Important Note: This Privacy Policy specifically pertains to the data handling practices of the Txyber Client Liveness App (Chrome Extension). For the comprehensive privacy policy of Txyber.com, please visit our main website.
Introduction
Welcome to the Txyber Client Liveness App. This extension is designed to securely facilitate your liveness verification process. We are committed to protecting your privacy and handling your data with transparency. This policy outlines how the extension collects, uses, stores, and protects information.
1. Data Collected or Accessed by the Extension
The Txyber Client Liveness App acts as an orchestrator to enable a secure liveness verification. It collects and uses specific pieces of information strictly for this purpose:
- User ID and Transaction ID: These identifiers are securely transmitted to the extension from the Txyber backend. They are used solely to initiate and associate your liveness session with your unique transaction on the Txyber platform and with the integrated Ozforensics Liveness SDK. These identifiers may be considered Personally Identifiable Information (PII) if they directly link to your identity.
- Session ID (Event Session ID from Ozforensics): Upon successful completion of the liveness check, the Ozforensics Liveness SDK generates an 'Event Session ID'. This ID is received by the extension and securely transmitted back to the Txyber backend to confirm the completion of your liveness verification. It is displayed to you for manual copying but not persistently stored by the extension.
- IP Address (via X-Forwarded-For header modification): The extension receives a specific IP address (
proxy_host) from the Txyber backend. It then applies this IP address as an x-forwarded-for HTTP request header to outgoing web requests made to Txyber services and the Ozforensics Liveness SDK. This is crucial for network routing, geographic compliance, and ensuring the liveness session is processed correctly. The extension itself does not collect your actual device IP address for storage, nor does it capture your precise geographical location; it only transmits the designated IP for routing purposes.
- Web History (Limited Use): The extension monitors the URL of the active browser tab (`chrome.tabs.onUpdated`) to detect when you navigate to a specific Txyber liveness initiation page (`bls.txyber.com/selfie`). This enables the extension to automatically activate its functionality. It does not collect, store, or transmit your overall browsing history.
- User Activity (Limited Scope): The extension tracks the progression of your liveness verification flow (e.g., initiation, loading stages, success, or error states) to provide appropriate UI feedback and report status to the Txyber backend. This does not involve monitoring your general browsing activity outside of the liveness process.
2. How Data is Used and Shared
The data collected by the extension is used exclusively for its stated purpose: facilitating the Txyber liveness verification process.
- Internal Processing: User ID, Transaction ID, and Session ID are used to manage the liveness workflow within the extension and between our backend services.
- Third-Party Liveness SDK (Ozforensics): The extension loads and interacts with the Ozforensics Liveness SDK (plugin_liveness.php). When the SDK is launched, the User ID and Transaction ID are passed to it. **Important: The Ozforensics SDK directly handles the capture and processing of your biometric data (e.g., video selfie). The Txyber Client Liveness App (the extension) does NOT directly collect, transmit, or store your raw biometric data or images.** All biometric data handling, processing, and storage are governed by Ozforensics' own privacy policies and terms.
- Txyber Backend Communication: The extension communicates with Txyber backend APIs (bls.txyber.com/api) to fetch initial session details and to report the final liveness session outcome (e.g., 'Event Session ID' or error status).
- No Sale of Data: We do not sell, rent, or trade any user data collected by this extension to third parties.
3. Data Storage and Retention
- Temporary Storage: The extension primarily stores data temporarily in the browser's memory and session storage for the duration of a single liveness session. This data is cleared when the tab is closed or the session concludes.
- Persistent Storage (XFF IP): The dynamically set X-Forwarded-For IP address is stored persistently in your browser's local storage (`chrome.storage.local`) to ensure the network rule remains active across browser restarts. This specific IP is provided by our backend and is cleared automatically upon uninstallation of the extension or when the liveness process is completed/reset.
- No Cloud Storage by Extension: The extension itself does not store any user data on cloud servers. Data transmission is directly between your browser, Txyber backend, and the Ozforensics SDK.
4. Your Choices and Controls
- Installation/Uninstallation: You have full control to install or uninstall the Txyber Client Liveness App at any time through your Chrome browser's extension management settings. Upon uninstallation, the extension automatically removes any network rules it had applied.
- Browser Permissions: You can review and manage the permissions granted to this extension via Chrome's extension settings. However, please note that restricting essential permissions will prevent the extension from functioning correctly.
5. Security Measures
We implement technical and organizational measures to protect the data handled by the extension. This includes:
- Using secure, encrypted communication protocols (HTTPS) for all data exchanges with Txyber servers and the Ozforensics SDK.
- Minimizing data collection to only what is strictly necessary for the liveness process.
- Ensuring data transmitted to third-party SDKs is limited to necessary identifiers, with sensitive biometric data handled directly by the specialized SDK.
- Using standard Chrome Extension APIs for secure data storage (
chrome.storage).
6. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post any new Privacy Policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
7. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Txyber.com Support
Email: support@txyber.com
Contact Info: +44 7518 824920
Alternatively, you can reach out through our main website: https://txyber.com/contact
Last updated: