SONICVOX BIOMETRIC INFORMATION POLICY

Effective Date: June 1, 2026
Last Updated: June 1, 2026

Version: 1.0

This Biometric Information Policy is provided by WP Global Syndicate LLC, an Oklahoma limited liability company, doing business as SonicVox (“Company,” “we,” “us,” or “our”).

1. OVERVIEW

1.1 Purpose

This Policy is provided by WP Global Syndicate LLC, an Oklahoma limited liability company, doing business as SonicVox (“Company,” “we,” “our,” or “us”) and the Company may collect, store, and process biometric identifiers and biometric information as defined under various U.S. state laws, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and the Washington State Biometric Identifiers Law.

1.2 Scope

This Policy describes what biometric data we collect, why we collect it, how long we retain it, and how and when we delete it.

2. ROLE OF SONICVOX

2.1 Processor Role

In most cases, the Company acts as a data processor or service provider on behalf of Customers who determine the purposes and means of processing biometric data.

2.2 Controller Role

Where the Company acts as a direct data controller (e.g., account registration or direct user interaction), processing is governed by this Policy and the SonicVox Privacy Policy.

3. BIOMETRIC DATA COLLECTED

3.1 Types of Biometric Data

The Company may process biometric identifiers or biometric information, as defined under applicable law, including voiceprints or voice-derived identifiers that are capable of identifying a specific individual.

3.2 Examples of Data

This may include:

1. Voiceprints
2. Speaker embeddings derived from voice recordings
3. Acoustic characteristics used for speaker identification or verification

3.3 Data Collection Context

The Company processes such data only when a user uploads, records, or generates audio through features such as:

1. Voice cloning
2. Personalized text-to-speech
3. Speaker identification
4. Voice-to-voice synthesis

3.4 Data Minimization

The Company does not intentionally collect biometric identifiers beyond what is reasonably necessary to provide the selected Services.

4. PURPOSE OF BIOMETRIC COLLECTION

Biometric data is used solely to:

1. Generate personalized synthetic voices
2. Provide voice-to-voice or speech transformation features
3. Improve user-selected model accuracy
4. Support authentication or verification features (if used)

The Company does not use biometric data for purposes unrelated to providing the Services described above.

5. RETENTION SCHEDULE

5.1 General Principle

Biometric identifiers and information are retained only for the period necessary to fulfill the user’s selected service.

5.2 Retention Table

Data Type	Retention Period	Deletion Trigger
Uploaded voice recordings	30 days	User request or account closure
Voice models / cloned voices	12 months of inactivity	30 days after inactivity period
Speaker embeddings / intermediate data	90 days	Automatic purge
System logs containing derived biometric metadata	30–90 days	Automatic purge cycle

5.3 No Indefinite Retention

The Company does not retain biometric data indefinitely.

6. DESTRUCTION OF BIOMETRIC DATA

6.1 Deletion Triggers

When the applicable retention period expires or a verified deletion request is received:

1. Biometric data is deleted from active systems within thirty (30) days.
2. Backup copies are deleted or overwritten in accordance with the Company’s standard backup rotation schedule.
3. Deletion is performed using commercially reasonable methods designed to render the data permanently inaccessible.

7. DISCLOSURE AND SALE

7.1 Prohibited Activities

The Company will not:

1. Sell
2. Lease
3. Trade
4. Profit from
5. Share biometric identifiers or biometric information with any third party.

7.2 Permitted Disclosures

We may share biometric data only with service providers who support the functions of the Company and only under strict contractual controls.

8. USER CONSENT

8.1 Controller-Based Consent

Where the Company acts as a direct data controller, the Company obtains informed written or electronic consent prior to collecting or processing biometric identifiers, as required by applicable law.

8.2 Processor-Based Consent

Where the Company acts as a processor on behalf of Customers, Customers are responsible for obtaining and maintaining legally valid consent from data subjects.

8.3 Consent Mechanism

Consent is obtained through an explicit, affirmative action within the SonicVox interface and authorizes:

1. the collection of biometric data;
2. the use of such data for the purposes described in this Policy; and
3. retention of such data in accordance with the retention schedule above.

8.4 Withdrawal of Consent

Users may withdraw consent at any time, subject to lawful processing conducted prior to withdrawal.

9. USER RIGHTS AND REQUESTS

9.1 User Rights

Users may:

1. Request deletion of biometric data
2. Request a copy of biometric data
3. Withdraw consent

9.2 Contact Information

For requests, contact: privacy@sonicvox.ai

10. SECURITY OF BIOMETRIC DATA

The Company implements administrative, technical, and physical safeguards designed to protect biometric data consistent with industry standards and as described in the Security Overview and DPA.