Privacy Policy | Clear Showings

Clear Showings

Clear Showings Privacy Policy

Clear Showings LLC · 615 River Highway, Suite 1008, Mooresville, NC 28117 · contact@clearshowings.com | 844-771-6606 · https://www.clearshowings.com/policy

Effective Date: [July 15, 2026] · Version: 2.4 (supersedes Version 2.3)

This Privacy Policy describes how Clear Showings LLC ("Clear Showings," "we," "us," or "our") accesses, collects, stores, uses, shares, and destroys your personal information — with particular attention to biometric data — when you use our identity and trust verification services for real estate showings, open houses, and property tours ("Services"), visit https://www.clearshowings.com, or otherwise interact with us.

If you do not agree with this Policy, please do not use the Services. Questions: contact@clearshowings.com.

1. Controller Identity

This Policy is issued by Clear Showings LLC, a North Carolina limited liability company, which operates under the brand name "Clear Showings." Clear Showings uses no other trade or brand names. All privacy and biometric data inquiries should be directed to the contact information above. (15 U.S.C. § 45)

2. Scope and Applicability

This Policy applies to all customers, clients, requesting agents, and end-users ("you" or "data subject") who interact with the Clear Showings platform in connection with identity verification for real estate showings, open houses, or property tours. It governs the collection, use, retention, disclosure, and destruction of personal information, including biometric data. This Policy does not apply to individuals under 18 years of age; Clear Showings does not knowingly collect any data from minors.

3. Definitions

"Biometric identifier" means a measurable biological characteristic used to identify a person, including facial geometry derived from a photograph or scan, and retina or iris scan data.

"Biometric information" means any information, regardless of how it is captured or stored, that is based on or derived from a biometric identifier and is used to identify a person.

"Biometric template" means the mathematical or algorithmic representation of a biometric identifier generated during automated face-matching processing.

"Clear Show ID" means the Clear Showings service tier that performs identity document verification and automated face matching only. Clear Show ID sessions do not include watchlist, AML/PEP, deceased-records, or registry screening of any kind.

"Clear Show 360" means the Clear Showings service tier that includes all Clear Show ID functionality plus: phone confirmation via one-time passcode; AML/PEP (anti-money-laundering, sanctions, and politically exposed person) watchlist screening; a United States deceased-records check; and, where applicable, Global ID Confirmation. Clear Show 360 does not include criminal-history or criminal/public-records screening of any kind.

"Global ID Confirmation" means the Clear Show 360 feature that validates a non-U.S. government-issued identity document against the issuing government's own registry (or an authorized government data service of that country), as described in Section 6.6. Global ID Confirmation runs only for documents issued by a supported country and only under the affirmative verification consent described in Section 6.2. Documents from all other countries receive document authentication only (identity document validation, face match, and liveness), with no query to the issuing government.

"Verification record" means the full set of data captured during a verification session, including identity document images, selfie photographs, screening outputs (Clear Show 360 only), and associated metadata.

"Masked identity document" means an identity document image that has been processed to redact sensitive personally identifiable information — including date of birth, identification number, and residential address — using automated PII-masking technology.

"Verification summary" means the set of outputs displayed to a requesting agent upon completion of a verification session, as described in Section 6.1.

"Assessment" means the Green, Yellow, or Red color output, always paired with the specific reason for that color, generated from the verification checks performed in a Clear Show 360 session (identity document validity, face match, phone confirmation, deceased-records check, and Global ID Confirmation, where applicable). The Assessment is delivered to a requesting agent following completion of a Clear Show 360 verification session. It is not generated for Clear Show ID sessions. AML/PEP screening results are not incorporated into the Assessment color; they are reported separately as a yes/no match flag. The Assessment is not derived from, and does not reflect, criminal-history data, which Clear Showings does not collect or process.

"Requesting agent" means the real estate professional or other authorized party who initiates a verification request for a data subject.

