I think it's prudent to assume that these companies are selling your information to anyone with two nickels to rub together, regardless of which tech celebrities they are linked to.
This is the part that loses me, my understanding was that this was only supposed to scan things offline, not collect any PII. Are they lying about not collecting the face scanned data?
There's two paths for verification, and the discussion on them is muddying things. There's k-id, which is the local-only age verification, and then there's a secondary process for places where k-id is indeterminate or their system flags you as possibly still being underage, and requires ID verification.
Previously, they handled this escalation path via Zendesk, which was breached revealing all of the messages with IDs.
No evidence that they sell your data against their privacy policy has ever come to light, so I think you should probably back that claim with evidence if you think otherwise.
To play devils advocate (i know nothing about discords use of data), isnt it trivial for any corporate counsel make legal statements like this that are not truthful? For example: we dont sell your data... we freely give it to our sister company with a common owner that sells your data.
That’s illegal under CCPA so if they did that to the data any California resident they would be in big trouble. More or less any transfer of data for which the company receives some benefit counts as a “sale” under CCPA.
That's not true at all. I worked with Palantir on a project for a prior company and they'd basically do whatever you wanted if you paid them. They had a very heavy data / "AI" presence and this was years ago. They certainly do not just do integrations.
