WAVLNGTH Privacy Policy

1. Introduction

Welcome to WAVLNGTH ("we," "our," or "us"), a web app for music creation and collaboration. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our web app and related services (collectively, the "Service"). By using our Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. What Information Do We Collect?

We collect information you provide and data generated through your use of the Service.

2.1 Information You Provide

• Account Information: When you sign up, we collect your name, email address, username, and encrypted password. If you use Google or Apple sign-ups, we receive limited data (e.g., email, avatar), subject to their privacy policies.
• Profile Information: Details you add to your profile, such as bio, location, profile picture, and social media links.
• Content: Music, audio files, comments, or messages you upload or share.
• Payment Information: Billing details and transaction history processed securely via Stripe for purchases or subscriptions.
• Communications: Information from contacting us or messaging other users.

2.2 Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent, and referring websites.
• Device Information: IP address, browser type, operating system, and device identifiers. When using our web app on mobile devices, we collect this data to optimize performance.
• Location Information: Approximate location derived from your IP address for analytics and personalization.
• Cookies: We use only strictly necessary cookies (e.g., for logins, session management). You can manage cookies via your browser settings. We do not use non-essential cookies (e.g., for analytics or advertising) at this time.

2.3 Information from Third Parties

We may receive aggregated data from service providers (e.g., Stripe, Supabase) or partners, such as usage statistics or payment insights, to improve our Service.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service, including account management and music collaboration features.
• Process payments and deliver purchased services via Stripe.
• Enable music uploads, sharing, and interactions between creators and listeners.
• Personalize your experience with tailored content recommendations.
• Send updates, newsletters, or promotional offers (you can opt out at any time).
• Analyze usage trends to optimize the Service.
• Ensure security, detect fraud, and protect our rights.
• Comply with legal obligations, such as tax reporting or responding to legal requests.

4. How We Share Your Information

We share your information only in specific circumstances:

• With Other Users: Your public profile, uploaded music, or comments, as per your privacy settings.
• Service Providers: We use Stripe for payment processing, Supabase for database hosting, and Google/Apple for account sign-ups. These providers process data under strict confidentiality agreements. See their privacy policies for details.
• Business Transfers: If WAVLNGTH is involved in a merger, acquisition, or asset sale, your data may be transferred.
• Legal Requirements: To comply with laws, subpoenas, or to protect our rights, your safety, or others' safety.
• With Your Consent: When you explicitly agree to share data with third parties.

We do not sell your personal information to third parties for marketing purposes without your explicit consent.

5. Your Choices and Controls

You can manage your data through:

• Account Settings: Update your profile, privacy, or notification preferences.
• Marketing Opt-Out: Unsubscribe from promotional emails using the "unsubscribe" link or by emailing privacy@wavlngth.com.
• Third-Party Logins: Manage data shared by Google or Apple via their account settings.
• Cookies: Control cookies via your browser settings, as we use only essential cookies.

Depending on your location, you may have rights under privacy laws, including:

• Access: View the data we hold about you.
• Correction: Fix inaccurate data.
• Deletion: Request data deletion, subject to legal obligations.
• Restriction: Limit data processing in certain cases.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to data processing for marketing or analytics.

To exercise these rights, email privacy@wavlngth.com. We will respond within 30 days, as required by law.

6. Jurisdiction-Specific Rights

• California Residents (CCPA): You can opt out of data sales (though we do not sell data) and request access or deletion by emailing privacy@wavlngth.com.
• EU Residents (GDPR): You can request data portability or restrict processing. Contact us for details or file a complaint with your local data protection authority.

7. Data Retention

We retain personal information only as long as necessary for the purposes described or as required by law. For example:

• Account data is deleted within 30 days of a deletion request.
• Transaction records are kept for 7 years for tax purposes.
• Inactive accounts may be deleted after 2 years of inactivity, with prior notice.

8. Data Security

We protect your data with industry-standard measures, including:

• Encryption of passwords, payment data (via Stripe), and Supabase data at rest and in transit.
• Secure hosting and access controls via Supabase.
• Periodic security reviews to ensure data protection.

No system is 100% secure. In case of a data breach, we will notify affected users within 72 hours, as required by law. Report security concerns to privacy@wavlngth.com.

9. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect their data. If you believe a child has provided data, contact us at privacy@wavlngth.com to remove it.

10. International Data Transfers

Your data may be stored or processed in the United States or other countries with different data protection laws. We use safeguards, such as Standard Contractual Clauses with Supabase and Stripe, to protect data transferred from the EU or other regions. Contact us for details on these safeguards.

11. Compliance with Privacy Laws

We comply with applicable privacy laws, including:

• GDPR (EU): Providing user rights, consent, and data transfer safeguards.
• CCPA (California): Offering opt-out rights and detailed disclosures.
• COPPA (U.S.): Protecting children's data.

Email privacy@wavlngth.com for details on our compliance.

12. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or website notices at least 30 days before they take effect. The updated policy will be posted here with a revised "Last Updated" date. Continued use of the Service after changes indicates your acceptance.

13. Contact Us

For questions, concerns, or to exercise your rights, contact:

WAVLNGTH
Email: privacy@wavlngth.com
Address: New Jersey, United States