WaveStamp ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

Account information: When you create an account, we collect your email address and a hashed password (managed by Supabase Auth). If you sign in with Google, we receive your email and name from Google.

Payment information: Payments are processed by Stripe. We do not store your credit card number or billing details. We store your Stripe customer ID and subscription status to manage your account.

Usage data: We track your monthly export count to enforce free tier limits. We do not track which songs, images, or lyrics you use.

Local storage: Your project (audio, image, lyrics, style settings) is saved in your browser's localStorage on your device. This data never leaves your device unless you explicitly export a video.

2. How We Use Your Information

• To provide and maintain the Service
• To process payments and manage your subscription
• To enforce usage limits on the free tier
• To respond to support requests
• To send essential service emails (subscription confirmations, billing notices)

We do not sell your data. We do not use your data for advertising.

3. Data Storage and Security

Your account data is stored in Supabase, hosted on secure AWS infrastructure. Payments are handled by Stripe, which is PCI DSS compliant. We use HTTPS for all data in transit. Your project files (audio, images) are never uploaded to our servers — all processing happens in your browser.

4. Third-Party Services

• Supabase — authentication and database (supabase.com)
• Stripe — payment processing (stripe.com)
• Vercel — hosting and serverless functions (vercel.com)
• Google Fonts — font delivery (fonts.google.com)

Each of these services has its own privacy policy governing their use of your data.

5. Cookies and Local Storage

WaveStamp uses browser localStorage to save your project and style preferences between sessions. We use session cookies managed by Supabase Auth to keep you logged in. We do not use advertising cookies or third-party tracking cookies.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format

To exercise any of these rights, contact us at .

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

8. Children's Privacy

WaveStamp is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of WaveStamp after changes constitutes acceptance of the updated policy.

10. Contact