Wealthfront · Wealthfront Privacy Policy · View original document ↗

Biometric Data Collection and Retention

Medium severity Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Wealthfront Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Wealthfront collects selfie photographs and government ID images for identity verification, which may be considered biometric data under some state laws, and requires vendors to delete this data within 90 days.

This analysis describes what Wealthfront's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the operational framework for biometric data handling during account onboarding, establishing both the authorization for collection and a mandatory retention window followed by destruction protocols. The requirement for vendor compliance on data destruction creates a specific procedural obligation tied to Wealthfront's third-party vendor management.

Consumer impact (what this means for users)

Your facial biometric data is collected during identity verification and shared with third-party vendors, though those vendors are contractually required to destroy it within 90 days of collection, limiting long-term exposure.

How other platforms handle this

Windsurf Medium

Our Services allow you to input your voice to generate Prompts and other text transcriptions. We process your voice audio to convert it into Prompts and other text transcriptions and then discard the audio after the processing is complete. We retain and use audio text transcriptions as Log and Usage...

Roblox Medium

Your use of the Services is also governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you consent to the data collection and use practices described in the Privacy Policy. Roblox collects information you provide directly, information collected a...

Best Buy Medium

We collect information about you in a variety of ways depending on how you interact with us and our products and services. This includes information you provide directly, information we collect automatically when you use our services, and information we receive from third parties. We may collect ide...

See all platforms with this clause type →

Monitoring

Wealthfront has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may use third-party vendors for identity verification. These vendors analyze whether the Client's "selfie" matches the government-issued identity document. The information collected from Client photographs may constitute biometric information in some jurisdictions. Where required by law, we will seek consent from you prior to any such collection. We require our third-party vendors who support identity verification to agree to destroy any potential biometric data that is created or gathered for purposes of verifying your identity no more than ninety (90) days after its collection.

— Excerpt from Wealthfront's Wealthfront Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

Collection of biometric data triggers obligations under BIPA (Illinois), CUBI (Texas), and similar state biometric privacy laws, requiring informed consent, data use policies, and destruction schedules; the 90-day vendor destruction requirement appears designed to address these obligations but compliance teams should verify it covers all applicable jurisdictions.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • State AG
    State attorneys general in Illinois, Texas, and Washington enforce biometric privacy laws (BIPA, CUBI) and may investigate improper biometric data collection or retention.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Wealthfront Privacy Policy
Entity
Wealthfront
Document last updated
May 5, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-001755
Document ID
CA-D-00367
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
de1de4b45e40f23ffec14db7756fd7949361019e04533f8af62af13deaa6be81
Analysis generated
March 20, 2026 05:09 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Wealthfront
Document: Wealthfront Privacy Policy
Record ID: CA-P-001755
Captured: 2026-03-20 05:09:24 UTC
SHA-256: de1de4b45e40f23f…
URL: https://conductatlas.com/platform/wealthfront/wealthfront-privacy-policy/biometric-data-collection-and-retention/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Wealthfront's Biometric Data Collection and Retention clause do?

This provision establishes the operational framework for biometric data handling during account onboarding, establishing both the authorization for collection and a mandatory retention window followed by destruction protocols. The requirement for vendor compliance on data destruction creates a specific procedural obligation tied to Wealthfront's third-party vendor management.

How does this clause affect you?

Your facial biometric data is collected during identity verification and shared with third-party vendors, though those vendors are contractually required to destroy it within 90 days of collection, limiting long-term exposure.

Is ConductAtlas affiliated with Wealthfront?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Wealthfront.