Biometric Data Retention and Destruction Policy

1. What we derive, and why

Framesite analyzes video and audio that our customers own or are authorized to publish. Where a customer enables identity attribution, we retain voiceprints and may perform a transient face-matching query:

• Voiceprints — numerical representations of a speaker’s voice, computed from audio already being transcribed.
• Reference-headshot matching — an approved image is sent to our video understanding provider only to search the customer’s indexed footage. Framesite does not derive or store a face embedding, face template, or face geometry.

The sole purpose is speaker and person attribution within the customer’s own video library — recognizing that the same person appears across that customer’s videos, so their name and role can be applied consistently. We do not use these identifiers for surveillance, identification against any external database, or any purpose beyond attribution within the workspace that produced them.

2. Retention schedule

We permanently destroy stored biometric identifiers at the earliest of the following:

• When the purpose has been satisfied — when the identifier is no longer needed to attribute people within the customer’s library.
• On withdrawal of consent — when a workspace administrator disables identity attribution and requests deletion of what was already derived.
• On account termination — within 30 days of termination or of a verified deletion request, alongside all other customer data.
• Within three years of the individual’s last interaction with our customer through the service.

We do not retain biometric identifiers beyond these points, and we do not extend retention for our own purposes.

When a video or workspace is permanently deleted, we also delete its corresponding indexed video from TwelveLabs. TwelveLabs represents that deletion is immediate and removes the indexed asset and associated information.

3. How destruction is carried out

Destruction is permanent deletion of the stored numerical representation from our production database, not archival or de-identification. Deleted identifiers are not recoverable from the live system and are not retained in any secondary index.

Where a customer disables identity attribution, we offer deletion of previously derived voiceprints as part of the same action. Where a workspace is deleted, its voiceprints and provider-held video indexes are deleted with it. Deletion is confirmed in writing on request.

Routine encrypted infrastructure backups may retain a copy for a limited period until those backups age out on their normal cycle. Such copies are not accessible to the application, are not used for attribution, and are not restored except in a disaster recovery event.

4. What we never do

• We do not sell, lease, trade, or otherwise profit from biometric identifiers.
• We do not transmit stored voiceprints to a subprocessor. When identity attribution is enabled, an approved reference headshot is sent to TwelveLabs for transient matching; TwelveLabs represents that it does not retain the query image or a face template from it.
• We do not use one customer’s identifiers to produce output for any other customer, and identifiers never cross between workspaces.

5. Consent

Framesite processes video supplied by its customers. Where consent is required from an individual appearing in that content, our customer — the business that uploaded or authorized retrieval of the video — is responsible for obtaining it, and we make available the information reasonably necessary for them to do so.

This does not displace the rights of the individual. If you appear in video processed through Framesite and wish to know whether we hold a biometric identifier derived from you, or wish it destroyed, contact us directly using the details below. We will act on that request whether or not it comes through our customer.

6. Requesting deletion

Send a request to isaiah@framesite.ai. We will acknowledge within two business days and complete a verified deletion request within 30 days, confirming completion in writing. There is no charge.

7. Changes to this policy

If we change this schedule, we will update this page and the date above. This address remains the published location of our current retention schedule and destruction guidelines.