Biometric policy
Version 2026-10-05
Surface Scholars (surfacescholars.com) is run by Gateway Futures Inc., 399 Fremont Street, San Francisco, CA 94105. This policy covers voiceprints, the only biometric data we collect.
What a voiceprint is
A voiceprint is a list of numbers our speech software makes from a recording. It describes how your voice sounds. It is not a recording of your voice.
Why we collect it
Only to protect datasets from fraud: to catch one person posing as many people, someone recording with another person's voice, and fake referrals. We use it for nothing else.
Your written consent
We make a voiceprint only if you tick "Allow voice matching to protect datasets" under Account, Voice. Ticking that box is your written consent. We keep the exact words you agreed to and the time. Saying no never affects your work or pay. You can untick it at any time.
Who sees it
Nobody sees the numbers. Staff see only a line such as "same voice as another account". Voiceprints are never in a dataset, an export or a release, and never go to buyers.
No sale
We never sell, lease or trade your voiceprint, and never profit from it in any other way.
Who handles it for us
Modal makes it, Neon stores it, and Vercel runs the service. They act only on our instructions. We give it to anyone else only if a law, a warrant or a court order requires it.
How long we keep it, and how we destroy it
We delete each voiceprint at the earliest of these: - right away when you untick voice matching; - right away when its recording is withdrawn or rejected; - right away when your Delete my data request is approved; - 30 days after its project closes (a project can choose 0 to 1,095 days); - 3 years after your last recording with us. If you live in Texas (the state you gave us, or your profile location if you gave none), we never keep it more than 365 days after its project closes or after your last recording, whatever the project chose. A daily job deletes it from our database and keeps a record that the deletion happened. That record holds no voiceprint. Database backups are gone within 30 days. We pause deletion only when the law requires us to keep data (a legal hold).
How we protect it
At least as carefully as our other most sensitive data: encrypted in storage and in transit, and reachable only by our own systems.
Your rights
You can untick voice matching, delete all your data, or ask what we hold, at any time. In the EU and UK, we rely on your explicit consent (GDPR Article 9), and you can complain to your data protection authority. This policy applies wherever you live, including Illinois, Texas and Washington.
Contact
Gateway Futures Inc., 399 Fremont Street, San Francisco, CA 94105, rishi@withgateway.ai