How long Infyva keeps each kind of data and how the period is applied. This table is generated from the same settings our deletion jobs use, so it changes when they change.
1. Schedule
| Data | How long we keep it | How it is applied |
|---|---|---|
| Audio and video recordings of answers | 90 days after the interview | Deleted by a daily job |
| Transcripts and interview answers | 2 years after the interview | Deleted by a daily job |
| Interview reports and scores | 2 years after the interview | Deleted by a daily job |
| Resumes and resume text | 2 years after the candidate's last activity | Deleted by a daily job |
| Optional demographic self-identification | 1 year after it was given | Deleted by a daily job |
| Optional face presence check (only if the candidate turned it on) | No face or voice template is made: faces are counted in the browser and only the result is kept, with the integrity signals. There is no voice check. | Nothing biometric is stored; a daily job removes any legacy template |
| Integrity signals (tab and window changes, copy and paste, screenshot shortcuts, developer tools, inserted text, assistant extensions, check results) | 2 years after the interview | Deleted by a daily job |
| Questions written for a candidate's interview | 2 years after the interview | Deleted by a daily job |
| Accommodation requests sent to the hiring team | 2 years after the request | Deleted by a daily job |
| Consent records (notice version, choices, time, IP address and browser) | 3 years after the interview, as proof of consent | Deleted by a daily job |
| Text and WhatsApp messages to candidates (status and text with links removed), and SMS screening answers | 1 year after the message | Deleted by a daily job |
| Phone interview call log (time, duration, masked caller number). Answer recordings from a call follow the recordings period above | 90 days after the call | Deleted by a daily job |
| Candidate phone numbers and text, WhatsApp and call opt-in records (source and time) | With the candidate's records; opt-in records as proof of consent | Deleted on an erasure request with the rest of the candidate's records |
| Interview link and session events | 90 days | Deleted by a daily job |
| ATS integration sync log (imports and results sent back to the hiring company's ATS) | 1 year | Deleted by a daily job |
| Recruiting outreach a hiring company sent (who was emailed, when, and why it stopped) | 2 years after the last message | Deleted by a daily job |
| Applications made on a company's careers page and the applicant's agreement to its notice | 2 years after the application | Deleted by a daily job |
| Demo and waitlist requests (name, work email, company, message, campaign tags, IP address, browser) and the marketing opt-in choice | 2 years after the last contact | Deleted by a daily job |
| Support tickets, replies and attached files | 2 years after the ticket is closed | Deleted by a daily job |
| Webhook delivery log (what was sent to a company's own systems, and the result) | 30 days | Deleted by a daily job |
| Email bounce and complaint reports | 1 year | Deleted by a daily job |
| Application and error logs | 90 days | Deleted by a daily job |
| Data export files prepared for download | 7 days | Deleted by a daily job |
| Account details (name, email, role) | While the account is open | Deleted on account deletion or an erasure request |
| Invoices, payments and the credit ledger | Up to 7 years | Kept for tax and accounting; candidate names are removed on erasure |
| Security and admin audit log (who did what, when, from which IP address) | 2 years | Deleted by a daily job; on an erasure request entries are kept with the person's email and IP address replaced |
| ID check result (verified or not verified), only for jobs that turn it on | Result: 2 years after the interview. ID images, selfie and biometric data are never stored by Infyva; the identity provider deletes them within 30 days | Deleted by a daily job |
2. Shorter periods set by a hiring company
A hiring company can set a shorter period for its own recordings, transcripts and reports. The shorter period then applies to that company's interviews.
3. How deletion works
- A daily job deletes records when they reach the end of their period. Nobody has to ask.
- An erasure request deletes a person's records across the service sooner. For interview records we first give the hiring company up to 30 days to say whether it must keep something for a legal reason.
- Some records are kept in a reduced form after an erasure: billing records for tax (name removed, and the person's own Stripe customer record deleted), audit log entries (email and IP address replaced), a support agent's replies on a customer's ticket (agent's name and email removed), a company's knowledge documents (no longer linked to the person who uploaded them), and a one-way hash of an address that bounced or complained, so it is never emailed again.
- Where our hosting provider keeps database backups, deleted data can remain in a backup until that backup expires. Backups are only used to recover the service.
- Biometric data has its own schedule and destruction guidelines in the biometric information policy.
4. Asking for earlier deletion
Use our privacy request page or email privacy@infyva.ai. Candidates can also ask the company that invited them. See the Privacy Policy and the candidate privacy notice.