Paravision, the other half of Persona's age verification system, does NOT claim to be GDPR compliant, nor do they specify any way in which they might be. Once your data is in their hands, you likely have little recourse in taking it back.

This, combined with the oopsie blunder of incorrectly claiming to its user base that Persona was based in the EU (when really it's a US-based company), really lowers any confidence I have in this whole system to next to nothing.

Age verification for VRChat is a great idea, but I would have expected them to have done just a little bit of research into the company they are deciding to trust with our sensitive data. And if they did do research, then the incompetence or apathy on their part is astonishing

Source: fintech.global/2023/11/20/p...

Persona partnered with this rebranded company (Paravision) to develop an AI-based age verification solution. THIS IS WHAT PERSONA USES TO VERIFY USERS' AGE

Source: www.theverge.com/2021/1/11/22...

Persona has a history of shady practices, including partnering with an AI company (Everalbum, rebranded to Paravision) that's been fined by the FTC for misuse of personal profiles and indefinite retention of user data.

This class-action lawsuit is extremely recent, literally last month. So it was heavily associated with the company around the time VRChat was deciding who to use for their age verification. They CHOSE this knowing full well that the company has a history of misusing personal data

Source: cookcountyrecord.com/stories/6656...