PalmID Service – Terms of Service
Last Updated: 01/06/2026
1. Introduction
These Terms of Service (“Terms”) govern access to and use of the PalmID biometric authentication service provided by Redrock Biometrics. By integrating or using PalmID, the Customer agrees to these Terms. PalmID is designed as an anonymized biometric matching service and does not store personal data.
2. Definitions
Service or PalmID: The biometric matching system consisting of the Edge SDK and Palm Matching Service (PMS).
Customer: A third-party organization integrating PalmID.
End User: An individual whose biometric data is processed for authentication.
Biometric Signature: A mathematical representation of a palm image created by the SDK; not reversible.
User ID: A randomly generated identifier stored in PMS.
3. License and Access Rights
Redrock grants Customer a limited, non-transferable license to integrate and use PalmID. Customer may not reverse engineer, modify, or attempt to extract biometric signatures from PMS.
4. Customer Responsibilities
Customer is fully responsible for legal compliance, including notices and consents, managing personal data, ensuring secure integration, and meeting biometric privacy requirements (GDPR, BIPA, CCPA/CPRA, etc.).
5. Redrock Responsibilities
Redrock will operate PalmID securely, store only anonymized biometric signatures, and access biometric data only with explicit Customer authorization.
6. Prohibited Use
Customer may not use PalmID for mass surveillance, identification without lawful basis, creation of personal databases inside PMS, or any unlawful purpose.
7. Data Ownership and Control
Customer retains ownership of all personal data outside PMS. Biometric signatures stored in PMS remain anonymized and solely for matching operations.
8. Privacy and Data Protection
PalmID does not store personal data. All biometric signatures are encrypted in transit and at rest. PalmID provides technical means for deletion, retention controls, and privacy compliance.
9. Intellectual Property
PalmID, the SDK, PMS, and all underlying technology are the exclusive intellectual property of Redrock Biometrics.
10. Service Modifications
Redrock may enhance or update PalmID without materially degrading functionality. Customers will be notified of significant changes.
11. Suspension and Termination
Redrock may suspend access for misuse, legal violations, or security risks. Upon termination, PMS biometric signatures are deleted unless legally required otherwise.
12. Disclaimer of Warranties
The Service is provided “as is” and “as available.” Redrock disclaims all warranties, including implied warranties of merchantability and fitness for purpose.
13. Limitation of Liability
Redrock is not liable for indirect or consequential damages. Total liability is limited to fees paid in the preceding 12 months.
14. Indemnification
Customer shall indemnify Redrock for misuse, non-compliance, security failures, or unlawful handling of biometric or personal data.
15. Governing Law
These Terms are governed by the laws of California unless otherwise specified in the parties’ agreement.
16. General Provisions
If any provision is invalid, the remainder remains in effect. These Terms constitute the entire agreement concerning use of PalmID.