Biometric Privacy Addendum

IMPORTANT BIOMETRIC DATA NOTICE: This addendum addresses voice biometric data collection and processing in compliance with Illinois BIPA, Texas CUBI, Washington biometric laws, and other applicable biometric privacy regulations.

Biometric Data Collection Notice

Magicvisor's AI-powered call management service processes voice recordings that may contain biometric identifiers. This addendum details our biometric data practices and your rights under applicable biometric privacy laws.

Last Updated: 9/8/2026
Effective Date: This addendum supplements our Privacy Policy and Terms of Service

Illinois Biometric Information Privacy Act (BIPA) Compliance

Required BIPA Disclosures

Under Illinois BIPA, we are required to inform you:

  • Collection Purpose: Voice recordings are collected to provide AI-powered call management, transcription, and customer service improvement
  • Retention Period: Voice biometric data is retained for 90 days or until the purpose is fulfilled, whichever comes first
  • Destruction Timeline: Biometric data is permanently deleted when retention period expires or upon account closure
  • No Sale: We do not sell, lease, trade, or otherwise profit from your biometric information

BIPA Consent Requirements

Before collecting biometric data from Illinois residents, we obtain:

  • Written consent or consent through our digital platform
  • Clear disclosure of collection, retention, and destruction practices
  • Opportunity to withdraw consent at any time
  • Notice of any changes to biometric data practices

Multi-State Biometric Law Compliance

Texas CUBI (Capture or Use of Biometric Identifier)

  • Notice before biometric data collection
  • Consent for commercial use of biometric identifiers
  • Secure storage and transmission protocols
  • Right to request deletion

Washington State Biometric Privacy

  • Written consent for biometric data enrollment
  • Clear purpose limitation for biometric use
  • Reasonable security measures implementation
  • No sale or disclosure without consent

Voice Biometric Processing Details

Types of Biometric Data Collected

  • Voice Recordings: Audio recordings of customer calls for transcription and analysis
  • Voice Patterns: Speech characteristics used for AI training and service improvement
  • Vocal Metrics: Pitch, tone, and cadence for AI conversation optimization
  • Speech Transcriptions: Text representations of voice data

Processing Purposes

  • AI model training and improvement
  • Call quality assurance and monitoring
  • Customer service optimization
  • Fraud detection and prevention
  • Legal compliance and dispute resolution

Biometric Data Security

Technical Safeguards

  • AES-256 encryption for all voice recordings at rest
  • TLS 1.3 encryption for all voice data in transit
  • Access controls limiting biometric data access to authorized personnel only
  • Regular security audits and penetration testing
  • Secure deletion protocols ensuring complete data destruction

Organizational Measures

  • Employee training on biometric data handling
  • Confidentiality agreements for all staff accessing biometric data
  • Incident response procedures for biometric data breaches
  • Regular review and update of biometric data policies

Your Biometric Privacy Rights

Universal Rights

  • Right to Notice: Clear information about biometric data collection and use
  • Right to Consent: Explicit consent before biometric data processing
  • Right to Withdraw: Withdraw consent at any time with immediate effect
  • Right to Deletion: Request immediate deletion of your biometric data
  • Right to Access: Request information about how your biometric data is used

State-Specific Rights

  • Illinois BIPA: Right to damages for violations ($1,000-$5,000 per violation)
  • Texas CUBI: Right to injunctive relief and actual damages
  • Washington: Right to civil action for violations
  • All States: Right to file complaints with state attorneys general

Consent Management

How to Provide Consent

  • Digital consent through our platform during onboarding
  • Verbal consent recorded during initial call setup
  • Written consent for high-volume commercial users
  • Granular consent options for different processing purposes

How to Withdraw Consent

  • Account settings: Manage biometric consent preferences
  • Email: Send withdrawal request to hello@magicdesk.ai (Subject: Biometric Consent Withdrawal)
  • Phone: Call our biometric privacy hotline
  • Written request: Mail formal withdrawal notice

Third-Party Biometric Processors

We work with certified third-party services for biometric processing:

  • AI Voice Providers: All providers maintain biometric data compliance
  • Transcription Services: Use of certified, compliant transcription providers
  • Cloud Storage: Biometric data stored only with compliant cloud providers
  • Data Processing Agreements: All third parties sign biometric-specific DPAs

Contact Information

Biometric Privacy Officer

Email: hello@magicdesk.ai

Subject Line: Biometric Privacy Inquiry

Mail: Magicvisor LLC

Attention: Biometric Privacy Officer

Reference: Biometric Privacy Inquiry

Phone: 517-5234-5551

Response Time: Within 48 hours for urgent requests

State-Specific Contacts

All State-Specific Inquiries: hello@magicdesk.ai

Illinois BIPA: Subject: Illinois BIPA Compliance

Texas CUBI: Subject: Texas CUBI Compliance

Washington Privacy: Subject: Washington Biometric Privacy

Response Time: Within 48 hours for biometric privacy matters

Your biometric privacy is important to us. This addendum provides additional protections beyond federal and state requirements.