Before: you decide
When fresh consent is needed, the screen shows who’s asking, why, which checks will run, which service providers are involved, and how long anything is kept. Nothing happens until you agree.
For people asked to complete a check
An app or website sent you here because it wants confidence that a real person is behind a sensitive request. Before your camera turns on, you’ll see who’s asking, why, and how long anything is kept, and you can say no.
The organization that sent you owns the account decision and any alternative path it offers.
One request · one company’s boundary
The whole thing, in order
A check carries its privacy terms with it, from the consent screen to the deletion schedule. Here’s the shape of it.
When fresh consent is needed, the screen shows who’s asking, why, which checks will run, which service providers are involved, and how long anything is kept. Nothing happens until you agree.
Your camera and microphone power the short guided session, and nothing else. We process the live streams as they happen and don’t keep them as recordings.
The organization gets a compact result: never your video or audio. Your consent and its governing terms are recorded, and deletion is on the calendar from the start.
No shared database
Everything from your check stays with the organization that asked for it. If you enroll with one company, no other company can compare against you, look you up, or even know the record exists.
What gets shared
The organization that sent you receives a structured summary: the check finished, here’s what was measured, here’s how it came out. It never receives your video, your audio, or the mathematical templates of your face and voice. What happens to your account afterward is that organization’s decision, not ours.
structured resultRetention
Before a fresh consent, the screen shows how long anything can be kept. That clock is attached to your check, and deletion runs when it expires. Service providers can have their own retention terms, listed in the current notice.
The consent screen shows the retention period before you agree, not buried in a document afterward.
The boundary that applied when you agreed is recorded with the check itself.
When the period ends, eligible data enters deletion. A still-active session can delay that briefly, and encrypted backups can hold copies for up to seven more days before they cycle out.
A minimal record of your consent and the deletion stays behind (proof it happened), kept separate from the deleted data.
A friendly voice may walk you through the steps and keep things moving. That’s the whole job. It doesn’t compare your face, judge your check, or tell anyone what to do with your account. And the provider list you see at consent is a policy disclosure: it doesn’t mean every listed provider ran during your specific check.
Common privacy questions
Yes. When fresh consent is needed, decline on the consent screen and nothing runs. A returning check might reuse a consent you gave recently, so you won’t always see a new screen. Whether there’s another way to do what you needed is up to the organization that sent you.
No. We process the live camera and microphone streams during the check and don’t keep them as recordings. The service providers disclosed on the consent screen may process live data for their described role, under their own terms.
It depends on the check. Enrolling creates protected face and voice templates so a later check can compare against them. Verifying compares fresh measurements against that enrollment without creating a new durable record. A uniqueness check may create protected impressions that live only inside that organization’s defined scope. A liveness check creates no identity record at all. Whatever is created stays inside that organization’s isolated boundary, is never sent to the organization itself, and is deleted on the disclosed schedule.
No. Your record lives inside the boundary of the organization that asked for the check. It isn’t searchable or usable by anyone else, including other Sonavera customers.
A structured result: the check’s status, timestamps, and normalized measurements of how the evidence came out. Not your video, not your audio, not your biometric templates, not the vectors used for matching.
Contact the organization that sent you with the details of the interaction; it manages your account relationship and can route the deletion request. For questions about Sonavera’s own practices, email privacy@sonavera.ai.
Regardless, Sonavera automatically deletes your data after the retention period expires.
No. This page explains the design in plain language. The consent screen shown for your specific check and the versioned platform legal documents are what count.
The current documents are always available: no account needed. And when fresh consent is required, everything on this page is shown to you before your camera turns on.