1. Who We Are and What This Policy Covers
Wavshare LLC, a Delaware limited liability company ("Wavshare," "we," "us," or "our"), operates wavshare.com. This policy explains our handling of personal information about visitors, account holders, creators, collaborators, licensees, and people who contact us or submit rights claims. Wavshare is responsible for the processing described here; service providers and independent recipients may also have their own responsibilities.
This policy is a notice about information practices, not blanket consent to every use of your information. Where consent is required, we must request it separately.
Use our privacy contact form for questions or requests. Our business mailing address for formal privacy correspondence is [BUSINESS NOTICE ADDRESS TO BE CONFIRMED].
2. Information You Provide
Accounts and profiles. We process your email, account identifiers, username, display name, authentication credentials and session information, and profile details you choose to provide, such as your biography, location, links, and avatar. Password-based authentication is handled through our authentication provider. If you choose Google or Apple sign-in, we receive the identifiers and profile information that provider supplies under your permissions.
Content and activity. We process uploaded audio, artwork, descriptions, tags, musical metadata, packs, comments, likes, follows, bookmarks, and interactions with samples. Audio and descriptions can contain personal information about you or others. Submit only material and personal information you are entitled to share.
Rights and licensing. Rights profiles can include legal, business and artist names, contact email, master-owner information, performing-rights affiliation, writer and publisher identifiers, publisher or administrator details, ownership shares, collaborators, and acknowledgments. Download-license records include the sample, license version, accepting account, acceptance time, IP address, and browser user-agent information.
Clearance and disputes. We collect submitter and business contact details, project and release information, intended uses, placement declarations, proposed and agreed deal terms, correspondence, supporting material, decisions, and agreement records. Other creators, collaborators, representatives, and rights holders may provide information about you as part of these processes.
Support and copyright reports. Forms collect your name, reply email, request type, message, and any page link or device details you provide. Copyright notices and counter-notifications also collect postal address, telephone number, ownership or representative information, identified works and locations, explanations, optional evidence, legal declarations, and an electronic signature. Messages are delivered to our support or legal-review inboxes; authorized staff may record follow-up and moderation actions.
Fields marked required are needed for the requested account, license, or submission process; without them we may be unable to complete that process. Do not send passwords, payment-card details, government identification, or unrelated sensitive personal information through general forms. If a particular verification requires additional information, we will explain the request and an appropriate way to provide it. Automated payment and tax onboarding are not currently offered.
3. Technical Information and Diagnostics
When you access the Service, we and infrastructure providers process network and device information such as IP addresses, request paths, browser and operating-system details, timestamps, and response or error information. We also process activity such as plays, downloads, shares, and repeated requests to operate features, measure engagement, and protect the Service.
With your permission in Cookie settings, Sentry receives browser error reports and sampled performance measurements. You can withdraw permission there at any time to stop future browser reports. Server-side operational and security diagnostics are processed separately. The app associates a signed-in account ID with diagnostics; it does not intentionally attach account email or username as Sentry user fields. Our telemetry filters remove query strings, cookies, request bodies, and most request headers. Diagnostic paths, error details, and device information can still contain personal information; these filters are not a guarantee of anonymity.
Session replay is not enabled in the current app. We do not record screen-session replays through Sentry.
4. How and Why We Use Information
We use information to create and secure accounts; store and display content; deliver playback and licensed downloads; provide search, feeds, packs, and social features; record rights and agreement evidence; assess clearance requests; handle support and copyright disputes; send relevant service communications; diagnose errors; and meet applicable legal obligations.
We use engagement and security signals to identify unusual activity, repeated requests, or attempts to manipulate metrics. Automated controls can limit requests, prevent an action from counting, or restrict activity. These signals can be mistaken. You can ask for review through the privacy or support form; include the affected account or action and avoid sending unnecessary sensitive information.
The current Service does not use uploaded samples to train AI models. A license to host or distribute a sample is not consent to use personal information for unrelated purposes.
Where European or UK data-protection law applies, our bases are contract necessity for requested account, delivery and licensing services; legitimate interests in service security, fraud prevention, troubleshooting, rights administration and defending claims, balanced against individual rights; compliance with applicable legal obligations; and specific consent where required. Consent may be withdrawn for future consent-based processing without affecting processing already lawfully carried out.
5. Public Content and Other Recipients
Your public profile, public samples and artwork, descriptions, comments, packs, and social activity can be visible to others according to the feature and audience selected. Unlisted content is accessible to people who have its link; an unlisted link is not a confidentiality guarantee. Restricted content is intended for its authorized audience. Bookmarks and private rights-profile contact details are not presented as public profile fields.
People who receive or lawfully download content may retain copies. Others may redistribute a public link or capture material they can access. Removing a listing or deactivating an account does not necessarily remove copies held by others, undo a valid license, or erase records needed to establish rights.
For rights administration, we may disclose relevant creator, collaborator, licensee, project, ownership and agreement information to the parties and authorized representatives involved in a clearance or dispute. We do not make private contact details public simply because a sample is posted.
Copyright submissions are not confidential communications with your own lawyer. Relevant notices and supporting details may be shared with the affected uploader, claimant, rights holder, or their representatives. A compliant counter-notification is forwarded to the original claimant as part of the applicable process, including required contact and legal-declaration information. See the DMCA page.
We may also disclose information when reasonably necessary to comply with law or valid legal process, protect people or rights, investigate misuse, or complete a business reorganization or transfer subject to applicable safeguards. We may disclose information at your direction or with separately obtained consent where needed.
