The proposed class action lawsuit alleges the exchange violated privacy laws in Illinois when it collected and stored users' fingerprints and facial scans.