Soroyi
/Data Retention Policy
Automated Lifecycle & Privacy-First Storage

Data Retention & Deletion

Last Updated: August 15, 2026 · Standard Architecture

Unlike broad content boards or message forums that store conversation history indefinitely, Soroyi is designed intentionally as a transient speaking queue. We believe voice notes and spontaneous questions should not linger forever.

1Retention Tiers

When a host creates a session, they configure one of three data retention periods depending on the sensitivity of the discussion:

24 Hours

Strict Privacy

Best for sensitive executive sessions, candid 1-on-1s, or confidential internal meetings. Recordings and contributions are permanently purged 24 hours after the session closes.

7 Days (Default)

Standard Window

Recommended for workshops, team webinars, and recurring community calls. Gives hosts time to review transcripts and follow up with participants before auto-deletion.

30 Days

Extended Window

Designed for monthly town halls or multi-week lecture series where questions need to be referenced over an extended follow-up cycle.


2Voice Recording Lifecycle & Instant Audio Purge

Audio recordings follow a strict, secure lifecycle:

  1. Capture & Upload: Voice recordings (WebM/Opus) are captured in your browser and uploaded directly to private storage with random identifiers.
  2. Transcription: The audio is streamed securely to the OpenAI Whisper API to produce a text transcript for participant review.
  3. Access via Signed URLs: Audio files are never publicly readable. Only authorized moderators receive temporary 1-hour signed playback URLs.
  4. Instant Manual Purge: Hosts can click “Delete all audio recordings” from the session report at any time. This permanently deletes the raw audio files from storage while preserving anonymized text transcripts for summary analysis.

3Data Export Before Deletion

Hosts can export full session reports as structured CSV files before the retention window expires. Exported reports include question text, AI transcripts, participant visibility choices, timestamp records, and moderation status tags, allowing teams to archive insights in their own compliant record-keeping systems.


4Permanent Session Deletion

When a session is manually deleted by the owner in the Danger Zone:

  • All voice recordings in storage are immediately deleted.
  • All contributions, questions, transcripts, and queue events are permanently removed from Postgres via cascading deletion.
  • Co-moderator invitations and participant associations are invalidated instantly.