6. Service Providers
Providers process information to support the functions below. Their access depends on the service they supply and our configuration:
- Supabase: account authentication, database services, and storage where used.
- Cloudflare: hosting, network delivery and security, media and document storage, and Turnstile bot verification. Bot checks process browser, device, and interaction signals.
- Upstash: caching and request-limiting infrastructure, including relevant account, request, and activity identifiers.
- Sentry: error and performance diagnostics as described above.
- Twilio SendGrid and our email-hosting provider: delivery and handling of service messages, support requests, clearance correspondence, and copyright submissions.
- Google or Apple: sign-in when you choose that option, under the provider’s own terms and privacy notice.
We do not currently operate an advertising network or use third-party targeted advertising on the Service. We do not sell personal information or share it for cross-context behavioral advertising. Disclosures for hosting, security, communication, licensing, and legal processes are described above. Changes to these practices would require appropriate notice and any legally required choices before they begin.
7. Cookies and Device Storage
We use authentication and security cookies and browser storage for settings such as theme, player visibility, and recent searches. Search terms are sent to the Service to return results; the recent-search list is also stored on your device. Clearing that list does not erase separate server, security, or licensing records.
See the Cookie Policy for current storage details and browser controls. Disabling storage may interrupt sign-in or other features. We must obtain permission for nonessential storage or similar tracking where applicable law requires it; this policy does not replace that permission.
When your browser sends Global Privacy Control or an enabled Do Not Track signal, optional browser diagnostics and saved recent searches stay off, including when an earlier saved choice allowed them. Essential login and security features remain available. We do not currently sell personal information or share it for cross-context behavioral advertising. Where applicable law requires recognition of an opt-out signal, that requirement applies regardless of this notice. Contact us for assistance with a privacy preference.
8. Retention, Deactivation, and Deletion
We retain personal information for the purposes described in this policy, considering the service requested, account status, the duration of a license or agreement, unresolved requests or disputes, applicable recordkeeping obligations and claim periods, security needs, and deletion requests. Retention depends on the category and purpose; we do not promise one fixed deletion deadline for all records.
Account deactivation marks the account inactive. It does not itself erase stored data, schedule deletion after 30 days, or cancel valid licenses. Use the privacy request form to request permanent deletion or help with account recovery.
We may need to retain limited rights, license acceptance, clearance, copyright-notice, moderation, security, and correspondence records after content removal or account closure to establish agreements, resolve claims, or meet legal duties. Those purposes do not justify keeping unrelated data indefinitely. Where deletion applies, it can require separate handling of production systems, service-provider copies, correspondence, and backups.
If we cannot fully fulfill a request, we will explain the applicable reason, subject to lawful restrictions.
9. Your Choices and Privacy Requests
You can edit supported profile details and settings, remove your own comments, manage available content controls, and clear recent searches. These controls do not replace a request for access to or deletion of other personal information.
Depending on the law that applies, you may have rights to know about and access your information, correct inaccuracies, request deletion, obtain a portable copy, restrict processing, withdraw consent, or object to processing based on legitimate interests. You may also have rights concerning sale, targeted advertising, certain profiling, or uses of sensitive information. We do not use sensitive information to infer personal characteristics for advertising.
Objecting to processing: use the privacy form to identify the processing you object to and, where relevant, your circumstances. You may also request review of an automated restriction. We will assess the request under the applicable law rather than treating use of the Service as a waiver of rights.
Use our privacy contact form, including if you cannot sign in. Describe the right you want to exercise and the relevant account or material. We may request proportionate information to verify identity, an authorized agent’s authority, or the scope of a request, and use that information to handle the request. We will not ask for your password.
We will respond within the periods required by applicable law and explain a lawful extension or denial where required. If applicable law gives you a right to appeal a denial, reply using your request reference and ask for an appeal. You can complain to the competent regulator, including your local European data-protection authority or the UK Information Commissioner where relevant. We will not unlawfully discriminate against you for exercising privacy rights.
10. Children and Younger Users
The Service is not intended for children under 13, or below a higher minimum age that applies in their location. If you believe a child has provided information contrary to these requirements, contact us through the privacy form so we can investigate and take appropriate steps, including deletion where required.
The Terms describe additional eligibility requirements for uploading, licensing, and other rights transactions. A parent’s general permission to use social features does not establish a valid agreement for a child’s copyright or licensing rights. This privacy notice does not claim that an age-verification or guardian-consent workflow has been implemented.
11. International Processing
Wavshare is a United States business. Information may be processed in the United States and other locations used by our providers or authorized recipients, where laws may differ from those in your location.
[PROCESSING LOCATIONS AND APPLICABLE INTERNATIONAL TRANSFER SAFEGUARDS TO BE CONFIRMED BEFORE PUBLICATION.] Where law requires a transfer mechanism, we must establish the applicable safeguards or other permitted basis and explain how to obtain information about them. This policy does not represent that particular contractual clauses, certifications, or overseas representatives are already in place.
12. Security
We use measures designed to protect information, including encrypted connections, authentication and access controls, restricted storage for private audio and clearance documents, and protections against abusive or forged requests. Access to private legal and support records is intended for authorized personnel and providers who need it. No online service can guarantee absolute security.
13. Changes and Contact
We will identify an operative revision by its effective date and provide appropriate notice of material changes. We will seek separate consent where required before using previously collected information for a materially different purpose. Continued use alone does not supply consent where the law requires an affirmative choice.
For privacy questions, rights requests, objections, or appeals, contact Wavshare LLC through the privacy contact form. For copyright notices or counter-notifications, use the DMCA process. Keep your submission reference for follow-up.