This policy states what biometric data Pythia’s products collect, why, how long we keep it, and how we destroy it. It is published to satisfy the Illinois Biometric Information Privacy Act and similar laws, and it applies wherever Pythia is used.
1. CustomersWe do not identify customers by their biometrics, and we do not keep any biometric identifier or biometric information about customers. Customer-facing features such as visit counts and aggregate demographic statistics do not identify any individual and do not create a biometric record of anyone.
2. EmployeesWith the employee’s consent, Pythia may create a biometric identifier for an employee, such as a facial template or, where a store enables it, a voice print, so that customer interactions can be credited to the employee who handled them. We do not store photographs for recognition. Biometric data is used for this purpose only.
3. ConsentNo employee is enrolled until the employee has been informed in writing of what is collected, why, and for how long, and has consented in writing or electronically. Consent is voluntary; an employee who declines can sign in another way. We keep a record of each consent.
4. Retention scheduleAn employee’s biometric data is kept only while it is needed for the purpose above. It is permanently destroyed at the earliest of:
- the employee's removal from the store's employee list or withdrawal of consent;
- the end of the employee's employment, once the store notifies us;
- 90 days after the employee's last sign-in;
- the end of the store's use of Pythia; or
- 3 years after the employee's last interaction with Pythia.
Consent records are kept for 3 years after the related biometric data is destroyed, as evidence of consent.
5. DestructionWhen a retention period ends, the biometric data is permanently deleted from our systems and from the equipment at the store. Copies in backups are removed within 30 days. Equipment returned to Pythia is wiped before reuse.
6. Protection, sale, and disclosureBiometric data is encrypted in transit and at rest, access to it is limited to what the purpose requires and is logged, and it is stored in the United States. We do not sell, lease, trade, or otherwise profit from biometric data, and we do not disclose it except to service providers acting on our behalf under written obligations, or as required by law.
7. QuestionsEmployees may ask their employer to view, correct, or delete their biometric data at any time. Questions about this policy: info@pythiascorecard.com.
8. ChangesChanges are posted here with a new version number and effective date. A change that shortens a retention period applies immediately; a change that lengthens one applies only to data collected after the effective date. See also our Privacy Policy.