Privacy Policy
What we collect
- Account information you provide: name, email address, and, if you enable SMS approvals, your mobile number.
- Identity verification evidence you choose to enrol: passkeys, verified sessions, and, where you opt in, government-ID verification results. You control which evidence is released to a relying party.
- Agent records: for agents you license, the registry records each authorization request and decision (tool name, a summary, a hash of the parameters, the disposition, the approver and time). The content of your files and commands stays on your machine; the registry stores hashes and summaries, not payloads.
- Technical data: IP address, browser and device information, and logs needed to run and secure the service.
How we use it
- To operate the service: route approval requests to you and record your decisions.
- To notify you, over the channels you enable, when an agent action needs your attention.
- To secure accounts, prevent abuse, and meet legal and audit obligations.
SMS / text-message notifications
If you enable SMS approvals, xChk sends transactional authorization requests to the mobile number you provide: a notice that one of your AI agents is requesting approval for a consequential action, with a link to review and decide, and alerts about stops on plates you answer for. You opt in by ticking a separate, unchecked consent box in your account settings and confirming a one-time code; consent is first-party and specific to your own account's notifications. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe and HELP for help. Full program details are on the text messaging page.
We will not share or sell your mobile information with third parties for promotional or marketing purposes. Mobile information is used only to deliver the xChk notifications you asked for, to confirm delivery, and to honour STOP and HELP requests. Text messages are transmitted by our messaging carrier solely to deliver them.
How we share information
- Relying parties you choose. When you sign in to a third-party service with xChk, we release only the evidence you approve, for that service.
- Service providers that host, store or transmit data on our behalf (cloud hosting, email and SMS delivery), bound to use it only for that purpose.
- Legal requirements. When required by law or to protect the rights and safety of users and the public.
- Evidence you export. Black Box Reports and other exports you generate are yours; sharing them is your decision.
We do not sell personal information, and we do not share it with third parties for their marketing.
Retention and your rights
Account data is kept while your account is open. Agent records are retained as evidence for the period required by your licence terms and applicable law, because their value is in being complete. You may access, correct or delete your account data, withdraw consents, and request a copy of the evidence held about you or your agents, by emailing support@xchk.io. A "Forget Me" request removes your identity evidence; verification proofs that depended on it stop resolving from that moment.
Security
Data in transit is encrypted. Passkeys never leave your device. Registry records are hash-chained and periodically anchored so that alteration is detectable. Report security concerns to support@xchk.io.
Children
xChk is not directed to children under 16 and we do not knowingly collect their information.
Changes and contact
We will post changes here with a new effective date. Questions: sean@maclawran.ca, Maclawran LLC, 1433 Flagler Ave, Key West, FL 33040, USA, +1 305 240 2984.