Privacy Policy for wav.arena

We do not sell or rent personal data. However, we may share information with third parties in the following cases:

• •With service providers who assist in platform operations.
• •When required by law or to protect our legal rights. If we disclose information because the law requires it, we will tell you before the disclosure unless a court order prohibits notice.
• •With user consent for optional third-party integrations.

IRCAM Amplify (AI Content Verification)

We share uploaded audio files with IRCAM Amplify SAS ("IRCAM Amplify"), a French company, solely for the purpose of performing AI-music-detection analysis to verify the accuracy of user-disclosed AI usage labels. Processing occurs in accordance with IRCAM Amplify's Privacy Policy and Terms of Service.

wav.arena acts as a data controller for your audio submission, and IRCAM Amplify acts as a data processor for the purpose of performing AI verification. Processing is carried out under French and EU GDPR standards. The analysis result and model metadata are returned to wav.arena and stored in our database. No additional personal data beyond the audio file itself is transferred to IRCAM Amplify.

Other Third-Party Processors

We work with the following service providers to operate wav.arena:

• •Amazon Web Services (AWS): Cloud hosting infrastructure, authentication services (AWS Cognito), database (Amazon DynamoDB), file storage (Amazon S3), and email delivery (Amazon SES)
• •Analytics: We do not currently use third-party analytics or tracking services beyond essential platform operations

International Transfers: Personal data may be transferred to and processed in the United States and other countries where our service providers operate. For EU/EEA users, we ensure adequate protection of your personal data through:

• •Standard Contractual Clauses (SCCs) approved by the European Commission with our service providers (AWS, IRCAM Amplify)
• •EU-U.S. Data Privacy Framework where applicable
• •Technical and organizational measures to protect data in transit and at rest

Automated Decision-Making: AI verification analysis is automated but does not result in solely automated decisions with legal or similarly significant effects on you. The analysis is used to verify accuracy of user-disclosed AI usage labels. You may contact support at support@wavarena.com to request manual review of any AI verification result or to discuss the automated processing.

We use cookies and similar tracking technologies to enhance your experience and operate the platform:

• •Essential cookies: Required for authentication, security, session management, and core functionality. These cannot be disabled without impacting platform operations.
• •Functional cookies: Remember your settings, preferences, and choices to improve your user experience.
• •Analytics: We do not currently use third-party analytics cookies. Platform analytics are derived from server logs and essential operations only.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will impact platform functionality, including your ability to log in and use core features. For EU/EEA users, non-essential cookies require your consent, which you can manage through your browser or by contacting us at support@wavarena.com.

Direct messages are stored on wav.arena servers so they can be delivered to the people in that conversation. Those participants can read the messages. wav.arena can access message contents to deliver the conversation, to investigate an abuse report, and when the law requires it. Other users cannot read your messages. We do not sell message contents, and we do not use them to personalize the service or for advertising.

Messages are encrypted while they travel and while they are stored. wav.arena can still read them for the purposes above.

To delete your account, email support@wavarena.com from the email address on the account. We will confirm the request is from you and complete the deletion within 30 days. We will remove your account and replace your name on existing conversations with "Deleted user." The other participant keeps the messages they already received. Those messages are removed when that participant’s account is deleted, or earlier if they ask us to remove that conversation.

Live message records are removed within 30 days after a verified deletion request. Copies in backups are deleted when the backup expires. If the law requires us to keep or produce messages, deletion of those messages waits until that obligation ends. We can still close the account. We will tell you before we disclose your information unless a court order prohibits notice.

We retain personal data for as long as necessary to provide services, comply with legal obligations, and resolve disputes. Specific retention periods include:

• •Account data (profile, email, settings): Duration of active account + 2 years after account deletion request
• •Battle history and voting records: Duration of active account + 2 years (retained for ranking integrity and fraud prevention)
• •Audio files (beats/songs): Duration of active account + 30 days after deletion request or content removal
• •AI verification reports: 2 years from analysis date (for platform integrity and dispute resolution)
• •Server logs and security data: 12 months (for security, fraud prevention, and system diagnostics)
• •Messages: Live records are removed within 30 days after a verified account deletion request, except where the law requires us to keep them. See Direct Messages for whose copy remains and how backups are handled.
• •Notifications: Duration of active account + 30 days after a deletion request

Users may request earlier data deletion by contacting us at support@wavarena.com. Some data may be retained longer if required by law, for legitimate business purposes (fraud prevention, legal disputes), or to comply with legal holds or investigations. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics and platform improvement.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• •Access: Request a copy of the personal data we hold about you
• •Rectification: Correct inaccurate or incomplete data
• •Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention obligations)
• •Restriction: Limit how we process your data in certain circumstances
• •Portability: Receive your data in a structured, machine-readable format and transmit it to another controller
• •Objection: Object to processing based on legitimate interests or for direct marketing purposes
• •Withdraw Consent: Where processing is based on consent, you may withdraw at any time (does not affect lawfulness of processing before withdrawal)

To exercise these rights, contact us at support@wavarena.com with your request. We will respond within 30 days (GDPR) or 45 days (CPRA). We may need to verify your identity before processing your request.

Additional Information:

• •EU/EEA users: See our GDPR Compliance page for detailed information about your rights under the General Data Protection Regulation
• •California users: See our CCPA/CPRA Compliance page for information about your rights under the California Privacy Rights Act

wav.arena is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from anyone under 18, and we do not offer a verifiable parental consent program.

At signup we collect a date of birth only to confirm you are 18 or older. We do not keep the date. We keep a record that the age check passed and the time it passed.

If we discover that we have collected personal data from someone under 18, we will delete the account and associated data within 72 hours. If you are a parent or guardian and believe your child has provided personal data to wav.arena, contact us immediately at support@wavarena.com.

By using wav.arena, you represent and warrant that you are at least 18 years of age.

No Sale or Sharing: We do not "sell" or "share" personal information as those terms are defined under the California Privacy Rights Act (CPRA). We do not use personal information for cross-context behavioral advertising or targeted advertising based on your activity across different websites or services.

California residents have specific rights under the CPRA. For detailed information about your rights and how to exercise them, please see our CCPA/CPRA Compliance page.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements.

Material Changes: For material changes (such as introducing new third-party processors, changes to how we collect or use personal data, or changes affecting your rights), we will notify registered users via email within 30 days of the change taking effect.

Non-Material Changes: Minor updates, clarifications, or corrections will be posted here with an updated effective date without individual notification.

Your continued use of wav.arena after changes are posted constitutes acceptance of the revised policy. If you do not agree with the changes, you may discontinue use of the platform.

If you have any questions or concerns regarding this Privacy Policy, wish to exercise your data protection rights, or need to report a privacy concern, please contact us at:

We will respond to your inquiry within a reasonable timeframe. For data subject requests, we aim to respond within 30 days (GDPR) or 45 days (CPRA) of receiving your request.