Agevoro Privacy Policy

1. Architectural Privacy by Design

Agevoro is engineered under a strict Zero-Knowledge & Data Minimization doctrine. Our technology is purpose-built to assist retail merchants, venues, and hospitality staff in confirming age eligibility without creating unnecessary databases of patron personal identity.

2. Information Processing at Verification

When a patron presents an identification document (such as a state-issued driver license) to an Agevoro terminal:

• Local Evaluation: Machine-readable data (e.g. AAMVA PDF417 barcodes) is processed in-memory to calculate age eligibility against statutory thresholds (e.g., 21+ for alcohol/tobacco).
• No Photo Harvesting: Patron photographs and sensitive demographic attributes are never uploaded to long-term cloud databases.
• Zero-PII Audit Events: Cloud synchronization records include cryptographic timestamp, terminal identifier, store location, and verification verdict (e.g., VERIFIED_ADULT or RESTRICTED_UNDERAGE). Patron names, addresses, and document numbers are excluded.

3. Merchant Account & Operational Data

We collect information necessary to administer merchant subscriptions, manage authorized retail registers, and authenticate merchant staff:

• Merchant business name, trade name, and physical store locations.
• Authorized staff credentials, email addresses, and cryptographic salts for PBKDF2 PIN verification.
• Terminal hardware telemetry (online/offline status, firmware version, and battery health) to ensure high system availability.

4. Security Standards & Tenant Isolation

Agevoro enforces strict organizational multi-tenancy. All data in transit is protected by TLS 1.3 encryption. Access controls follow the principle of least privilege, with support for modern passkey (WebAuthn) authentication and multi-factor authorization.

5. Regulatory Responsibility

Agevoro provides automated assistance to help retailers execute consistent age-checking policies. Merchants maintain ultimate legal responsibility for verifying customer eligibility under local, state, and federal laws.

6. Inquiries & Contact

For questions regarding our privacy architecture, data retention schedules, or compliance inquiries, please contact our privacy office at: