Privacy Policy

WavBin ("we", "us", "our") is operated by the WavBin team, based in the Commonwealth of Pennsylvania, United States. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices you have. Questions? Use the contact button below.

• Account information: email address, password (stored only as a salted hash), display name, artist name, avatar, and profile details you choose to add.
• Content: audio files, artwork, track titles, notes, tags, Lists, boards, pages, checklists, comments, and metadata such as ISRC, UPC, publisher, and writer splits.
• Payment information: handled by Stripe. We receive your subscription status, plan, billing interval, and a customer identifier. We never see or store your full card number.
• Support communications: messages you send us and their contents.

• Technical data: IP address, browser and device type, operating system, and time zone.
• Usage data: pages viewed, features used, playback and upload events, and error diagnostics.
• Security data: sign-in attempts, failed login counts used for account lockout, rate-limit counters, and session activity used for inactivity timeout.
• Share analytics: counts and timestamps of views and downloads on links you share, so you can see engagement.

We do not use advertising networks, cross-site trackers, or data brokers.

To make your library searchable, we generate derived data from your audio: waveform peaks, duration, estimated tempo and key, loudness and quality estimates, descriptive tags, and category suggestions. This derived data is stored with your account and used only to power your library, search, sharing, and Studio features.

• Provide, maintain, and secure the Service and your account.
• Process uploads, run analysis, power search, Studio, boards, and sharing.
• Process payments, manage subscriptions, and enforce plan limits.
• Send transactional messages such as sign-in, password reset, billing, and important service notices.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Diagnose errors and improve performance and features using aggregated or de-identified data.
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

• Contract: to provide the Service you signed up for.
• Legitimate interests: security, abuse prevention, service improvement.
• Consent: optional features such as browser notifications; withdrawable at any time.
• Legal obligation: tax, accounting, and lawful requests.

• Supabase / Lovable Cloud — database, authentication, and encrypted file storage.
• Stripe — payment processing and subscription billing.
• AI processing providers — for tags, search, quality estimates, and board planning. Only the data needed for the feature is sent. We do not permit these providers to use your content to train their models where that control is offered.
• Hosting and delivery infrastructure — to serve the app and deliver files.

Providers act on our instructions under contract. We may also disclose information to comply with law or valid legal process, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (you will be notified of any change in control of your data).

Share links, public artist profiles, public tracks, Lists, and boards expose the content you select to anyone with the link or, for public profiles, to the open internet. You control password protection, expiry, and whether an account is required. Anything you make public can be copied and redistributed by others.

• Encryption in transit (TLS) and at rest for stored files.
• Row-level access controls so your files are reachable only by your account.
• Expiring signed URLs for shared audio; internal identifiers and storage paths are hidden from non-owners.
• Password hashing for share-link passwords, rate limiting, bot protection on sign-up, account lockout after repeated failed logins, and automatic session timeout after inactivity.

No system is perfectly secure. If a breach affects your data, we will notify you as required by law.

We keep your account data and content while your account is active. When you delete content it is removed from the Service and purged from backups on our normal backup cycle. When you delete your account, we delete or de-identify your personal data within 30 days, except records we must keep for tax, accounting, dispute resolution, or legal compliance. Expired share links and their analytics are cleaned up automatically.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to withdraw consent. California residents may request disclosure of categories collected and opt out of sale or sharing — we do neither. You will not be discriminated against for exercising any right.

Manage most of this yourself in Settings, or use the contact button below. We respond within 30 days and may need to verify your identity. EEA/UK users may also lodge a complaint with their local supervisory authority.

We operate in the United States and our providers may process data in the U.S. and other countries. Where required, we rely on Standard Contractual Clauses or other approved safeguards for transfers out of the EEA and UK.

WavBin is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, use the contact button below and we will delete it.

We will post updates here with a new "Last updated" date, and notify you by email or in-app for material changes before they take effect.

WavBin
Commonwealth of Pennsylvania, United States
Use the contact button below.