Persona
Persona Identities, Inc., headquartered in US. Website: withpersona.com. Methods offered: photo id, facial age estimation (face scan).
verified 6 September 2026
Retention, as published by Persona
“Persona deletes all of your personal information including any images within 3 days.”
Quoted from help.withpersona.com; checked 6 September 2026. Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary).
Vendor default versus deployer configuration
The same vendor's retention is often stated differently by each service that deploys it. Both are shown, dated. Where the rows differ, the difference is the fact; this site does not decide which is right.
| Deployment | Method | What the deployment states | What Persona states |
|---|---|---|---|
| ChatGPT | Facial age estimation (face scan) Secondary source (press) |
No published retention period found (checked 6 September 2026). Notes: Indexed help text: Persona "deletes your uploaded ID or selfie within 7 days"; OpenAI receives DOB or age only. |
“Persona deletes all of your personal information including any images within 3 days.” Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary) checked 6 September 2026 |
| ChatGPT | Photo ID Secondary source (press) |
No published retention period found (checked 6 September 2026). |
“Persona deletes all of your personal information including any images within 3 days.” Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary) checked 6 September 2026 |
| Facial age estimation (face scan) Primary source |
“Persona deletes all of your personal information including any images within 3 days.” Quoted from help.withpersona.com; checked 6 September 2026. Held by the vendor. Period as stated: 3 days (Persona help, 2026); July 2025 press reported 7 days. Notes: Reddit receives only the estimated age. |
“Persona deletes all of your personal information including any images within 3 days.” Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary) checked 6 September 2026 |
|
| Photo ID Primary source |
“Persona deletes all of your personal information including any images within 3 days.” Quoted from help.withpersona.com; checked 6 September 2026. Held by the vendor. Period as stated: 3 days. Notes: Reddit receives date of birth from the ID. |
“Persona deletes all of your personal information including any images within 3 days.” Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary) checked 6 September 2026 |
|
| Roblox | Facial age estimation (face scan) Primary source |
“Images and video used for Facial Age Estimation are deleted immediately after they've been securely processed.” Quoted from about.roblox.com, dated 7 January 2026; checked 6 September 2026. Held by the service and the vendor. Period as stated: immediately (Roblox statement); Persona reported to delete biometric data within 30 days for Roblox. |
“Persona deletes all of your personal information including any images within 3 days.” Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary) checked 6 September 2026 |
| Roblox | Photo ID Primary source |
No published retention period found (checked 6 September 2026). |
“Persona deletes all of your personal information including any images within 3 days.” Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary) checked 6 September 2026 |
| X and Grok | Facial age estimation (face scan) Secondary source (press) |
No published retention period found (checked 6 September 2026). Notes: X help page (age-assurance) returned 403; press quotes: "Au10tix and Persona delete images of IDs, selfies and extracted data after 30 days." |
“Persona deletes all of your personal information including any images within 3 days.” Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary) checked 6 September 2026 |
| X and Grok | Photo ID Secondary source (press) |
No published retention period found (checked 6 September 2026). Notes: As above; Stripe also named; Au10tix reported delisted. |
“Persona deletes all of your personal information including any images within 3 days.” Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary) checked 6 September 2026 |
Reported customers
- Reddit 14 July 2025 biometricupdate.com
- Roblox 7 January 2026 about.roblox.com
- ChatGPT 21 January 2026 siliconrepublic.com
- X and Grok 25 July 2025 ppc.land
Certifications
No certification recorded as of 6 September 2026.
The UK Age Check Certification Scheme (ACCS) registry lists certificates with their expiry dates; a certificate that has lapsed is recorded as such once the registry shows it.
Regulator actions and published incidents
Incidents
- — Exposed frontend: 2,456 files and 269 verification checks including watch-list/PEP screening reported by an independent researcher; Persona disputed the insecurity claim. The Oct 2025 Discord ID leak (~70k IDs) was via support vendor 5CA/Zendesk, not Persona. malwarebytes.com
Questions people ask about Persona
What does Persona say it keeps?
"Persona deletes all of your personal information including any images within 3 days." (help.withpersona.com; checked 6 September 2026). Period as stated: Deployer-configured: 3 days (Reddit FAQ, 2026), 7 days (Reddit press, Jul 2025), 30 days (Roblox), up to 3 years ceiling in Persona privacy policy (secondary). Deployers can configure a different period; the vendor page shows each deployment's own wording beside this.
Is Persona certified?
No certification is recorded for this vendor as of 6 September 2026. ACCS registry status is still being verified.
Has Persona been fined or had a data incident?
Incident, February 2026: Exposed frontend: 2,456 files and 269 verification checks including watch-list/PEP screening reported by an independent researcher; Persona disputed the insecurity claim. The Oct 2025 Discord ID leak (~70k IDs) was via support vendor 5CA/Zendesk, not Persona.
Which UK services use Persona?
Recorded deployments: ChatGPT (OpenAI), Reddit, Roblox and X (Twitter) and Grok.
Sources for this profile
Changes to this profile
Created 6 September 2026 from the research handover; no changes since.
Correct this entry
Vendors are welcome to correct their profile. Point us at the policy page and the wording is replaced with the quotation, dated. Send a correction. Nothing you send is published.