Terms and Conditions for Identity Verification Services

Version: October 23, 2026

Client agrees to comply with the following terms and conditions applicable to the Identity Verification Services (“ID Verify Services”), which are provided by one or more of the following third-party vendors: Jumio Corporation (the identity verification services powered by Jumio, the “Jumio-Powered ID Verify Services”) and Alclear Digital Identity, LLC (“CLEAR”) (the identity verification services powered by CLEAR, the “CLEAR-Powered ID Verify Services”). Jumio and CLEAR are each a “Vendor.”

General Terms (Applicable to All ID Verify Services)

A.     Definitions. “Yardi” means Yardi Systems, LLC and its Affiliates. “RentGrow” means RentGrow, Inc., a wholly-owned subsidiary of Yardi. “Client” means the entity that has entered into an Underlying Agreement and uses the ID Verify Services. “Underlying Agreement” means Client’s agreement(s) with Yardi or RentGrow under which Client is authorized to access the ID Verify Services. “User” means an individual, including a rental applicant, who initiates an identity verification transaction through Client using the ID Verify Services. “Transaction” means a single identity verification session initiated by a User. “Applicable Data Protection Laws” means all laws and regulations governing the collection, use, retention, disclosure, security, or destruction of personal data, including biometric identifiers and biometric information.

B.     Lawful Use. Client will use the ID Verify Services exclusively for authorized and legal purposes, consistent with all applicable laws and regulations (including Applicable Data Protection Laws, the FCRA, and federal, state, and local fair housing laws) and the rights of others.

C.     Biometric Compliance. Before any facial image of a User is captured or compared, Client will, to the extent required by Applicable Data Protection Laws, (i) inform the User in writing that biometric identifiers or biometric information are being collected, the purpose, and the retention period; (ii) obtain the User’s written or electronic release; and (iii) maintain a publicly available written retention schedule and guidelines for permanently destroying biometric data.

D.     Unauthorized Access. Client will take all reasonable steps to ensure that unauthorized persons do not access the ID Verify Services and that authorized persons do not disclose, duplicate, or reproduce any portion of the ID Verify Services except as permitted by these Terms and Conditions.

E.     Precedence; Survival. If these Terms and Conditions conflict with the Underlying Agreement with respect to the ID Verify Services, these Terms and Conditions control. Client’s obligations regarding confidentiality, data deletion, indemnification, and limitations of Vendor liability survive termination or expiration.

Jumio Terms (Applicable to Jumio-Powered ID Verify Services)

Client agrees to comply with the following terms and conditions in connection with the Jumio-Powered ID Verify Services provided by Jumio:

1.     Client acknowledges that RentGrow or Yardi, as applicable, is the reseller of the Jumio-Powered ID Verify Services. Client must contact RentGrow or Yardi with respect to any support and maintenance or any other issues or claims associated with Client’s use of the Jumio-Powered ID Verify Services.

2.     Client will not take any adverse action, as defined in the United States federal Fair Credit Reporting Act (“FCRA”), 15 U.S.C. § 1681 et seq., and including but not limited to declining User or imposing conditions such as requiring a guarantor or additional security deposit, against any User based in whole or in part on information obtained through the ID Verify Services. Client will not use the Jumio-Powered ID Verify Services as a consumer report or to determine any User’s eligibility for housing, credit, employment, or insurance.

3.           Client may use the Jumio-Powered ID Verify Services to verify the identity of Users through the use of document scanning and personal data and to retain images of identification documents obtained through the ID Verify Services for historical record-keeping, fraud prevention, and legal compliance purposes permitted by applicable law and Client’s retention policy, provided that Client has obtained written or electronic consent from the applicable User with respect to such image retention (the “Jumio Permitted Use”).

4.     Client represents and warrants that it has a privacy policy that includes confidentiality requirements, which covers use and storage practices of biometric data in accordance with applicable laws and regulations.

