Identity verification

When your rental request is approved, you'll be prompted to complete a one-time identity check. Stripe will ask you to:

• Take a photo of a government-issued photo ID (passport, driving licence, or national ID).
• Take a short selfie so Stripe can match your face to the document.

The check usually takes under a minute and only needs to be done once. Future rentals won't require it again as long as your verified status is still valid.

We never see or store copies of your ID document or selfie. Those images are captured directly by Stripe inside their secure verification flow and never touch Gumbudii's servers.

From Stripe, we only receive:

• A verified / not verified result
• The verified first and last name on the document
• Confirmation that Stripe checked you are 18 or over (we do not store your date of birth)
• The time and reference ID of the check for our audit log

We store these fields against your account so we don't need to ask you to verify again for future rentals.

Stripe Identity is a GDPR-compliant identity verification service processed under Stripe's data protection terms. Stripe acts as an independent controller for the document images and biometric data it collects.

• All data is transmitted over TLS and encrypted at rest.
• Access to your verification result on our side is restricted to Gumbudii admins on a need-to-know basis and is audit-logged.
• Your ID document and selfie are handled by Stripe under their published privacy policy.

We keep the verified result (verification reference, outcome and timestamp) for as long as you have an active Gumbudii account, and afterwards for as long as we are required to retain records for accounting, fraud-prevention and legal obligations.

You can request access to, correction of, or deletion of the data we hold about you at any time by emailing team@gumbudii.com. Deleting your identity record will require you to re-verify before any future rental.

Stripe's retention of the underlying document and selfie images is governed by Stripe's own policy, independent of Gumbudii.