Blue background banner

Instructure

Biometrics Privacy Policy

Effective Date: 7/10/2026

PURPOSE

Instructure, Inc. (“Instructure”) uses tools that capture biometric information from certain individuals to verify their access to Instructure’s products and services. This policy provides guidance regarding Instructure’s restrictions and obligations applicable to the collection, use, disclosure, security, retention, and destruction of biometric information.

For purposes of this policy, “biometric information” includes data used to identify specific individuals, such as scans of face geometry, retina or iris pattern, or other unique biological patterns or characteristics used to identify a specific individual.  

Instructure uses biometric information to assist with our verification processes.  We (and a third party on our behalf) may collect, use, and store biometric information consisting of scans of face geometry based on the government identification documents and photos of your face that you upload.  This information is used to verify your identity and eligibility to access certain Instructure services.  

BIOMETRICS COLLECTION, USE, & DISCLOSURE

Purpose of Biometrics Collection: Instructure uses biometric information, such as face scans, solely for identity verification purposes in order to allow access to our products and services.

Notice and Opportunity to Consent: Biometric information will not be collected or used without first:

  • Informing the individual(s), or the individual’s legally authorized representative(s), in writing of the following:
    • Instructure is collecting, using, and/or storing biometric information (as applicable), and that it needs consent to do so;
    • The specific purpose and length of term for which such biometric information are being collected, stored, and/or used; 
    • The right to withdraw consent from the biometric information processing, and how to do so.
  • Obtaining consent from the individual(s) or the legally authorized representative(s).
    • Individuals will be asked to complete a consent to permit the collection of their biometric information.
    • This consent can be declined or revoked at a later point, without adverse effects. Instructions for withdrawing consent are explained to individual(s) at the time biometric information is collected. However, anyone who declines or revokes consent will have to go through alternative verification processes.  

BIOMETRICS SECURITY, RETENTION, & DESTRUCTION

Security:  Instructure requires a reasonable standard of care to store, transmit, and protect from disclosure any biometric information collected by Instructure or Instructure’s third party partners.  Such storage, transmission, and protection from disclosure will be performed in a manner that is the same or more protective than how Instructure stores, transmits, and protects from disclosure other confidential and sensitive information.  

Retention and Destruction: Instructure retains biometric information only until the earliest of the following occurs: (1) the purpose for collecting or obtaining the biometric information has been satisfied; or (2) when it has been 3 years from the individual’s last interaction with us, or as otherwise required by law.

CONTACT

Instructure welcomes your comments or questions regarding this Privacy Notice. Please email us at privacy@instructure.com, or contact us at the following address, or phone number.

Instructure, Inc.
6330 S 3000 E, Suite 700
Salt Lake City, UT 84121
United States of America
Phone: +1 (800) 203-6755