4. What Information Do We Collect?

Information you provide

  • Names
  • Email addresses
  • Identity document images (government-issued ID)
  • Selfie photographs
  • Phone number — entered by you directly into the verification session to receive a one-time passcode by SMS or WhatsApp. The number is used within the verification session for the completion check and is not stored in Clear Showings' own systems.
  • Account registration details

Biometric data

  • Facial geometry — derived from a selfie photograph captured during the verification flow and used for automated face matching against a government-issued identity document.
  • Selfie photograph — the source image from which facial geometry is derived; retained for up to 30 days and destroyed together with the biometric template (see Section 6.5 and Section 11).
  • Government-issued identity document image — captured to enable face matching; PII-masked during retention. Unmasked source images are permanently deleted within 7 days of capture (see Section 11).

Clear Showings does not collect retina or iris scan data in its current verification flow. If retina or iris scan data is collected in the future, this Policy will be updated before such collection begins.

Sensitive information

When necessary, with your consent or as otherwise permitted by applicable law, we process:

  • Biometric data (facial geometry, selfie images) as described above
  • Government-issued identity document data (e.g., driver's license, and for Global ID Confirmation, non-U.S. national identity documents)
  • AML/PEP watchlist screening results (Clear Show 360 only) — collected transiently for real-time evaluation only; reduced to a yes/no match flag and not retained by Clear Showings after that output is generated (see Section 11)
  • United States deceased-records check results (Clear Show 360 only) — a name and date-of-birth check; reduced to a check outcome and not retained beyond the verification record

Clear Showings does not collect, request, or process criminal-history or criminal/public-records data in any service tier, does not collect Social Security numbers, and does not ask you to supply any identifier that does not appear on the identity document you present.

Payment data

We may collect data necessary to process payments, such as your payment instrument number and security code. All payment data is handled and stored by Stripe (https://stripe.com/privacy).

Social media / Google login data

If you register or log in using a third-party account (e.g., Google), we receive limited profile information from that provider. See Section 9.

Information automatically collected

When you visit the Services we automatically collect log and usage data and device data — including IP address, browser and device characteristics, operating system, language preferences, referring URLs, and information about how and when you use the Services — primarily to maintain security and operation and for internal analytics. We also collect information through cookies and similar technologies (see Section 7 and our Cookie Notice: https:// www.clearshowings.com/cookies).

Information from other sources

We may obtain limited information from watchlist data sources, United States deceased-records sources, and — for Global ID Confirmation, with your explicit consent — the government registry of the country that issued your identity document, to support identity verification, safety screening, and the accuracy of our records.

5. How Do We Process Your Information?

We process your information to:

  • Verify identity — confirm that individuals requesting property access are who they claim to be (Clear Show ID and Clear Show 360).
  • Confirm document authenticity at the source (Clear Show 360 only) — for supported non-U.S. identity documents, validate the presented document against the issuing government's own registry (Global ID Confirmation, Section 6.6).
  • Conduct watchlist screening (Clear Show 360 only) — process AML/PEP and sanctions watchlist screening to surface safety, compliance, fraud, or security concerns, reported as a yes/no match flag.
  • Run a deceased-records check (Clear Show 360 only) — a United States deceased-records check using name and date of birth, to detect identity fraud involving deceased persons' identities.
  • Generate the Assessment (Clear Show 360 only) — produce the Assessment (Green / Yellow / Red, with the specific reason) from the verification checks performed, delivered to the requesting agent.
  • Facilitate accounts and authentication — create, secure, and manage user accounts.
  • Protect the Services — fraud monitoring and prevention, security, and integrity.
  • Improve the Services — analyze usage trends and evaluate effectiveness.
  • Comply with law and respond to your requests.

Biometric data is processed solely for identity verification and personal safety screening. No biometric identifier or biometric information is used for any secondary purpose, including marketing, profiling, or behavioral analysis. (15 U.S.C. § 45; FTC Biometric Policy Statement (2023); N.C. Gen. Stat. § 75-1.1)

FCRA Notice and Agent Decision-Making

Clear Showings is not a consumer reporting agency and does not furnish consumer reports within the meaning of the Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.). Clear Showings does not collect, process, or report criminal- history, credit, or tenant-screening information. Verification details are accessible only through the secure Clear Showings dashboard. No fully automated decision to deny property access is made; all determinations regarding property access are made solely by the requesting agent. Clear Showings does not make, recommend, or enforce any access decision.

Fair Housing Notice

All verification outputs, including the Assessment, are applied uniformly to all verification requests without reference to race, color, religion, national origin, sex, familial status, disability, or any other characteristic protected under the Fair Housing Act (42 U.S.C. § 3604) or applicable state and local fair housing law. Global ID Confirmation is a document-authenticity feature: it validates the document presented, is offered uniformly wherever a supported registry exists, and is never used to treat any visitor differently on the basis of national origin or citizenship.

6. Biometric Data Practices

6.1 Self-verification model and verification summary

Biometric data is collected through a self-service verification flow. The data subject receives a secure link and completes verification independently. The requesting agent never handles, captures, or accesses the data subject's biometric data directly.

Upon completion, the requesting agent receives a verification summary through the secure Clear Showings dashboard:

  • For Clear Show ID sessions, the verification summary consists of: the data subject's name; face-match similarity and confidence scores; the selfie photograph captured during verification; the portrait extracted from the identity document; and PII-masked images of the identity document.
  • For Clear Show 360 sessions, the verification summary additionally includes: the Assessment (Green, Yellow, or Red, with the specific reason); a yes/no AML/PEP watchlist match flag; the phone-confirmation completion status; the deceased-records check outcome; and, where Global ID Confirmation was performed, the registry- validation outcome.

No biometric template, unmasked identity document image, or underlying screening record is displayed to or accessible by the requesting agent at any time.

6.2 Consent mechanism

Prior to any biometric data capture, Clear Showings presents a written consent screen disclosing:

  • the specific biometric identifiers to be collected;
  • the purpose of collection;
  • the retention period applicable to each data category;
  • the identity of third-party processors who will process or temporarily store the data;
  • for sessions involving a non-U.S. identity document issued by a supported country, that the presented document will be validated against the issuing government's registry, including the cross-border transfer that validation entails (Section 6.6); and
  • the categories of information shared with the requesting agent upon completion of verification, including the selfie photograph, face-match scores, the portrait extracted from the identity document, and PII-masked identity document images (and, for Clear Show 360, the Assessment, the AML/PEP match flag, and the other outputs listed in Section 6.1).

Consent is obtained through an affirmative checkbox or click-through acknowledgment embedded in the verification enrollment flow. Verification cannot proceed without affirmative consent. Consent records, including timestamp and version of the consent disclosure presented, are retained for the duration of the data subject's relationship with Clear Showings and for a minimum of three years thereafter. (740 ILCS 14/15(b) [voluntarily adopted]; N.C. Gen. Stat. § 75-1.1)

6.3 PII masking and agent visibility limitations

Identity document images are processed using automated PII-masking technology to redact date of birth, identification number, residential address, and other sensitive identifying information before any human review. Agents and administrators may view only masked versions of identity documents.

No agent or administrator has access to unmasked identity document images, biometric templates, or underlying screening records. Requesting agents may view only the verification summary described in Section 6.1, including face-match scores and the selfie photograph. The biometric template itself is never displayed, exported, or otherwise accessible to any agent, administrator, or third party. (N.C. Gen. Stat. § 75-64; 15 U.S.C. § 45)

6.4 No sale or monetization of biometric data

Clear Showings does not sell, lease, trade, license, or otherwise profit from any biometric identifier or biometric information collected through the platform. This prohibition is absolute and applies regardless of the form in which biometric data is held. (740 ILCS 14/15(c)–(d) [voluntarily adopted])

6.5 Biometric destruction schedule

Clear Showings applies a tiered destruction schedule. Unmasked identity document images are destroyed within 7 days of capture. The biometric template (facial geometry derived from the selfie photograph) and the source selfie photograph are destroyed at the conclusion of the 30-day retention period configured with Didit, or earlier on a per- record basis upon a verified deletion request. PII-masked identity document display copies are retained with the verification record and destroyed together with the selfie photograph at the conclusion of the same 30-day period. In all cases, biometric data retention is capped by applicable biometric-privacy law, and where such law requires earlier destruction, that earlier obligation governs. Full retention periods and destruction triggers are set out in Section 11.

6.6 Global ID Confirmation and cross-border registry validation (Clear Show 360 only)

Every identity document presented in a Clear Show 360 session receives document authentication: automated validation of the document's authenticity and security features, face matching against the document portrait, and liveness detection. For documents issued by a supported country listed below, Clear Showings additionally performs Global ID Confirmation: validation of the presented document against the issuing government's own registry, through that country's registry services. This is a validation query: Clear Showings transmits only the minimum data required to validate the presented document — data extracted from the document itself. It is not a bulk transfer of the data subject's information to a private company abroad.

