Privacy Policy

Account identity, through LinkedIn sign-in: your name, email, and a stable subject identifier. Profile information you choose to add: roles, skills, education, references, languages, and coarse location. Contact details such as email and phone, held privately. Verification results when you choose to verify identity, credentials, or a phone number. Sensitive attributes such as date of birth, stored encrypted and used only to compute yes or no predicates.

To build your verified profile, compute an explainable, structured signal, and let employers discover you without exposing your identity, and to operate and secure the service.

Only a QR code that resolves to a request page. No name, contact, documents, or personal metrics appear on the public surface. A viewer can confirm that a verified profile exists and ask for access.

Contact and private data are released only under an access grant you approve. Every grant is scoped and time bound, and every access is recorded. You can deny, revoke, or expire access at any time. Protected attributes such as age, date of birth, and nationality are never used in ranking or discovery, and are exposed only as predicates under a grant.

LinkedIn provides authentication. When you enable them, optional providers may process data for a specific feature: identity verification, phone messaging, and applicant-tracking integrations. Documents used for identity verification are processed by the provider and are not stored by XP, which keeps only the result.

You can export your data and erase your account at any time. Erasure removes your data across the platform. Verified facts issued by an institution or employer can be hidden by you and are removed on full account erasure.

Data is encrypted in transit and at rest, with per-record keys for private fields, strict tenant isolation, and audit logging across the access lifecycle.

For privacy requests, contact privacy@xp.cards. This policy may be updated; the effective date above reflects the current version.