5.     Client represents and warrants that it will provide Users with all notices required by applicable data protection law and require all Users using the Jumio-Powered ID Verify Services to give all permissions and written consent required for the collection and use of any information collected from Users in connection with a Transaction (including but not limited to personal data such as the User’s “selfie” or self-portrait image used in the delivery of the ID Verify Services) (“User Information”) including:

a.     at the time the “selfie” is collected, notice describing why the User’s photo and other User Information are being collected and obtaining the User’s consent to use the photo and other data for the ID Verify Services;

b.     the right to use, reproduce, distribute, transmit, anonymize, and display the User Information (including any rights specifically pertaining to biometric information) solely as necessary to develop, provide, and improve the Services, including the right for Jumio to grant equivalent rights to its service providers that perform services that form part of or are otherwise used to perform the Jumio-Powered ID Verify Services; and

c.     to perpetually and irrevocably use, reproduce, modify, create derivative works from, distribute, perform, transmit, and display User Information in an anonymized or aggregated form that does not identify individual persons or organizations in order to compile statistics regarding use of the ID Verify Services and to develop and improve the ID Verify Services including through machine learning techniques, provided that there will be no attempt to reidentify User Information that has been anonymized and has implemented technical safeguards and business processes that prohibit the reidentification of and inadvertent release of such User Information will be implemented.

6.     Client acknowledges that the ID Verify Services are licensed and not sold, and Client’s use rights with respect to the ID Verify Services shall automatically terminate upon the termination of the term of use authorized under the Client’s Underlying Agreement.

7.     Client is prohibited from: (i) attempting to modify or create any derivative works of the ID Verify Services; (ii) reverse engineering, decompiling, decrypting or attempting to discover any source code or underlying ideas or algorithms of any component of the ID Verify Services; (iii) providing, leasing, lending, transferring, assigning, sublicensing, using for timesharing or service bureau purposes or otherwise using or allowing the use of the ID Verify Services for the benefit of any third party; (iv) disclosing the results of any benchmark testing, technical results or other performance data relating to use of the ID Verify Services; (v) removing any proprietary, copyright, or trademark notices; or (vi) using the name “Jumio” or any Jumio product name or mark (or any confusingly similar name) as part of Client’s business or trade name, domain names, or social media.

8.     Client acknowledges that in no event shall Jumio be liable to Client or any third party for: (i) claims, losses or damages arising from a data breach related to User Information, Transactions or Transaction results, retained or otherwise stored, after Jumio has concluded the processing of those Transactions; or (ii) any loss of profits, indirect, special, incidental or consequential damages or for interruption of use or loss or corruption of data with respect to Client’s receipt and use of the ID Verify Services. Client acknowledges that Jumio makes no service level commitment directly to Client, and any service level commitment provided by Yardi or RentGrow for the Jumio-Powered ID Verify Services shall not exceed the performance standards provided by Jumio to Yardi or RentGrow.

9.     Client acknowledges and agrees that each identity verification result shall only be used for one User and for the Transaction in which it was initially requested. Client will not store, compile, or develop a database of such identity verification results for any purpose other than to maintain historical records.

10.        Client represents and warrants that it will provide Users with all notices required by applicable data protection law and will obtain all permissions and written or electronic consent required for the collection, use, and retention of any images of a government identity document or selfie of a User, and any other personal data, collected from Users through the Jumio-Powered ID Verify Services (“Images”), including explicit notice that an Image of the User will be obtained and stored by Client, if applicable, and the User’s explicit consent to such collection and use. Client will also:

a.    provide an ability for Users to track and request deletion of their Images;

b.     promptly delete any Images obtained through the Jumio-Powered ID Verify Services when there is no further need to fulfill the Jumio Permitted Use, unless Client has obtained the User’s written or electronic consent to retain such Images for a purpose otherwise permitted by applicable law; and

d.     Not convert any Images into a biometric template, or otherwise manipulate or use any Images (or manipulations thereof), for any purpose other than the Jumio Permitted Use, and not to use any Images to develop a product or service that competes with Jumio.

11.     Client agrees that irrespective of the identity verification result, Users may choose to apply for a lease at Client’s properties and Client may choose to seek additional information from any Users who choose to use the ID Verify Services.

12.   Client agrees to indemnify, defend, and hold harmless Jumio from and against any third party claims against Jumio, its affiliates, officers, directors, and employees arising out of or in connection with: (i) Client’s use of the ID Verify Services in violation of the terms set forth in these Terms and Conditions for ID Verify Services; and (ii) Jumio’s use of User Information except to the extent such claims arise from Jumio’s negligence, misconduct, breach of its contractual obligations, or violation of law.

