What happens to your voice.

Biometric data — retention and deletion

Several US states treat the acoustic characteristics of a voice as a biometric identifier, so here is the exact ledger. Resonate measures how a voice lands — pitch dynamics, resonance, spectral balance. We do not identify people by their voices, and we do not build voice-identification or voice-matching features.

Outside the US there is no separate consent screen: this page and the reading page tell you the recording is deleted the moment it is analysed, and your browser asks its own permission before the microphone opens. In the US, where those biometric laws expect explicit informed consent, every free-reading surface puts a consent step with a biometric-consent checkbox in front of the microphone and the file picker, and our server refuses any reading marked as coming from the US unless that consent arrives with it.

For a free reading, in full:

• The audiois analysed in memory and deleted. It is never written to storage. (Signed-in recordings are stored deliberately — that’s the section above.)
• The measurements we keep are anonymous metric values — a metric name, a number, a voice profile, a timestamp. No account, no IP, no session, no recording attached, and nothing that could link two of your readings to each other.
• The consent record we keep exists for US visitors only, because only US visitors are asked to consent. It notes when a US-consented reading was analysed and which consent text was agreed to — stored beside the same salted one-way IP hash the rate limiter uses. The salt is secret; the hash cannot be reversed into your address. No audio, no name. For readings outside the US no consent record is created at all.

Retention: the anonymous samples are kept to build honest population percentiles, and the US consent records are kept because US biometric-consent laws expect us to show that consent happened. Neither contains your name, your audio, or your raw IP address. Rate-limit counters expire within the hour, as above.

Deletion: for account recordings, deleting a recording in the dashboard deletes the audio and its analysis, and deleting your account deletes all of them. For the anonymous flow there is deliberately nothing we could trace back to you — no identifier we hold can look up “your” samples. For any deletion request or question about this ledger, email admin@brandinhand.net and we’ll handle it.

The free in-depth report — what a claim stores

On the free reading, the deeper measurements come back to your browser encrypted with a key only our servers hold — your browser carries them but cannot read them, and we store nothing. If you never claim, the reading simply expires from your browser: nothing about it is kept anywhere beyond the anonymous metric values described above.

If you claim your free in-depth report by entering your email, that is the moment we first store something, and it is exactly this: your email address, the scores and acoustic measurements of that one reading, whether you asked for the short email series, and which link or campaign brought you to us. Never the audio — the recording was already gone before the claim existed.

Your report lives at a private link that works without an account; anyone who has the link can view it, and the page says so. Deleting the report — the link on the report page itself — removes the whole record: the scores, the measurements, your email address, and your place in any email series. Deletion is immediate and permanent.

Emails: the report link email always comes with a claim. The short series about your numbers is sent only if you left that box ticked, and every one of those emails carries a one-click unsubscribe; unsubscribing stops the series and keeps your report link working. Bounces and spam complaints stop our sending on their own.