X

The only substantive change in this update is the replacement of the identity verification vendor. Previously, X sent your ID image, selfie (including face biometric data), and ID data to a company called Au10tix. The new policy names Persona as the data processor that handles and stores this information. All other terms — what data is collected, how long it is kept, and what X itself stores — remain the same.

If you verify your identity on X (for X Premium, safety purposes, Creator Subscriptions, or Ads Revenue Share), your government ID image, selfie, and biometric face data are now processed by Persona instead of Au10tix. The retention periods and X's own storage practices are unchanged. The policy does not explain why the vendor switched or provide details about Persona's own privacy practices — you would need to review Persona's policies separately if you want to understand how they handle your biometric data.