identify individuals by name, but may be combined with facial recognition data where both are deployed.
3. How We Collect This Data
This data is collected in the following ways:
Enrollment. You voluntarily provide one or more photographs of sufficient resolution during biometric enrollment through the Metropolis App, a BLNQ onboarding portal, or another enrollment channel designated by Metropolis. By completing enrollment, you authorize Metropolis to generate and store a faceprint associated with your Member profile.
Camera capture at MRP-enabled locations. Once enrolled, cameras at participating locations may automatically capture images of you and/or your vehicle and compare them against stored Member faceprints and license plate records.
Enrollment in BLNQ requires your separate, affirmative consent. Participation in BLNQ is strictly voluntary. You may decline to enroll in BLNQ, in which case BLNQ hospitality recognition services will not be available to you, but other Metropolis services remain unaffected.
4. How We Use the Data We Collect
We use this data to:
Identify you at MRP-enabled locations. Match your faceprint or license plate to your Member profile to trigger hospitality or security workflows, including physical access, valet, no-touch check-in, and Security Services alerting.
Deliver personalized services. Route recognition notifications to authorized Hospitality Customer staff and provide them access to your Member profile card, including preferences, visit history, and other information recorded in connection with your membership.
Operate Security Services. Match individuals against Security Services watchlists provided by enterprise customers, generate security alerts, and conduct behavioral monitoring in designated security zones.
Improve recognition technology. Test and improve recognition accuracy through internal quality assurance, provided that such use does not involve disclosure of your identifiable biometric data to third parties for their independent commercial purposes.
We do not sell your biometric data. We do not disclose or disseminate your biometric data to any third party except as described in this Notice, in the Privacy Policy, or as required by applicable law.
5. BLNQ Hospitality Recognition
When you enroll in BLNQ and arrive at a participating Hospitality Customer location, cameras at the property may capture your face and/or license plate and match them to your Member profile. Upon a successful match, Metropolis will generate a notification to designated Hospitality Customer staff (such as the General Manager, concierge, or Member Experience team), linking to your profile card. Your profile card may contain your name, preferences, visit history, and other information you or Hospitality Customers have added.
Cross-Network Sharing. By enrolling in BLNQ, you direct Metropolis to disclose your Member profile and preference data — including data recorded at one Hospitality Customer location — to other Hospitality Customers within the Metropolis Hospitality Network, so that participating properties may offer you consistent, personalized service across locations. You may opt out of cross-network sharing at any time by toggling off “Cross-Property Sharing” in your Account settings or by submitting a written request to privacy@metropolis.io.
6. Security Services
At locations where Security Services are deployed, MRP cameras may capture images for real-time matching against watchlists provided by our enterprise customers. Watchlists are configured and managed by the relevant enterprise customer; Metropolis does not independently determine who is included on a watchlist. When a match occurs, an alert is generated for security personnel at that location. Information of individuals who are identified by Security Services watchlist matches may be processed pursuant to the privacy policies of the relevant enterprise customer in addition to this Notice.
Behavioral Analytics. Security Services may include Behavioral Analytics technology that infers body positioning, posture, and motion patterns from camera feeds for purposes of security monitoring. Behavioral Analytics operates independently from facial identification and does not generate faceprints; however, in deployments where both facial recognition and Behavioral Analytics are active, the outputs may be combined for security alerting purposes.
7. Retention and Destruction of Biometric Data
Metropolis retains biometric data for the shorter of the following periods:
Five (5) years from the date of your most recent recognition event at any MRP-enabled location; or
With respect to BLNQ-derived data, the date on which you withdraw your consent and your deletion request is processed.
Retention is subject to any shorter period required by applicable state law. Biometric data will also be deleted promptly upon receipt of a valid deletion request from you. Upon expiration of the applicable retention period, Biometric data will be destroyed using a method that renders it unrecoverable and that meets applicable legal standards for biometric data destruction.
8. California Residents
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CPRA”), biometric data is “sensitive personal information” (“SPI”). In addition to the rights described above, California residents have the right to limit Metropolis’s use and disclosure of SPI to uses necessary to provide requested services. To exercise your right to limit the use of your SPI, please click the “Limit the Use of My Sensitive Personal Information” link in the footer of our website or contact privacy@metropolis.io. California residents also have the right to know the specific pieces of biometric data collected about them and to request deletion.
9. Third-Party Biometric Technology
MRP facial recognition, LPR, and Behavioral Analytics services are powered by technology developed and operated by Oosto, a wholly owned subsidiary of Metropolis. Oosto’s operations are subject to Metropolis’s data protection and security requirements.
10. Data Security
Metropolis uses technical and organizational measures designed to protect biometric data against unauthorized access, disclosure, alteration, and destruction. However, no security measures are failsafe, and we cannot guarantee the security of personal information.
11. How to Exercise Your Rights / Contact Us
To exercise any of the rights described in this Notice, including to withdraw consent to BLNQ enrollment, request deletion of biometric data associated with your BLNQ profile, opt out of cross-network data sharing, or submit a state-specific biometric privacy request, please contact Metropolis at:
Metropolis Technologies, Inc.
Privacy Officer | Attn: Legal Department
501 Commerce Street, Suite 1210 | Nashville, TN 37203
privacy@metropolis.io
Metropolis will respond to verifiable biometric rights requests within the timeframe required by applicable law. We will take steps to verify your identity before fulfilling requests. You will not be discriminated against for exercising your biometric privacy rights.