Biometric policy

Version 2026-10-05

Surface Scholars (surfacescholars.com) is run by Gateway Futures Inc., 399 Fremont Street, San Francisco, CA 94105. This policy covers voiceprints, the only biometric data we collect.

What a voiceprint is

A voiceprint is a list of numbers our speech software makes from a recording. It describes how your voice sounds. It is not a recording of your voice.

Why we collect it

Only to protect datasets from fraud: to catch one person posing as many people, someone recording with another person's voice, and fake referrals. We use it for nothing else.

Your written consent

We make a voiceprint only if you tick "Allow voice matching to protect datasets" under Account, Voice. Ticking that box is your written consent. We keep the exact words you agreed to and the time. Saying no never affects your work or pay. You can untick it at any time.

Who sees it

Nobody sees the numbers. Staff see only a line such as "same voice as another account". Voiceprints are never in a dataset, an export or a release, and never go to buyers.

No sale

We never sell, lease or trade your voiceprint, and never profit from it in any other way.

Who handles it for us

Modal makes it, Neon stores it, and Vercel runs the service. They act only on our instructions. We give it to anyone else only if a law, a warrant or a court order requires it.

How long we keep it, and how we destroy it

We delete each voiceprint at the earliest of these: - right away when you untick voice matching; - right away when its recording is withdrawn or rejected; - right away when your Delete my data request is approved; - 30 days after its project closes (a project can choose 0 to 1,095 days); - 3 years after your last recording with us. If you live in Texas (the state you gave us, or your profile location if you gave none), we never keep it more than 365 days after its project closes or after your last recording, whatever the project chose. A daily job deletes it from our database and keeps a record that the deletion happened. That record holds no voiceprint. Database backups are gone within 30 days. We pause deletion only when the law requires us to keep data (a legal hold).

How we protect it

At least as carefully as our other most sensitive data: encrypted in storage and in transit, and reachable only by our own systems.

Your rights

You can untick voice matching, delete all your data, or ask what we hold, at any time. In the EU and UK, we rely on your explicit consent (GDPR Article 9), and you can complain to your data protection authority. This policy applies wherever you live, including Illinois, Texas and Washington.

Contact

Gateway Futures Inc., 399 Fremont Street, San Francisco, CA 94105, rishi@withgateway.ai

TermsPrivacy