EXPRESS CONSENT · VERSION 2026-10-03

Driver Identity Verification Consent

Effective October 3, 2026

This is a separate express consent for sensitive driver identity and face-matching processing. It applies only when you onboard or continue as a Pickupz hauler.

Your choice. You do not need to consent to use Pickupz as a customer. Driver identity verification is necessary to accept hauling jobs. If you do not consent or later withdraw consent, you cannot continue as a hauler, but you may contact support about available alternatives or continue as a customer.

1. Information involved

Your legal name, mobile number, date and result of phone verification.
Images of your driver’s licence, insurance, truck and fresh live selfie.
Licence portrait crop, extracted names and expiry dates, face comparison, liveness/capture signals, session information and document text-check results processed by Didit or Google Cloud as described below.
Supplementary numerical face representations and comparison scores created on your device, where used for capture guidance.
Provider/model version, capture source, automated status, consent receipts and human-review decision.

2. How the check works

Pickupz verifies your mobile number using Firebase. Didit performs a hosted Canadian driver’s licence check, live-selfie liveness detection, and selfie-to-document face comparison. Your name and document expectations are sent to Didit to bind the check to your account. Didit receives and processes your licence images, selfie, biometric comparison data, and capture/session information. Pickupz retrieves the verified result and a copy of the verified selfie through its backend. Separate licence, insurance, and truck images are retained in protected Pickupz storage. Google Cloud Vertex AI Gemini reads only the separately uploaded insurance image to extract printed insured names, coverage dates and vehicle make, model and year. Your licence, selfie, expected name and expected vehicle are not sent to Gemini for this check. Pickupz’s server makes the comparisons against your verified identity and saved truck. Raw model output is not saved in Pickupz records; a protected copy of the checked insurance image, status, expiry, model version and document-integrity evidence are saved. The model-processing endpoint is configured in Montréal; Google provider security and abuse-monitoring retention may apply, and zero retention is not guaranteed. On-device licence and face checks may also provide capture guidance but cannot, by themselves, authorize a new driver.

3. Automated decision and human review

Automatic approval requires server-confirmed Canadian licence, matching legal name, unexpired licence, liveness and face-match approval, together with server checks of matching insured names, current policy dates and the saved vehicle’s make, model and year. Required vehicle documents must also be submitted. Automated extraction and face comparison are not guarantees of identity, document authenticity, insurance coverage, or work eligibility. Ambiguous, unreadable or mismatched insurance and analysis failures are sent for authorized human review rather than auto-approved. You may contact support to correct or challenge a result and may be asked for a clearer capture or alternative verification.

Insurance processor clarification: October 27, 2026.

4. Purposes

Pickupz uses this information to confirm that the person seeking hauler access appears to match the licence, deter account sharing and fraudulent documents, protect customers and haulers, meet marketplace and payment risk requirements, investigate safety or account issues, and re-verify identity where a reasonable risk signal arises. Pickupz also uses the submitted verification selfie as the hauler's required marketplace profile photo so a matched customer can recognize the arriving driver.

5. Providers and disclosure

Firebase/Google Cloud hosts protected documents, results, and backend records; Vertex AI Gemini extracts insurance fields as described above. Didit processes hosted licence and biometric verification information under its privacy policy and applicable service terms. Existing verification records from earlier providers remain valid unless re-verification is needed. For an accepted booking, the matched customer can see the hauler's verified-selfie profile photo, first name, rating, vehicle description, and plate. Pickupz may disclose other relevant information to processors, professional advisers, insurers, or authorities as described in the Privacy Policy and required by law. Provider processing may take place outside Canada.

6. Retention and security

Pickupz restricts driver documents and selfies to authorized workflows and personnel and retains them only as reasonably needed for verification, re-verification, account security, safety, disputes, fraud prevention, legal claims, and law. On-device temporary face representations are discarded after the comparison. Acceptance and outcome records may be retained longer to demonstrate compliance and prevent repeat fraud. See the Privacy Policy for safeguards, cross-border processing, and rights.

7. Withdrawal and consequences

You may withdraw consent by contacting the Privacy Officer or requesting account deletion. Withdrawal does not invalidate prior lawful processing. Because identity verification is necessary for hauler safety and eligibility, withdrawal ends or suspends hauler access unless an acceptable lawful alternative is available. You may still use an eligible customer profile.

8. Consent statement

By selecting the separate identity-consent control in the app, you confirm that you have read this notice and expressly consent to the collection, use, disclosure, automated comparison, storage, customer-facing profile-photo use, and human review described above for driver identity verification.

Contact

Privacy Officer · Graffiti Labs US, LLC, doing business as Pickupz
legal@graffitilabs.io