If Groq asks you to verify your identity, you submit your government ID and a selfie directly to a third-party company that operates under its own separate privacy policy, not Groq's.
Users who undergo identity verification submit biometric-adjacent data (selfies and government photo IDs) to unnamed third-party services operating under their own privacy notices, meaning Groq's privacy policy and consumer rights framework does not apply to how that sensitive data is stored, used, or shared by those third parties.
Cross-platform context
See how other platforms handle Third-Party Identity Verification Under Separate Privacy Notices and similar clauses.
Compare across platforms →Your most sensitive personal data — government-issued photo ID and facial images — is controlled by a third party whose privacy practices Groq does not fully govern, leaving users with limited recourse under Groq's policy if that data is misused.
REGULATORY FRAMEWORK: This provision implicates Illinois BIPA (740 ILCS 14) if facial geometry is extracted from selfies, creating strict liability for unconsented biometric data collection; Texas CUBI (Tex. Bus. & Com. Code §503.001) for facial recognition data; GDPR Art. 9 (special category data — biometric data processed for unique identification) requiring explicit consent or another Art. 9(2) exemption; CCPA/CPRA definition of sensitive personal information including government IDs and biometric data; and GDPR Art. 28 requiring a formal data processing agreement with the third-party verifier.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.