This policy explains what personal data Waves collects when you use usewaves.com and the Waves app, why we collect it, and the choices you have. We don't sell your personal data, and we never use your music to train AI models.
1. What we collect
- Account details: your name, email, profile photo, and password (stored as a hash). If you sign in with Google we receive your name, email, and photo.
- Your content: the audio, artwork, lyrics, notes, comments, markers, and credits you add, plus metadata we derive from audio such as duration, tempo, key, and waveforms.
- Billing: your plan and subscription status. Card details are handled by Stripe and never reach our servers.
- Usage and device data: sign-in sessions (IP address and browser), and plays and views on share links, including an approximate location at the city/country level.
- Cookies: see the Cookies section below.
2. How we use it
- To run Waves: storing and streaming your files, syncing playback, and sharing with collaborators.
- To keep accounts secure and prevent abuse, including rate limiting.
- To send notification emails about your projects. You can turn these off in Settings.
- To process payments and manage your subscription.
- To understand and improve the product, using aggregate analytics.
- With your consent, to measure our marketing campaigns.
3. Who we share it with
We share data only with the service providers that help us run Waves, and only what they need:
- Vercel for hosting, file storage, and privacy-friendly analytics
- Neon for our database
- Stripe for payments
- Resend for email delivery
- Google for sign-in and, if you accept cookies, Google Tag Manager
The people you invite or send share links to can see the content you share with them, along with your name and photo. We may also disclose data if the law requires it.
4. Cookies
We use essential cookies to keep you signed in and remember preferences. Waves won't work without them.
With your permission, we also load Google Tag Manager, which may set cookies used by advertising partners to measure sign-ups and purchases. These only load after you click "Accept" in the cookie banner, and you can change your choice anytime.
5. How long we keep it
We keep your account data and content until you delete it or delete your account. Items in Trash are permanently removed after 30 days. When you delete your account we remove your projects, files, and profile. We may keep limited billing records where the law requires.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can do most of this yourself:
- Edit your profile, export your data, or delete your account in Settings.
- Turn notification emails on or off in Settings.
- Change your cookie choice using the button in the Cookies section.
For anything else, email support@usewaves.com. You also have the right to complain to your local data protection authority.
7. Security
Files are stored privately and served only to people with access. Connections are encrypted with HTTPS, and passwords are hashed. No system is perfectly secure, but we work to protect your data and will notify you if a breach affects you.
8. Children
Waves isn't directed at children under 13, and we don't knowingly collect their data. If you think a child has given us data, contact us and we'll delete it.
9. Changes and contact
We'll post any changes here and let you know about significant ones. Questions? Email support@usewaves.com. See also our Terms of Service.