Scope

This policy governs the voiceprints Prosody AI, Inc. ("ProsodyAI") uses to authenticate a returning speaker within a customer organization. A voiceprint is a numerical authentication credential derived from a person's speech. Applicable law may regulate it as a biometric identifier or biometric information.

Zero data retention

Audio and authentication outputs pass through only to produce an authentication result. ProsodyAI does not log, store, or train on that authentication data. Enrollment audio is processed in memory, is not written to durable storage, and is destroyed when the request completes.

The authentication credential is a separate record. ProsodyAI retains the derived voiceprint, the signed release authorizing its use, and the minimum metadata required to enforce the destruction schedule below. Session observability is a separate customer-controlled service governed by the Privacy Policy.

Purpose

ProsodyAI collects and uses a voiceprint solely to authenticate a returning speaker inside the customer organization that enrolled the person. Voiceprints are tenant-isolated and are not matched across customer organizations.

Written notice and release

Before ProsodyAI creates a voiceprint, the person or their legally authorized representative receives written notice that a voiceprint will be collected and stored, the specific authentication purpose, and the retention term below. ProsodyAI requires an electronic signature and records the signed policy version and server timestamp with the release.

Retention schedule

ProsodyAI permanently destroys a voiceprint at the earliest of:

the authentication purpose being satisfied or ending;
withdrawal of the release or a verified deletion request;
deletion or termination of the customer organization's account; or
three years after the person's last interaction through the Services.

The three-year period is a maximum. A daily destruction process removes records whose deadline has passed.

Destruction guidelines

Permanent destruction removes the voiceprint, the person's associated authentication state and fold history, and voice-authentication memory records from active systems. ProsodyAI also removes these records when a customer deletes the person through the Services. A valid warrant or subpoena issued by a court of competent jurisdiction may require a different schedule.

Safeguards and disclosure

ProsodyAI protects voiceprints using encryption in transit and at rest, tenant-isolated storage, least-privilege access, and audit logging. ProsodyAI does not sell, lease, trade, or otherwise profit from voiceprints. Disclosures follow the limited circumstances described in our Privacy Policy.

Contact

Requests may be sent to privacy@prosodyai.app.

Zero Data Retention Voice Authentication

Scope