Principles governing Global ID Confirmation:

  • Consent within the verification flow. Registry validation runs only under the affirmative verification consent described in Section 6.2, which discloses registry validation and the cross-border transfer it entails. Clear Showings enables only registry services that operate within that consent; services that would require additional or separate end-user consent beyond the verification consent are not offered.
  • Extract, don't ask. Clear Showings validates only data appearing on the presented document and never asks the data subject to supply additional national identifiers the document does not carry.
  • Lawful paths only. Clear Showings supports registry validation for a country only where a lawful, consent- based validation path exists, and does not route data into jurisdictions where cross-border transfer cannot lawfully be satisfied by consent.
  • Issuing-country law. Registry-side processing is subject to the data-protection law of the issuing country — for example, the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) in Mexico, Ley Estatutaria 1581 de 2012 in Colombia, and the Lei Geral de Proteção de Dados (LGPD) in Brazil.

Countries with registry validation currently supported:

CountryRegistry validation performed (where available)Applicable data-protection law

Mexico

CURP validation (primary), with electoral-registry validation as a sequential fallback where applicable

LFPDPPP

Colombia

Connected national registry check

Ley Estatutaria 1581 de 2012

Brazil

Receita Federal (CPF status) check

LGPD

Documents issued by all other countries — including Canada, China, India, and the United Kingdom — receive document authentication only (identity document validation, face match, and liveness). No query is made to the issuing government's registry for those documents, and the verification session proceeds on that basis. Additional registry-validation countries are added only when a corresponding lawful, consent-based validation path exists.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (including web beacons and pixels) to maintain security, save preferences, support basic site functions, and for analytics and advertising. We permit certain third parties and service providers (including the Meta Pixel) to use tracking technologies on our Services for analytics and advertising purposes on marketing pages only; these technologies are not deployed within the verification flow. To the extent any such activity is deemed a "sale" or "sharing" under applicable US state law, you may opt out as described in Section 14. See our Cookie Notice: https://www.clearshowings.com/cookies.

8. Automated Processing

For Clear Show 360 sessions, the Assessment is generated by an automated, rules-based evaluation of the verification checks performed in the session (identity document validity, face match, phone confirmation, deceased- records check, and Global ID Confirmation where applicable). The Assessment is always delivered together with the specific reason for its color. AML/PEP watchlist screening is reported separately as a yes/no match flag and does not affect the Assessment color. Clear Show ID sessions are not processed through this evaluation. As stated in Section 5, no fully automated decision to deny property access is made; all determinations regarding property access are made solely by the requesting agent.

9. Social Logins and Google User Data Disclosure

If you choose to register or log in using a third-party social media or Google account, we receive limited profile information (such as name, email address, and profile image) as permitted by that provider and your settings.

Google user data: When a user signs in using Google, Clear Showings may access the user's Google account email address, profile name, profile image (if available), Google account identifier, and authentication information necessary to confirm identity and maintain a secure login session. Clear Showings uses Google user data only to create an account, sign in securely, identify the account, maintain authentication, prevent unauthorized access, and provide account-related communications. Clear Showings does not access Gmail, Drive, Calendar, Contacts, or Photos unless the user separately authorizes those permissions. Clear Showings does not sell Google user data, does not use it for advertising, and does not use it to train or develop AI/ML models. Clear Showings' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Users may request deletion of Google user data by contacting contact@clearshowings.com.