13.   Client agrees that Jumio is a third-party beneficiary of the terms set forth in these Terms and Conditions for Jumio-Powered ID Verify Services.

CLEAR Terms (Applicable to CLEAR-Powered ID Verify Services)

Client agrees to comply with the following terms and conditions in connection with the CLEAR-Powered ID Verify Services provided by CLEAR:

1.     Client acknowledges that Yardi or RentGrow, as applicable, is the reseller of the CLEAR-Powered ID Verify Services. Client must contact Yardi or RentGrow with respect to any support and maintenance or any other issues or claims associated with Client’s use of the CLEAR-Powered ID Verify Services, except that CLEAR will handle direct communications and support with Users and potential Users relating specifically to the CLEAR-Powered ID Verify Services user experience.

2.     Client acknowledges that CLEAR is not a consumer reporting agency and that information provided through the CLEAR-Powered ID Verify Services is not a “consumer report” under the FCRA. Client will not use the CLEAR-Powered ID Verify Services, or any data received via or derived from the CLEAR-Powered ID Verify Services, to establish an individual’s eligibility for credit, employment, insurance, housing, or any other purpose, good, or service enumerated in 15 U.S.C. § 1681a(d), and will not take any adverse action, as defined in the FCRA, against any User based in whole or in part on information obtained through the CLEAR-Powered ID Verify Services. For clarity, use of the CLEAR-Powered ID Verify Services to confirm a User’s identity so that the User may proceed in the rental application process, together with the alternative verification option required below, does not constitute use to establish eligibility.

3.          Client may use the CLEAR-Powered ID Verify Services to enable the User to proceed in the rental application process and to retain images of identification documents obtained through the CLEAR Services for any purpose permitted by applicable law, provided that Client has obtained written or electronic consent from the applicable User with respect to such image retention (collectively, the “CLEAR Permitted Use”).4.     Client confirms that it has a privacy policy that includes confidentiality requirements covering the collection, use, and storage of Images and other User Information obtained through the CLEAR-Powered ID Verify Services in accordance with applicable laws and regulations.

5.     Client represents and warrants that it will provide Users with all notices required by applicable data protection law and will obtain all permissions and written or electronic consent required for the collection, use, and retention of any images of a government identity document or selfie of a User, and any other data, collected from Users through the CLEAR-Powered ID Verify Services (“Images”), including:

a.     explicit notice that an Image of the User will be obtained and stored by Client, if applicable, and the User’s explicit consent to such collection and use;

b.     an ability for Users to track and request deletion of their Images;

c.     Client’s commitment to promptly delete any Images obtained through the CLEAR-Powered ID Verify Services when there is no further need to fulfill the CLEAR Permitted Use, unless Client has obtained the User’s written or electronic consent to retain such Images for a purpose otherwise permitted by applicable law; and

d.     Client’s agreement not to convert any Images into a biometric template, or otherwise manipulate or use any Images (or manipulations thereof), for any purpose other than the CLEAR Permitted Use, and not to use any Images to develop a product or service that competes with CLEAR.

6.     Client represents and warrants that the Images and other data it requests through the CLEAR-Powered ID Verify Services will contain no more than the minimum data elements necessary to achieve the CLEAR Permitted Use.

7.     Client will not “sell” or “share” (as defined in the California Consumer Privacy Act, as amended,and other applicable data protection laws) or rent any Images or other data obtained through the CLEAR-Powered ID Verify Services to any affiliate or third party, and will not use such data for Client’s own purposes, other than the CLEAR Permitted Use, including for marketing purposes.

8.     Client will not access, and will not permit any other person to access, the CLEAR-Powered ID Verify Services from China, Cuba, Iran, North Korea, Afghanistan, Pakistan, Belarus, Syria, Ukraine, Estonia, or Russia; will not use a virtual private network or other technical measure to obfuscate the location from which the CLEAR-Powered ID Verify Services are accessed; will access the CLEAR-Powered ID Verify Services only within the authorized territory designated by Yardi; and will otherwise comply with all applicable export control and economic sanctions laws in connection with its use of the CLEAR-Powered ID Verify Services.

