Who we are
Wavely is operated by [LEGAL ENTITY], [ADDRESS]. For anything on this page, write to [CONTACT EMAIL].
We are the data controller for everything described here. If you think we are handling your data wrongly you can complain to your national data protection authority.
Your audio
Your music never leaves our servers, and it is never sent to anyone else.It is not used to train anything, ours or anybody’s.
The file you upload and the masters we produce are both deleted after 30 days, so download what you want to keep. Deletion runs automatically, once a day — not when somebody remembers. Deleting a master from your list removes both immediately.
We keep your upload that long for two reasons, and neither is convenience for us: adjusting the chain re-applies it to that file rather than asking you to upload again, and the “Original” side of the comparison plays it rather than a compressed copy. It used to be deleted after 7 days, which meant both quietly stopped working part-way through a session’s life.
What we store about you
- Your email and password. The password is stored only as a slow one-way hash — we cannot read it, and neither can anyone who steals the database.
- Your plan, credits, and a record of each master: which preset, how long the track was, when, and which format. Not what the track was.
- What you type when you ask for a sound, and any changes you make to a chain afterwards. This is how we find out the mastering is wrong in some direction for everybody, which nothing we can measure internally would tell us.
- Your own presets, if you save any.
- The address you connect from, held briefly and only to stop one machine hammering the service or guessing passwords. It is not stored with your account or kept.
Why we are allowed to
- To give you the product — your account, your masters, your presets. Without this there is no service to provide.
- To keep it working and stop abuse — the rate limits, and the record of what was mastered when.
- To make the mastering better — the requests and adjustments. If you would rather we did not, delete your account and it goes with it.
Who else sees anything
One company, and never your audio. When you ask for a sound, the text you typed and eight measurements of your file (loudness, peak, dynamic range, brightness, clipping, sample rate, length, channels) go to Anthropic, which decides the mastering settings. The file itself is not uploaded there.
Because that text is yours and can contain anything you write in it — a band name, an unreleased title — it is worth knowing where it goes.
That is the whole list. There is no analytics service, no advertising, no tracking pixels, and no cookies at all — which is why this site never asks you to accept any.
What your browser keeps
Signing in stores a token on your device so you stay signed in, and your light/dark preference is remembered the same way. Neither is a cookie and neither is sent anywhere but to us.
Your finished masters are also cached on your own device, including the name of the file you uploaded, so the results page still works if you come back to it. That stays until you clear your browser storage. It is on your machine, not ours.
How long we keep things
- Uploaded files: 30 days
- Finished masters: 30 days
- What you typed and adjusted: 180 days
- Password reset links: 1 hour
- Your account and the record of your masters: until you delete your account
Your rights, and where the buttons are
You do not have to ask us for any of these. They are on your account page.
- See and take your data. One button downloads everything we hold about you as a file.
- Delete your account. One button, your password to confirm, and it is gone: your account, your presets and everything you typed. The record that a master happened stays in our totals with your name taken off it, because those totals are our own history and we are not going to rewrite them each time somebody leaves.
- Correct something. Write to us at the address above.
Security
Passwords are hashed with PBKDF2-SHA256 over 260,000 rounds with a random per-account salt, and compared in a way that does not leak how close a guess was. Sign-in, registration and password reset are rate limited.
We are not going to claim more than that. If we find something wrong that affected your data, we will tell you.
Changes
If this changes in a way that matters, we will say so rather than editing the page quietly.
Last updated: 13 August 2026