AgeWallet™ Client Privacy Policy
Effective Date: August 1, 2025
This Privacy Policy explains how AgeWallet™, LLC (“AgeWallet”, “we”, “us”, or “our”) collects, uses, and safeguards information related to our business clients (“Clients”) and their authorized representatives.
This Policy applies to data processed by AgeWallet™ in its capacity as a service provider and processor for Clients who integrate our Services, including our APIs, SDKs, and verification tools.
It does not apply to individual end-users whose age or identity is verified through the AgeWallet™ system. End-user privacy and verification data are governed separately under our End-User Privacy Policy and each Client’s own data practices.
1. SCOPE AND PURPOSE
This Policy governs AgeWallet’s handling of Client and integration-related data for purposes of:
-
Account creation, authentication, and management
-
Contract administration and billing
-
Technical support and communications
-
Regulatory compliance and system security
AgeWallet™ acts as a data controller only for information it collects from Clients for business operations. For verification-related personal data of end-users, AgeWallet™ acts strictly as a data processor under the applicable Data Processing Addendum (DPA).
2. INFORMATION WE COLLECT
2.1 Account and Business Information
-
Client organization name, domain, and contact details
-
Representative names, job titles, and email addresses
-
Billing and payment information (processed through secure payment providers)
-
Authentication credentials for platform access
2.2 Technical and Integration Data
-
API request logs, error traces, and service diagnostics
-
IP addresses, user agent data, and timestamps for security auditing
-
OIDC configuration parameters and integration metadata
2.3 Communications and Support
-
Correspondence with our support or compliance teams
-
Records of feature requests, onboarding, or incident reports
AgeWallet™ does not collect or use end-user verification data for its own purposes and does not retain such data beyond the operational requirements defined in the DPA.
3. HOW WE USE CLIENT INFORMATION
Client-related information is used to:
-
Provide and maintain the Services
-
Authenticate Client representatives and manage account access
-
Process payments, subscriptions, and renewals
-
Respond to Client inquiries and technical requests
-
Notify Clients of service updates or policy changes
-
Prevent fraud, misuse, or unauthorized activity
-
Comply with contractual and regulatory obligations
We do not sell or share Client information with advertisers or third parties for marketing purposes.
4. DATA RETENTION
Client account and billing information is retained only as long as necessary to:
-
Maintain active service relationships
-
Comply with tax, audit, or regulatory obligations
-
Resolve disputes or enforce agreements
Integration logs and technical records are retained for limited periods consistent with AgeWallet’s non-persistent data retention and TTL standards.
When an account is terminated, AgeWallet™ deletes or anonymizes Client data in accordance with applicable law and the DPA.
5. DATA SECURITY
We apply industry-standard security controls to safeguard all data entrusted to us. These include:
-
Encryption in transit and at rest
-
Role-based and multi-factor authentication for internal access
-
Continuous monitoring, vulnerability testing, and audit logging
-
Vendor risk assessments for third-party processors
Clients are responsible for maintaining their own secure integration environments and safeguarding credentials and access tokens.
6. DISCLOSURE OF INFORMATION
We may share limited Client information only in the following circumstances:
-
Service Providers: With trusted vendors (e.g., hosting, payment, security, or compliance services) bound by contractual confidentiality and data protection terms.
-
Legal or Regulatory Requirements: When disclosure is necessary to comply with law, regulation, or lawful governmental request.
-
Business Transactions: In the context of a merger, acquisition, or asset transfer, provided the recipient upholds equivalent privacy protections.
We do not disclose Client data to unrelated third parties without legitimate purpose or consent.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
7. INTERNATIONAL DATA TRANSFERS
Client data may be processed or stored in jurisdictions where AgeWallet™ or its service providers operate.
Where applicable, transfers are governed by legally recognized safeguards such as Standard Contractual Clauses (SCCs) or equivalent frameworks ensuring adequate protection under GDPR and other international laws.
8. CLIENT RIGHTS
Depending on jurisdiction, Clients and their authorized representatives may have the right to:
-
Access and receive a copy of their data
-
Request correction of inaccurate information
-
Request deletion, subject to legal retention requirements
-
Object to or restrict certain processing
Requests can be directed to , and AgeWallet™ will respond in accordance with applicable data protection laws.
9. CONFIDENTIALITY AND NON-DISCLOSURE
All Client information, including technical configurations, credentials, and integration documentation, is treated as confidential.
AgeWallet™ will not share or disclose such information except as necessary to deliver Services or comply with law.
10. COMPLIANCE AND ACCOUNTABILITY
AgeWallet™ maintains documentation of data processing activities, enforces strict internal access controls, and conducts regular audits to verify compliance with GDPR, UK Data Protection Act, CCPA, CPRA, and other relevant laws.
A designated Privacy Officer oversees compliance and ensures that Client data is handled in accordance with this Policy and the DPA.
11. AMENDMENTS
We may revise this Policy to reflect changes in our operations, applicable law, or industry standards.
Clients will be notified of material updates, and continued use of the Services constitutes acceptance of the revised Policy.
12. CONTACT INFORMATION
AgeWallet™, LLC
3379 Peachtree Rd. NE, Suite 700
Atlanta, GA 30326, USA
Email: