Privacy Policy — Wavy

1. Introduction

Wavy ("Wavy," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Wavy website, applications, and related services (collectively, the "Service").

This Privacy Policy applies to information we process about users of the Service. It should be read together with our Terms of Service, which describe your rights and obligations when using Wavy, including our platform-wide content licensing model.

By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect information in three general ways: information you provide directly, information generated through your use of the Service, and information from third-party service providers that help us operate Wavy.

Information You Provide

Account information: email address, password (stored in hashed form by our authentication provider), and username.
Profile information: display name, bio, avatar image, and other details you choose to add in settings.
Audio and content: audio recordings, uploaded clips, posts, replies, hashtags, and other materials you create or publish on Wavy.
Communications: messages you send to us for support, feedback, or legal notices.
Payment-related information: when you subscribe to Wavy Pro, payment details are collected and processed by Stripe. We receive limited billing metadata such as subscription status, Stripe customer ID, and transaction identifiers — not your full card number.
Reports and moderation submissions: information you provide when reporting content, including the reason for the report.

Information Collected Automatically

Usage and activity data: posts you create, clips you contribute, follows, notifications, plays, and other interactions with the Service.
Device and browser information: browser type, operating system, device characteristics, language settings, and similar technical data.
Log and security data: IP address, access timestamps, pages or features used, referring URLs, and error or performance logs generated by our hosting and infrastructure providers.
Authentication and session data: session tokens and cookies used to keep you signed in and protect your account.
Agreement records: when you accept our Terms of Service at signup, we store the agreement version, timestamp, and related audit metadata such as IP address and user agent.

Information from Third Parties

Authentication and infrastructure providers that host our database, storage, and backend services.
Payment processors that confirm subscription status and billing events.
Hosting and deployment providers that deliver the Service and generate operational logs.

Microphone and Media Access

If you use Wavy's in-browser recording features, your browser may request permission to access your microphone. Audio is captured locally in your browser and uploaded to our servers only when you choose to publish or save a clip. We do not access your microphone without your explicit browser permission.

3. How We Use Your Information

We use the information we collect to operate, secure, and improve Wavy, including to:

Create and manage your account and authenticate your access.
Host, transcode, store, display, stitch, and deliver audio content across the platform.
Enable social features such as profiles, feeds, follows, notifications, search, and remixing.
Process subscriptions, manage billing, and provide paid features such as Wavy Pro.
Enforce our Terms of Service, investigate reports, moderate content, and protect users and the platform.
Maintain records of legal agreement acceptance and compliance-related events.
Monitor performance, diagnose technical issues, prevent fraud and abuse, and improve reliability.
Communicate with you about your account, security alerts, service updates, and support requests.
Comply with legal obligations and respond to lawful requests.

4. How We Share Information

We do not sell your personal information. We share information only as described below.

With Other Users (Public Platform Nature)

Wavy is a social platform built around public audio collaboration. Information you choose to make available on the Service — including your username, profile details, posts, clips, and other User Content — is visible to other users and may be reused within the platform under the licenses described in our Terms of Service.

Do not post personal information you do not want to be visible to other users.

With Service Providers

We use trusted third-party providers to help us run the Service. These providers process information on our behalf and are permitted to use it only as needed to provide services to us, subject to contractual protections. Our key providers include:

Supabase — authentication, database, file storage, and serverless processing for audio and account data.
Stripe — payment processing and subscription management for Wavy Pro.
Vercel — application hosting, content delivery, and operational logging.

For Legal, Safety, and Business Reasons

To comply with applicable law, regulation, legal process, or governmental request.
To protect the rights, property, or safety of Wavy, our users, or the public.
In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.
With your consent or at your direction.

5. Public Content & Platform Licensing

Because Wavy is designed for collaborative audio creation, content you upload or record on the platform is intended for use by other users within the Service. Our Terms of Service grant other users broad platform-wide rights to use, remix, share, and redistribute your content on Wavy without additional permission or attribution.

This Privacy Policy does not limit those content licenses. It explains how we handle information associated with your account and activity. If you delete your account, some content may remain available on the platform where it has been incorporated into remixes, stitched compositions, or other users' lawful platform use, as described in our Terms.

6. Cookies & Similar Technologies

We and our service providers use cookies, local storage, and similar technologies to keep you signed in, remember preferences, protect against fraud, and understand how the Service is used.

Essential cookies and session storage are required for authentication and core functionality.
We may use limited analytics or performance monitoring through our hosting infrastructure to improve stability and security.
You can control cookies through your browser settings, but disabling essential cookies may prevent you from using parts of the Service.

7. Data Retention

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, enforce our agreements, and maintain security.

Account and profile information is retained while your account is active.
Audio and User Content may remain on the platform after you stop actively using an account, including in remixes or stitched outputs, consistent with our Terms.
Billing and agreement records may be retained for longer periods where required for accounting, tax, or legal compliance.
When you delete your account, we will delete or anonymize personal information where reasonably practicable, except where retention is required by law or legitimate business needs such as fraud prevention.

8. Security

We implement technical and organizational measures designed to protect your information, including access controls, encrypted connections (HTTPS), authenticated storage policies, and row-level database security.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Rights & Choices

Depending on where you live, you may have rights regarding your personal information. These may include the right to access, correct, delete, restrict, or object to certain processing, and the right to data portability.

Account Controls

Update your profile information in account settings.
Manage notification-related activity through the Service.
Manage or cancel Wavy Pro through billing settings and Stripe's customer portal.
Request account deletion by contacting us through available support channels.

Regional Privacy Rights

If you are located in the European Economic Area, United Kingdom, or certain U.S. states such as California, you may have additional rights under applicable privacy laws. We will honor valid requests in accordance with those laws.

To exercise your rights, contact us using the information in Section 13. We may need to verify your identity before responding.

Marketing Communications

If we send promotional communications in the future, you will be able to opt out using the unsubscribe method provided in those messages.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete the information and terminate the account as required by law.

Users between 13 and the age of majority should use the Service only with parental or guardian consent, as described in our Terms of Service.

11. International Data Transfers

Wavy is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate.

Those countries may have data protection laws that differ from the laws of your jurisdiction. Where required, we rely on appropriate safeguards for international transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date and version identifier at the top of this page. If changes are material, we will provide additional notice as required by law, such as by email or in-app notification.

Your continued use of the Service after an updated Privacy Policy becomes effective means you accept the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you would like to exercise your privacy rights, contact us through the support channels available in the Service or at the contact address provided on the Wavy website.

We will respond to verified requests within the timeframes required by applicable law.