Privacy policy and terms of service (ToS) URIs

Adding privacy policy and terms of service (ToS) URIs to your application ensures users have access to important legal documentation before granting consent. Including these links in the consent flow promotes transparency and helps meet legal and compliance requirements.

Privacy policy URIs

A Privacy Policy URI should explain how your application collects, uses, and protects user data. It should cover data handling practices, user rights, and relevant privacy information.

ID.me allows developers to include a privacy_policy_uri on the consent screen. This link should direct users to your privacy policy or legal statement that outlines how you gather, use, disclose, and manage customer data.

Terms of service URIs

A Terms of Service (ToS) URI should define the rules and expectations for using your application. This includes user responsibilities, acceptable use, intellectual property rights, and disclaimers.

ID.me supports a terms_of_service_uri parameter that links users to your ToS agreement during the consent process. This ensures users understand the terms they are accepting before proceeding.

Best practice

Including both the Privacy Policy URI and Terms of Service URI in your configuration allows users to proactively opt in to your company’s policies during the consent flow, eliminating the need to prompt users again after verification