Privacy Policy

Information we handle

We handle account details such as your email address and display name; workspace, project, file, share-link, and comment data; uploaded audio; and limited technical and usage data needed for security, rate-limiting, troubleshooting, and service operation. Authentication and security cookies keep sessions and protected share links working.

How we use it

We use this information to authenticate users, store and deliver audio, show comments and activity, enforce quotas and access rules, send service emails, investigate abuse, and maintain the security and reliability of WAVDROP. We do not sell personal information or use uploaded audio for advertising.

Service providers

WAVDROP relies on Supabase for authentication and database hosting, Cloudflare for file storage and delivery, Vercel for the application, Upstash for rate limiting, Emailit for transactional email, and PostHog (EU) for error reports, structured application logs, and performance measurements. These providers process data as needed to deliver their services and may operate in different countries. Session recordings are not enabled.

Sharing and retention

Project content is available to workspace members and to people who receive an active share link, subject to its access settings. We may disclose information when required by law or needed to protect users, the service, or others.

We keep information while the account or workspace is active and as needed for security and legal obligations.

Diagnostic telemetry sent to PostHog is limited to technical events such as error codes, route names, durations, and resource IDs. Share-link tokens, signed URLs, passwords, email addresses, file names, comments, and uploaded audio are not included. Share-page addresses are stripped of their secret token before they are sent. PostHog Logs are retained for 14 days by default (10 GB/month on the free allowance). Product analytics and error events follow PostHog product limits; unused free usage stops rather than billing automatically. Security audit records stay in the WAVDROP database.

Deletion and questions

To request deletion of your account and workspace, or ask a privacy question, email support@wavdrop.link from the address on your account. We verify ownership before acting. Deleted audio objects are not recoverable.