Platform · Capture
LiveCapture that a privacy officer can sign, and an associate can see.
Issued hardware, armed only on shift and only on your network, with an indicator that cannot be switched off.
No camera, ever. No voiceprints. Retention window configured by you.
The capture and consent log
Capture and consent log
Northgate Fine Jewelers, Store 14
Thursday, March 13 · notice cards displayed at all capturing zones
Bridal counter
Rostered 10:00 – 19:00 · 9 conversations today
Watch counter
Rostered 10:00 – 19:00 · 4 conversations today
Seating area
Associate mute · 62 seconds remaining
Repairs desk
Outside rostered hours · capture disabled in firmware
Sample data. The log is visible to the store manager and to your legal and IT teams.
Capabilities
Six controls that decide whether capture is adoptable.
Issued hardware, never the associate’s personal phone
Capture runs on a device the retailer issues and controls. Nothing is installed on a personal phone, which removes the single largest source of associate objection and the messiest question in any privacy review.
A non-defeatable recording indicator
The indicator is wired to the capture path, not to software. Gaincraft hardware is physically incapable of covert recording, which is a specification rather than a promise.
Shift-aware arming, enforced in firmware
The device will not capture outside rostered hours. This is enforced in firmware, not merely in policy, so a misconfigured dashboard cannot cause an off-shift recording.
Geofence arming to the store network
If a device leaves the registered store network, capture stops. A badge carried home is an inert object.
A physical mute button, 90 seconds
One press gives the associate a 90-second pause for a personal call or a private word. The pause is logged as a pause, not as a gap.
Zone configuration
Counters, dispensing desks, seating areas and F&I offices are configured individually. Zones that should never capture are never armed.
In practice
How this works in a store
A store manager opens on a Thursday morning, pulls four badges off the dock behind the counter, and hands them out with the tills. The badges know the roster, so they arm themselves as each shift starts and disarm when it ends. The counter cards and the door decal are already in place from the signage kit.
Through the day the devices sit idle. Voice-activity gating means ambient store noise — the espresso machine, the polishing motor, the music — never leaves the device. Only speech at a configured zone is captured, and the indicator is lit whenever it is.
An associate takes a personal call and presses mute. Ninety seconds later capture resumes on its own, so nobody has to remember to switch it back on. At close, the badges go back on the dock, offload over the store network, and the manager sees a one-line capture log for the day.
Technical detail
The technical detail, in plain language
- Voice-activity gating
- On-device detection decides whether speech is present before anything is uploaded. Non-speech audio is discarded on the device and never reaches Gaincraft.
- Arming logic
- Three conditions must all be true: inside rostered hours, on the registered store network, and in a zone configured for capture. Any one failing disarms the device.
- Recording indicator
- Driven from the capture path in hardware. It cannot be disabled from the app, the dashboard, or a firmware setting.
- Mute behavior
- A physical press starts a fixed 90-second pause, visible on the device and recorded in the capture log as an associate-initiated pause.
- Offload and storage
- Encrypted in transit and at rest. Audio is retained only for the customer-configured window, then destroyed on schedule; behavior scores and coaching history remain.
- Zones
- Each physical position is registered separately with its own arming rules, so a repairs desk or a staff room can be permanently excluded.
FAQ
Questions we get asked
Walk your privacy team through the capture architecture.
We will take your legal and IT leads through arming logic, retention and the consent artifacts on one call.