9.     Client acknowledges that the CLEAR-Powered ID Verify Services are licensed and not sold, and Client’s use rights with respect to the CLEAR-Powered ID Verify Services shall automatically terminate upon the termination or expiration of the term of use authorized under Client’s Underlying Agreement. Client is prohibited from: (i) modifying, correcting, adapting, translating, enhancing, or otherwise creating derivative works or improvements of the CLEAR-Powered ID Verify Services; (ii) reverse engineering, disassembling, decompiling, decoding, or otherwise attempting to derive or access the source code of the CLEAR-Powered ID Verify Services; (iii) providing, leasing, lending, transferring, assigning, sublicensing, using for timesharing or service bureau purposes, or otherwise using or allowing the use of the CLEAR-Powered ID Verify Services for the benefit of any third party; (iv) using the CLEAR-Powered ID Verify Services to develop or offer a competing identity verification product or service, including for benchmarking or competitive analysis purposes; (v) disclosing the results of any benchmark testing, technical results, or other performance data relating to use of the CLEAR-Powered ID Verify Services; (vi) bypassing or breaching any security device or protection used in the CLEAR-Powered ID Verify Services; (vii) collecting, harvesting, or tracking information from CLEAR’s systems, or attempting to decipher transmissions thereto or therefrom, except as necessary for the CLEAR Permitted Use; (viii) interfering with, disrupting, or degrading the performance, integrity, or security of CLEAR’s systems; or (ix) using the CLEAR-Powered ID Verify Services in any manner that infringes the rights of any person or violates applicable law.

10.     Client will ensure that Users have an option other than the CLEAR-Powered ID Verify Services to complete the identity verification process.

11.   Client agrees that irrespective of the identity verification result, Users may choose to apply for a lease at Client’s properties and Client may choose to seek additional information from any Users who choose to use the CLEAR-Powered ID Verify Services.

12.   Client will implement and maintain an industry-standard information security program, including administrative, technical, and physical safeguards such as encryption of Images and other data in electronic form using industry-standard algorithms, multi-factor authentication for remote access, access limited to personnel with a business need to know, logging of key security events, access controls, and network security measures, reasonably designed to protect the confidentiality, integrity, and availability of Images and other data obtained through the CLEAR-Powered ID Verify Services, and will promptly and securely delete such data after completion of the CLEAR Permitted Use (or expiration of any consented retention period) using a method that renders the data unrecoverable.

13.   Client will notify Yardi or RentGrow in writing without undue delay after discovery of any actual, unauthorized disclosure of or access to Images or other data obtained through the CLEAR-Powered ID Verify Services, to enable Yardi or RentGrow to satisfy its own notification obligations to CLEAR, and will provide such information and cooperation as Yardi or RentGrow reasonably requests. If Client accesses or receives any CLEAR data other than as contemplated by these CLEAR Terms, Client will promptly notify Yardi or RentGrow and delete such data.

14.   Client will keep confidential any non-public information it receives regarding CLEAR, the CLEAR-Powered ID Verify Services, or CLEAR’s technology and documentation, and will not disclose such information except to the extent necessary to perform its obligations under these Terms and Conditions or as required by applicable law.

15.   Client will not use CLEAR’s name, logo, or trademarks, issue any press release or public statement referencing CLEAR or the CLEAR-Powered ID Verify Services, or alter, modify, or interfere with any CLEAR-branded screens or user experience elements integrated into Client’s platform, in each case without Yardi’s and CLEAR’s prior written consent.

16.   Client acknowledges that in no event shall CLEAR be liable to Client or any third party for any loss of profits, indirect, special, incidental, consequential, or punitive damages, loss of goodwill, loss of data, or interruption of use with respect to Client’s receipt and use of the CLEAR-Powered ID Verify Services.

17.   Client agrees to indemnify, defend, and hold harmless Yardi, RentGrow, and CLEAR from and against any third-party claims arising out of or in connection with Client’s breach of these CLEAR Terms, Client’s misuse of the CLEAR-Powered ID Verify Services, or Client’s unauthorized use, retention, or disclosure of Images, except to the extent such claims arise from the indemnified party’s negligence, misconduct, breach of its contractual obligations, or violation of law.

18.        Client agrees that CLEAR is a third-party beneficiary of the terms set forth in these Terms and Conditions for CLEAR-Powered ID Verify Services.