Data Retention Schedule
What each product stores, how long it stays, and when it goes. Clear operational policies without legal ambiguity.
Product-by-Product Data Lifecycle
Every Mecverse product specifies what data is persisted, how long records remain active, and the exact mechanism used for final removal.
| Product | Data Category | Stored? | Retention Period | Deletion Method | Operational Notes |
|---|---|---|---|---|---|
| InterviewRoom | Interview Transcripts | Yes | 90 days after session | Automated purge | Accessible to candidate and authorized hiring reviewers throughout retention period. |
| Evaluation Scores & Feedback | Yes | 90 days after session | Automated purge | Tied directly to interview session and transcript lifecycle. | |
| Spoken Audio Streams | Never stored | Transient in-memory only | Immediate discard | Voice packets are processed for real-time transcription and never persisted to disk or cloud buckets. | |
| Uploaded Resumes & Job Specs | Yes | 90 days after session | Automated purge | Retained strictly for generating context-appropriate technical interview prompts. | |
| WorkClave | Attendance Sessions & Timestamps | Yes | Duration of contract + 90 days | Hard purge post-contract | Continuously exportable via CSV / SFTP / API before contract termination. |
| Exception & Manager Approval Trails | Yes | Duration of contract + 90 days | Hard purge post-contract | Immutable audit log containing timestamps, reviewer IDs, and adjustment rationales. | |
| Locked Payroll Export Records | Yes | Duration of contract + 90 days | Hard purge post-contract | Reconciliation snapshots kept for statutory financial and compliance audit review. | |
| Biometric Punch Templates | Local device only | Hardware device lifecycle | Device hardware reset | Mathematical face/fingerprint templates remain encrypted on-device and are never uploaded to cloud servers. | |
| FlowTux | Support Tickets & Resolution Threads | Yes | Duration of contract + 90 days | Hard purge post-contract | Includes conversation history, internal triage notes, and assignee history. |
| Slack / Sentry / GitHub Metadata | Yes | Duration of contract + 90 days | Hard purge post-contract | Sync references and external IDs only; primary files stay hosted on your original platforms. | |
| AI Auto-Resolution Action Logs | Yes | Duration of contract + 90 days | Hard purge post-contract | Audit trail tracking classification accuracy and automated responses generated by Tux AI. | |
| HZRelay | Session Transport Logs | Yes | 30 rolling days | Automated rolling purge | Transport metrics, connection timestamps, and protocol handshake telemetry. |
| Audio Stream Payloads | Never stored | Zero persistence | Immediate discard | Real-time voice chunks are forwarded via WebSockets without local buffering or disk spooling. | |
| Stream Transcripts | Optional | 30 rolling days | Automated rolling purge | Only persisted if the customer explicitly configures transcript sink endpoints. | |
| Per-Stage Latency Traces | Yes | 30 rolling days | Automated rolling purge | Turn-taking ms breakdowns (VAD, STT, LLM, TTS) preserved for latency debugging. |
Retention Can Be Adjusted
Enterprise customers can define customized retention timelines for audit compliance—including shorter retention windows (e.g. 14-day auto-purge for candidate transcripts) or extended statutory holds.
Deletion operations are irreversible. We recommend setting up recurring automated CSV/SFTP exports before ending a subscription.
Data Residency & Protection
All product workloads and primary databases are hosted in India (Mumbai / Pune regions). Sensitive records are encrypted in transit via TLS 1.3 and at rest with envelope AES-256 encryption.