Privacy Policy

Last updated: May 4, 2025

Wavdock ("we," "us," or "our") operates the Wavdock platform at wavdock.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using Wavdock, you agree to this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, name, and profile image through our authentication provider (Clerk). We store your email, name, profile image URL, and an internal user identifier in our database to provide the Service.

1.2 Audio Files

When you upload audio files (MP3, WAV, FLAC, M4A, AAC, OGG, AIFF), they are stored in our cloud storage (Cloudflare R2). Audio files are retained in your account until you delete them or delete your account.

1.3 Analysis & Metadata

When you analyze a track, we process the audio to extract attributes including BPM, musical key, genres, subgenres, moods, instruments, vocal characteristics, production style, tempo feel, era, similar artists, tags, language, lyric transcription, and explicit content detection. We also generate a text description and vector embeddings for semantic search. All analysis results are stored in your account.

1.4 Catalog Organization

We store data about how you organize your catalog, including folder structures, playlists, track ordering, and any manual edits you make to track metadata.

1.5 Contacts & Credits

If you use the contacts and credits features, we store contact information (name, email, phone, PRO, IPI number, publisher, roles) and credit/split data you associate with tracks.

1.6 Chat Conversations

When you use the AI chat assistant, we store your conversation history (messages, tool calls, and results) in your account. Chat conversations are always scoped to your individual user, even within an organization, and are not visible to other team members.

1.7 Share Links

When you create share links, we store the link token, associated content, expiration settings, download permissions, and view counts.

1.8 Usage Analytics

We use Mixpanel to collect anonymized usage data to understand how the Service is used and to improve it. This includes events like uploads, analyses, searches, and feature interactions. We associate analytics data with your user ID to provide per-account insights.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Authenticate your identity and manage your account
  • Store and serve your audio files
  • Analyze your audio using AI to generate metadata and attributes
  • Power search, filtering, and AI-powered music discovery
  • Enable sharing of tracks, folders, and playlists via secure links
  • Process payments and manage subscriptions
  • Communicate service updates, security alerts, and support responses
  • Detect and prevent abuse or violations of our Terms
  • Comply with legal obligations

3. How We Do NOT Use Your Information

We do not use your audio files, metadata, or catalog data to train any AI or machine learning models. Your content is processed solely to provide analysis results to you. We do not sell your personal data or audio content to third parties. We do not share your content with other users unless you explicitly create a share link.

4. Third-Party Services

We use the following third-party services to operate Wavdock. Each service only receives the minimum data necessary to perform its function.

4.1 Clerk (Authentication)

Handles user registration, login, session management, and organization management. Clerk processes your email address, name, and authentication credentials. Supports SSO (SAML/OIDC) and multi-factor authentication for enterprise accounts. See Clerk's Privacy Policy.

4.2 Cloudflare R2 (File Storage)

All uploaded audio files, artwork, and stem files are stored on Cloudflare R2 with enterprise-grade encryption at rest (AES-256) and redundancy. Files are scoped to your user or organization and are not accessible to other users. See Cloudflare's Privacy Policy.

4.3 Neon (Database)

Our PostgreSQL database is hosted on Neon with automated backups and encryption. All account data, track metadata, and analysis results are stored here. See Neon's Privacy Policy.

4.4 AI Analysis Providers

A compressed version of your audio is sent to our AI analysis providers to extract genres, moods, instruments, vocal characteristics, and other attributes. These providers process your audio solely to return analysis results and do not use your data to train their models.

4.5 Groq (Transcription)

If transcription is available, a compressed version of your audio is sent to Groq's Whisper API for lyric transcription. See Groq's Privacy Policy.

4.6 OpenRouter (AI Chat)

Chat messages and conversation context are sent to OpenRouter to power the AI chat assistant. No raw audio is sent — only text-based queries and catalog metadata needed to answer your questions. See OpenRouter's Privacy Policy.

4.7 Modal (Audio Processing)

Optionally used for server-side BPM and key detection using librosa. Only an audio URL is passed for processing. See Modal's Privacy Policy.

4.8 Exa (Web Search)

When the AI chat assistant performs a web search on your behalf, search queries are sent to Exa. No audio or personal data is included — only the search query text. See Exa's Privacy Policy.

4.9 Mixpanel (Analytics)

We use Mixpanel to collect product usage analytics to improve the Service. Events tracked include uploads, analyses, searches, and feature interactions. See Mixpanel's Privacy Policy.

4.10 Dropbox & Box (Cloud Import)

If you choose to import files from Dropbox or Box, you authorize Wavdock to access your files through their respective OAuth flows. We only access the files you explicitly select for import. Access tokens are stored temporarily in your browser session and are not persisted on our servers.

5. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

  • With your organization: If you belong to an organization, catalog content (tracks, folders, playlists, contacts, credits) is shared with other organization members. Chat conversations are never shared.
  • Via share links: When you create a share link, recipients can access the shared content without logging in. You control what is shared, whether downloads are allowed, and when links expire.
  • With service providers: As described in Section 4, we share the minimum necessary data with third-party services to operate the platform.
  • For legal compliance: We may disclose information if required by law, legal process, or government request.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption at rest (AES-256) for all stored files, encryption in transit (TLS) for all data transfers, server-side authentication and authorization on every API request, database-level isolation between users and organizations, and cryptographically random tokens for share links. For more details, see our Security page.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention & Deletion

Your audio files and account data are retained for as long as your account is active. Deleted tracks are initially soft-deleted (recoverable) and can be permanently deleted at your request. When you delete your account, we will delete your personal data, audio files, and associated content. Some data may be retained as required by law or for legitimate business purposes (e.g., billing records).

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your personal data and account.
  • Portability: Request your data in a portable format.
  • Objection: Object to certain processing of your personal data.

To exercise any of these rights, contact us at contact@wavdock.com. We will respond within 30 days.

9. Cookies & Local Storage

We use essential cookies and local storage for authentication, session management, and remembering your preferences (e.g., upload queue state). We use Mixpanel for analytics which may set its own cookies. We do not use advertising cookies or tracking pixels.

10. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. By using Wavdock, you consent to the transfer of your data to these locations. We ensure that our service providers maintain appropriate data protection standards.

11. Children's Privacy

Wavdock is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform at least 30 days before they take effect. Continued use of Wavdock after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at contact@wavdock.com.