XipID privacy policy

Effective November 9, 2026.

Who we are

XipID is owned by XipHub Inc. and operated by Bryllyant Inc. ("Bryllyant", "we"). XipHub Inc. provides platform support to Bryllyant under a service agreement, with access limited to what that support needs. XipID is a company-operated service that is free for you and paid for by the organizations that use it.

What XipID is

XipID holds one identity for you and answers one question for the organizations you choose: is the person of record present and consenting, right now? An organization asks, you see the request in full and approve or decline it, and the organization gets a signed answer.

What we collect, and when

• When you create your XipID (Tier 0): a phone number and an email address, each verified by an act of yours, and your agreement to receive verification texts, with the time you gave it.
• When you verify with a selfie (Tier 1): a short video selfie, checked to show a live person is there and, if the notice you agreed to said so, compared with your reference face. The video is not kept. Up to four photos from a selfie are kept for 90 days, then deleted, only when the organization asking chose to have them kept and the notice you agreed to said so. That organization may get them only if the request is disputed, and XipID records each time.
• When you verify with a government ID (Tier 2): the fields printed on the document, the data in its barcode or machine-readable zone, its portrait and the images of the document; your name, date of birth and address as the document states them; and your Social Security number, kept only as a keyed hash with its last four digits, to detect duplicate identities and to confirm to an organization you authorized that the number it holds matches. The full number is never shown to an organization.
• A reference face: the photo of you that your selfies and your document's portrait are compared with. It is a photo from your own selfie, or one an organization gave XipID until your own selfie replaces it.
• As you use XipID: every read of your record by an organization and every change to your consent; the requests organizations made and how you answered them; and the technical records any web service keeps to run and secure itself.
• How you use XipID's pages: what Google Analytics and PostHog record, as the section on analytics says.

How we use it

We may store, process, analyze and manage all the data this policy describes, sensitive data included, now and later, within the limits this policy and the terms of service set. We do not use your data to train AI models.

Who sees what

• Organizations. An organization sees only what a consent grant from you names, for the purpose it names, for as long as the grant is live, and it knows you by an identifier minted for that organization alone, so two organizations cannot join their records on it. It never sees your other organizations, your history with them, or your record beyond the grant. You can revoke any grant at any time in your XipID.
• Agents. An agent acting for you, registered by an organization, sees what a grant with an expiry names; renewing it is your own act.
• Service providers. Amazon Web Services stores XipID's data and runs its face and document checks; Amazon Web Services or Resend sends its emails; Twilio or Amazon Web Services delivers the texts; XipHub Inc. provides platform support. Each acts on our instructions and for no other purpose.
• Analytics. Google and PostHog receive how XipID's pages are used, and Google also uses what it receives for purposes of its own, as the section on analytics says.
• The law. When the law requires it, or to protect a person from fraud.

Text messages

XipID texts you only at a number you verified and agreed to on XipID's own consent screen, and only when you ask for a code or a request needs your confirmation, so message frequency varies. Message and data rates may apply. Mobile numbers and text message consent are not shared with third parties or affiliates for marketing or promotional purposes. The text message terms say how to stop the texts and how to get help.

Analytics

XipID uses Google Analytics and PostHog to learn how people use this site and the pages at app.xipid.org, so we can make them better. Each sets cookies of its own to tell one visit from the next, which the cookie policy names.

• Who they know you as. When you are signed in, XipID sends them an identifier it gives you, never your name, your phone number or an organization's identifiers for you. A member of an organization is known to them by that identifier too, with their organization's identifier in XipID beside it; PostHog alone gets the organization's name as well. XipID's own staff are known to them by their user identifier in XipID alone. On a request's page, PostHog alone also gets the asking organization's identifier in XipID, its name and the request's identifier; Google Analytics gets none of them.
• Recordings. PostHog also records how each page is used, with every text and every input masked, so a recording never shows what a page said or what was typed into it. It never records the camera.
• What never reaches them. No code, link, phone number, Social Security number, document or face reaches either of them.
• Google signals. Google Analytics runs with Google signals on. For a visitor signed in to a Google account with ads personalization turned on, Google adds demographic and interest data to XipID's reports and connects their visits across browsers and devices, and the reports show only totals. To do it, Google uses the Google Analytics cookies on XipID's pages together with Google's own cookies for that account.
• Data sharing. With data sharing on, Google may also access and analyze what it measures, to better understand online behavior and trends and to improve its own products and services. Google says how it uses what it receives in "How Google uses information from sites or apps that use our services", on Google's own page.
• Turning it off. The button "Turn off analytics", at the foot of every page, turns Google Analytics and PostHog off in that browser. Turning ads personalization off in Google's Ads Settings keeps Google from connecting what XipID's pages measure to your Google account.

How long we keep it

• A record an organization referred to XipID that you do not claim within 30 days is deleted, with everything it holds.
• A selfie video is not kept. Photos from it, where you were told, are kept for 90 days, then deleted.
• A reference face is kept for three years after your last interaction with XipID and then destroyed, or sooner when you delete your XipID or the organization that enrolled the face deletes it.
• The front and back of a document you verify with are kept for 90 days after XipID reads it, and its portrait for three years after that read. Each is then destroyed, or sooner when you delete your XipID.
• Your record and its history are kept for as long as your XipID exists. When you delete your XipID, it goes with all its data. After that, we keep what the law requires us to keep, and we may keep records about it that hold nothing that identifies you directly, such as your name, your date of birth, your street address or your Social Security number. Analytics records stay as they are, since they hold none of these. Copies in backups are erased as the backups expire, within 14 days. The service providers that deliver XipID's texts, send its emails and run its face and document checks keep their own records of them, for the time their own terms set.

Your rights and choices

In your XipID you can see every organization and agent with access and what each may see; how many times each organization has read your record since you gave it access, and when it last did; and the latest changes to your XipID. You can revoke any access at any time, choose whether to verify further, and delete your XipID. To exercise any right you have under the law where you live, write to help@xipid.org.

Security

Every access to your biometric data and documents is recorded. No service is perfectly secure; if a breach affects you, we will tell you as the law requires.

Cookies

XipID's own cookies keep you signed in and keep a request's page working in the browser that opened it, and Google Analytics and PostHog set cookies to measure how XipID's pages are used. The cookie policy names each one, says what it is for and how long it lasts, and says how to turn analytics off.

Children

XipID is not directed to children under 13, and we do not knowingly create a XipID for one.

Changes

When this policy changes, the new version is published here with its effective date.

Contact

Bryllyant Inc., help@xipid.org.