10. When and With Whom Do We Share Your Personal Information?

Clear Showings shares personal information only with contracted service providers, each bound by a data processing agreement or equivalent contractual data-protection terms, and only as necessary to perform services on our behalf. Some providers engage their own subprocessors and may update them from time to time with notice:

  • Didit (Didit Identity, Inc.) — Sole identity verification provider. Processes facial geometry and government- issued identity document images to perform automated biometric face matching; performs AML/PEP and sanctions watchlist screening (reported as a yes/no match flag); delivers the one-time passcode for phone confirmation via SMS or WhatsApp; performs the United States deceased-records check; and orchestrates Global ID Confirmation registry validations. Verification records are hosted primarily in the European Economic Area; transfers are governed by Standard Contractual Clauses or another recognized transfer mechanism. This Policy does not confer rights under the EU General Data Protection Regulation (GDPR); data subjects seeking to exercise GDPR rights should contact contact@clearshowings.com for applicable procedures. Didit retains verification data according to the retention period configured by Clear Showings (currently 30 days); Clear Showings configures the shortest available retention and deletes individual records through Didit's deletion API consistent with the schedule in Section 11. Retention of biometric data is in all cases capped by applicable biometric-privacy law.
  • Government registries (Global ID Confirmation only, per Section 6.6) — For identity documents issued by a supported country and under the verification consent described in Section 6.2: Mexico's national population and electoral registry services (CURP validation with electoral-registry fallback); Colombia's connected national registry services; and Brazil's Receita Federal (CPF status check), in each case where available. Each supported registry receives only the minimum data required to validate the presented document and processes it under the issuing country's data-protection law.
  • Bubble.io — Application platform provider. Hosts the Clear Showings application and stores verification records, including masked identity photographs, in accordance with the retention schedule in Section 11. Bubble.io infrastructure is hosted on Amazon Web Services.
  • Amazon Web Services, Inc. (AWS) — Cloud infrastructure provider, engaged as Bubble.io's subprocessor (not contracted directly by Clear Showings). Provides the underlying storage and compute for the Bubble.io platform. Verification photographs stored on the Bubble.io platform are held on AWS S3 and encrypted at rest using AES-256.
  • WorkOS — Single sign-on provider for subscriber (agent/MLS) authentication. Processes subscriber identifiers only; does not process data-subject verification or biometric data.
  • Postmark — Transactional email provider. Processes subscriber contact information to deliver account and verification-related emails; does not process biometric data.
  • Stripe — Payment processor.
  • Google — Authentication (sign-in), as described in Section 9.

Clear Showings does not use any criminal-records or background-records provider. The NatCrim criminal and watchlist screening service referenced in prior versions of this Policy has been removed and is no longer used in any service tier.

Clear Showings instructs each processor to use personal information — including biometric data — only to perform services on Clear Showings' behalf as described in this Policy, and does not authorize use for the processor's own independent purposes. Where a provider's standard terms would otherwise permit use of data (including de-identified

or pseudonymized data) to train or improve the provider's own models, Clear Showings exercises any available opt- out from such use. (740 ILCS 14/15(b)(3) [voluntarily adopted])

We may also share information in connection with a merger, acquisition, or sale of assets, and as required to comply with law or protect rights and safety.

11. How Long Do We Keep Your Information? (Retention and Automated Destruction)

Data categoryRetentionDestruction trigger

Biometric template / facial geometry (held by Didit)

Retained per the retention period Clear Showings configures with Didit (currently 30 days); deleted earlier on a per-record basis via Didit's deletion API; capped in all cases by applicable biometric-privacy law. Not stored by Clear Showings itself.

Configured retention (currently 30 days) / per- record API deletion

Unmasked identity document images

7 days from capture, then permanent deletion from the Clear Showings application; corresponding records held by Didit are deleted via Didit's per-record deletion API on the same schedule.

Automated, end of 7-day window

PII-masked identity document display copies

Retained with the verification record for up to 30 days from capture; destroyed together with the selfie photograph.

Automated, end of 30-day window

Selfie photograph

Until the purpose for which it was collected is fulfilled, or 30 days from capture, whichever occurs first. Destroyed together with the biometric template per the Didit retention configuration (Section 6.5).

Automated, on expiry

Phone number (one-time passcode delivery)

Entered by the data subject directly into the verification session and used within that session only; not stored in Clear Showings' own systems.

Session completion / verification-record retention

Face-match scores and verification result metadata

Retained with the verification record while the requesting agent's account is active, for audit and dispute-resolution purposes.

Account closure + legal hold review

AML/PEP watchlist screening results (Clear Show 360 only)

Collected transiently for real-time evaluation only; reduced to the yes/no match flag and not retained by Clear Showings after output generation.

