happycampr · Privacy

Biometric Retention & Destruction Policy

Draft

This is a working draft pending legal review. It describes our current practices in plain language; it is not a substitute for the final, counsel-reviewed policy.

What we collect

When you take a voice interview, happycampr records your audio and derives a voiceprint — a mathematical representation of your vocal characteristics. Under the Illinois Biometric Information Privacy Act (BIPA) and comparable laws in other states, a voiceprint is a regulated biometric identifier.

We also store the interview transcript and basic technical metadata about the session (timing, the room it ran in, and diagnostic information about how the call connected).

Why we collect it

We use your recording and its transcript to produce screening results for the employer whose job you applied to, and to operate, debug, and improve the happycampr service — including improving the models that analyze interviews.

We do not use your voiceprint to identify you across other contexts, and we do not use it for any purpose beyond the ones described here.

Where it is stored

Audio recordings are written to a private storage bucket that is not publicly reachable; access is granted only through short-lived signed links minted on demand for authorized internal use. Transcripts and session metadata are stored in our managed Postgres database.

Data is encrypted in transit and at rest by our infrastructure providers. Internal read access to recordings and consent records is restricted to administrators.

How long we keep it

We retain voice recordings and voiceprints for one year from the interview, after which they are deleted. We keep them for this period to provide screening results to the employer you applied to, to debug and support the service, and to improve our analysis models.

We may delete sooner at your request (see “Your choices” below).

How we destroy it

On expiry of the one-year retention period, the recording and any derived voiceprint are deleted. When a recording or transcript is removed, the record is scrubbed in place and marked as deleted so it cannot be recovered or re-derived.

Deleting an interview also removes its associated consent record. Destruction follows the standard described here and is not left to ad-hoc manual action.

We never sell or share it

We do not sell, lease, trade, or otherwise disclose your voice recordings or voiceprint to third parties for their own use. Limited processing by our infrastructure providers (for hosting, storage, and telephony/recording) happens solely to operate the service on our behalf.

Your choices

Taking the interview is voluntary. You may decline at the consent screen, and you can stop an interview at any time.

At the start of an interview you are issued a one-time deletion code. You can use it to request deletion of your interview before the one-year retention period ends. (The self-service deletion experience is still being built — until it ships, deletion requests are handled by an administrator.)

Legal basis

We collect and process this data with your consent, recorded at the start of each interview. This policy is intended to support compliance with BIPA and similar biometric-privacy laws and with applicable consumer-privacy laws such as the California Privacy Rights Act (CPRA).


Consent copy version 2026-06-07. Questions about your data? Contact your happycampr administrator.

Return home