User Consent for PII Data

An introduction to collecting customer consent

Properly collecting customer consent and complying with all regional laws and regulations are critical operations for any business. To that end, Incode supplies the necessary tools to easily collect and manage consent for customers in all geographic regions (including GDPR regulated countries). This is a general guide. For the complete set of requirements regarding which types of consent need collected and how to collect it, please review your Master Service Agreement (MSA) and contact customer support.

Types of Consent

There are two primary types of consent that Incode requires, Privacy Consent and Machine Learning Consent.

  1. Privacy Consent: This is also commonly referred to as User Consent and collection is required for all customers.
  2. Machine Learning Consent: This consent stipulates that Incode has gathered the informed consent necessary to anonymize collected user data for the purpose of improving our machine learning models.

Collecting Consent

There are two primary methods for gathering the necessary consent and submitting it to Incode so that it can be stored with a user's identity. Please see your MSA for additional details.

  1. Dashboard: using the dashboard, customers can select the User Consent module. If you have your own custom consent, you can append Incode's privacy consent to your custom consent so that they are collected simultaneously. Then in the details of the User Consent module, input the title and the content of the privacy consent in the appropriate text boxes and save the flow.
  2. API: If consent is collected prior to performing an onboarding, the collected consent (which must include the required Incode consent) can be uploaded to a session via the API. To upload a consent object to an onboarding session, see this endpoint.

For custom integrations using our SDKs or a completely whitelabeled app that only uses our API, the above consent policies will need to be collected and sent to Incode. For most of our SDKs there are built-in modules, however, if an SDK does not have a built-in module, you can collect the consent via a custom screen and use our API to send the consent to Incode.

Local Laws and Regulations

While Incode provides tools to assist with compliance of local laws and regulations, it is the responsibility of every business to seek legal council and ensure that all local, state, and federal laws are upheld.