On output generation

Deceased-records check results (Clear Show 360 only)

Reduced to the check outcome recorded in the verification record; underlying source data not retained.

On output generation

Global ID Confirmation registry queries (Clear Show 360 only)

Transmitted transiently to the issuing government's registry / authorized data service for validation; reduced to the validation outcome recorded in the verification record. Registry-side processing and retention are governed by the issuing country's law.

On output generation (Clear Showings); issuing-country law (registry)

Consent records (timestamp + disclosure version)

Duration of the relationship + minimum 3 years thereafter

Manual / scheduled review

Account data (name, email)

Account closure + legal hold review

Data categoryRetentionDestruction trigger

While the account is active; after closure, retained only as required for legal, fraud-prevention, audit, or dispute-resolution purposes

Payment data

Handled and retained by Stripe per its policies

—

Deletion is triggered automatically by the system upon expiration of the applicable retention period. Clear Showings maintains timestamped destruction logs recording the data type, triggering event, and date of deletion for each record destroyed. (740 ILCS 14/15(a) [voluntarily adopted]; N.C. Gen. Stat. § 75-64)

12. How Do We Keep Your Information Safe?

Clear Showings implements:

  • AES-256 encryption of biometric and sensitive data at rest;
  • encryption of data in transit using TLS;
  • role-based access controls limiting personnel access;
  • contractual data protection obligations on all processors; and
  • automated deletion processes with destruction logging.

No method of transmission or storage is 100% secure, but these safeguards are reviewed and updated as technology and risk profiles evolve. (N.C. Gen. Stat. § 75-64; 740 ILCS 14/15(e) [voluntarily adopted]; 15 U.S.C. § 45; FTC Biometric Policy Statement (2023))

13. Minors

Clear Showings does not knowingly collect biometric data or any personal information from individuals under 18 years of age. The platform is not directed at minors. If Clear Showings discovers that data has been collected from a minor, it will delete that data promptly. (15 U.S.C. § 6501; 16 C.F.R. Part 312)

14. Your Privacy Rights

14.1 Deletion of biometric data

You may request deletion of your biometric data by sending a written request to contact@clearshowings.com. Clear Showings will respond within 45 days of receiving a verifiable request and will direct its processors to delete the data consistent with their respective retention obligations.

14.2 Withdrawal of consent

You may withdraw consent for biometric data collection at any time by written request to contact@clearshowings.com. Upon receipt, Clear Showings will cease collecting biometric data from you immediately, and all biometric data previously collected from you will be permanently destroyed within 30 days, subject to any legal hold. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal, including a Global ID Confirmation validation already completed with your consent.

14.3 US state privacy rights

Depending on your state of residence (including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia), you may have the right to:

  • confirm whether we process your personal data and access it;
  • correct inaccuracies;
  • request deletion;
  • obtain a copy of your data;
  • opt out of targeted advertising, sale, or qualifying profiling;
  • limit use and disclosure of sensitive personal data; and
  • non-discrimination for exercising these rights.

To exercise these rights, email contact@clearshowings.com. We will verify your identity before acting. You may use an authorized agent with valid proof of authorization.

Appeals: If we decline a request, you may appeal by emailing contact@clearshowings.com. If your appeal is denied, you may contact your state attorney general.

14.4 Global Privacy Control and Do-Not-Track

We recognize and honor Global Privacy Control (GPC) signals as a valid opt-out of sale/sharing for targeted advertising. Because there is no finalized industry standard for Do-Not-Track (DNT) signals, we do not currently respond to DNT.

14.5 Categories of personal information collected (US state disclosure)

CategoryExamplesCollected

A. Identifiers

Name, email, IP address, online identifier

YES

B. Customer records

Name, contact information

YES

C. Protected classifications

Age, demographic data

NO

D. Commercial information

Transaction / payment information

YES (via Stripe)

E. Biometric information

Facial geometry, selfie images

YES

F. Internet/network activity

Browsing, usage, device interactions

YES

G. Geolocation data

Device location

NO

H. Audio/visual

Identity document and selfie images

YES

I. Professional/employment

—

NO

J. Education

—

NO

K. Inferences

Assessment and screening outputs derived from verification checks (Clear Show 360 only)

YES

L. Sensitive personal information Driver's license / national ID data, biometric data, AML/PEP watchlist screening results (transient; Clear Show 360 only)

YES

We do not collect or process sensitive personal information to infer characteristics about you, and we do not sell personal information. We do not collect or process criminal-history data.

15. Breach Notification

If Clear Showings discovers a security breach involving personal or biometric data, Clear Showings will:

  • notify affected data subjects within without unreasonable delay and within any shorter period required by applicable law, via email, telephone, or written notice;
  • notify the North Carolina Attorney General's Consumer Protection Division as required by law;
  • notify consumer reporting agencies if the breach affects 1,000 or more North Carolina residents; and
  • cooperate with law enforcement as required.

Notification will include a description of the incident, the categories of data involved, and protective steps you may take. Clear Showings may provide supplemental notices or updates as additional material information becomes available (N.C. Gen. Stat. § 75-65; N.C. Gen. Stat. § 75-61; 15 U.S.C. § 45)

16. Policy Updates and Availability

This Policy is publicly posted at https://www.clearshowings.com/policy and is accessible from within the verification flow. Clear Showings will notify account holders of material changes via email at least 30 days before they take effect, and will post the revised Policy, with its effective date, at the URL above on the same schedule. Because data subjects typically complete a single verification session and their contact information is deleted on the schedule in Section 11, notice to data subjects is provided through the posted Policy and through its availability within the verification flow. Prior versions are archived and available upon request. Continued use after the effective date of a revised Policy constitutes acceptance. (N.C. Gen. Stat. § 75-1.1)

17. Governing Law and Venue

This Policy is governed by the laws of the State of North Carolina, without regard to its conflict-of-laws principles. Any dispute between Clear Showings and a customer or user arising under or relating to this Policy will be resolved in accordance with the dispute-resolution provisions of the applicable Terms and Conditions or other written agreement between the parties.  If a dispute is not subject to arbitration or otherwise proceeds in court, it shall be resolved in the state or federal courts located in Iredell County, North Carolina, and the parties consent to personal jurisdiction in those courts.

18. Compliance Officer

The individual responsible for overseeing biometric data privacy compliance at Clear Showings is: Ricardo de Leon

Clear Showings LLC

615 River Highway, Suite 1008

Mooresville, NC 28117

contact@clearshowings.com | 844-771-6606

19. Voluntary Adoption of BIPA Standards

Clear Showings is organized and operates in North Carolina and is not subject to the Illinois Biometric Information Privacy Act (740 ILCS 14/1 et seq.) as a matter of Illinois law. Clear Showings voluntarily adopts the substantive standards of BIPA — including written policy, informed consent, retention schedules, prohibition on sale, and security requirements — as best-practice benchmarks for the responsible handling of biometric data. All references to 740 ILCS 14/ in this Policy reflect voluntary compliance with those standards, not a legal admission of Illinois nexus or BIPA jurisdiction.

20. North Carolina Legislative Monitoring

North Carolina does not currently have a comprehensive consumer data privacy statute. Comprehensive privacy legislation has been introduced in the General Assembly — including House Bill 462 (the proposed North Carolina Personal Data Privacy Act, which would create a new Chapter 75F), Senate Bill 757, and related bills — but none has been enacted into law as of the effective date of this Policy. Clear Showings monitors this pending legislation and will issue a conforming amendment or addendum if and when any such law is enacted, addressing any additional obligations (including data protection assessment requirements applicable to sensitive biometric data). Clear Showings' present biometric data practices are designed to align with the substantive standards reflected in that pending legislation as a matter of best practice.

Clear Showings' existing obligations under North Carolina law arise principally under the Identity Theft Protection Act (N.C. Gen. Stat. Ch. 75, Article 2A), including data disposal (§ 75-64), breach notification (§ 75-65 and § 75-61, which defines personal information to include biometric data and fingerprints), and the prohibition on unfair or deceptive practices (§ 75-1.1).

21. How to Contact Us

Questions, requests, or concerns about this Policy:

Clear Showings LLC

615 River Highway, Suite 1008

Mooresville, NC 28117

contact@clearshowings.com | 844-771-6606

Clear Showings LLC — Privacy Policy v2.4 — Effective [July 15, 2026]

Clear Showings LLC · contact@clearshowings.com · clearshowings.com