Privacy Policy

Effective date: October 13, 2026

Wavefold Labs LLC builds audio software, web tools, plugins, mobile apps, and related services. This Privacy Policy explains what we collect, how we use it, and the choices you have when you use our websites, products, and services.

For information about Google's use of website measurement data, see Google's data-use information. You can change your website choices using the Cookies button in the footer.

Information We Collect

The information we collect depends on how you use our services and may include:

  • Information you provide: such as your name, email address, support messages, feedback, and any other information you choose to send us, along with account and purchase records needed to deliver Products. Our payment provider processes payment details; we do not receive your full payment card number.
  • Website and account usage information: such as pages visited, links and controls used, referring pages, approximate location derived from network information, browser and device type, operating system, account identifier, and timestamps.
  • Advertising measurement information: if you allow ad measurement, Google may receive ad-click and cookie identifiers, visited page URLs, IP address, browser information, and conversion events configured for our advertisements. These help associate actions on our website with earlier ad interactions.
  • Download and licensing information: such as the Product and version, platform, plugin format, entitlement and trial status, download history, installation activity, and the dates a license was activated or validated. Download and account-session records may also include an IP address and user agent.
  • Installation and machine identifiers: that a desktop Product sends when you authorize or validate a license. We use these to bind a license to an installation, prevent repeated trials on the same device, and protect accounts and licenses from abuse. We generally store these identifiers as purpose-specific cryptographic hashes rather than storing the raw values.
  • App usage information: that our iOS and iPadOS apps and Audio Unit plugins send about once a day when they are used, such as the Product, its version and build, whether it ran as a standalone app or a plugin, the identifier of the app hosting the plugin, the operating-system version, the device type and model, and a general range for how long ago the app was installed.
  • Technical and diagnostic information: that you choose to provide or that our websites and online services generate, such as app version, crash reports, error messages, stack traces, logs, performance information, and device or browser settings.

Analytics

We use Umami, hosted at u.wavefoldlabs.com, for basic statistics about visits to our public website pages. The tracker does not set cookies or store a persistent visitor identifier in your browser. We limit it to page views, page titles, referring website origins, and general browser and device information. We remove URL queries and fragments, exclude private account, authentication, and checkout pages, and do not send account identifiers, custom event data, or advertising identifiers to Umami.

To stop these statistics, open Settings in the cookie bar or use the Cookies button in the footer, turn off Cookieless site statistics, and save. Reject all also turns them off. Previously saved analytics rejections also keep Umami off until you change this preference. These controls apply to browser measurement; product-specific policies describe analytics within our apps and other Products.

If you allow analytics, we use PostHog to understand website and account usage. PostHog may collect page views, interactions with links, buttons, and forms, referring pages, general browser and device information, approximate location derived from an IP address, timestamps, and the custom events described above. When you sign in, we associate analytics events with your internal account identifier.

PostHog uses cookies and browser storage to maintain visitor and session identifiers. We use PostHog analytics to operate and improve our own Products and services, not to build advertising profiles, sell personal information, or track you across unrelated websites for targeted advertising.

Our iOS and iPadOS apps and Audio Unit plugins send the app usage information described above to our own servers at most once a day per Product, so we can understand which versions, devices, and host apps are in use. These reports do not include an installation, device, advertising, or account identifier, and we do not link reports to each other or to you. The app stores only the dates it needs to send at most one report a day and to calculate the install-age range; it does not send those dates. We forward these reports to PostHog as anonymous counts without your IP address. Our servers process your IP address to receive the request and may keep it in short-term operational logs. We do not use this information for advertising or to track you across other companies' apps or websites.

Google Ads Conversion Measurement

If you allow ad measurement, we use the Google tag for Google Ads to measure whether advertisements lead to actions on our website and to improve campaign performance. Google may use cookies and browser storage to associate website activity and configured conversion events with earlier ad interactions. We share the advertising measurement information described above with Google for these purposes.

We load Google Ads measurement only after you allow it. We configure it for conversion measurement, with ad personalization and enhanced conversions turned off and restricted data processing enabled. We do not use these tags to create remarketing audiences or intentionally send your name, email address, payment details, or app content to Google. Purchase confirmation measurement starts only after our server confirms the purchase and we remove checkout session identifiers from the page URL. Signed-in administrators can also use this page to verify measurement without completing a purchase. This still requires ad measurement consent, and checkout identifiers are removed from the URL before measurement starts. See how Google uses informationand Google's Privacy Policy.

Cookies and Local Storage

We may use cookies, local storage, or similar browser storage for basic site functionality, preferences, account sessions, security, and analytics, and advertising measurement. For example, this website stores your theme preference locally, uses a cookie for your signed-in session, and allows PostHog to store analytics identifiers in cookies and local storage when you allow analytics. Google measurement storage is used only when you allow ad measurement. The Umami preference in local storage records only whether you have opted out of site statistics.

Essential storage supports account sessions, security, theme preferences, and remembering your cookie choices. It stays available when you reject optional tracking. We store your latest choices, the notice you saw, its version, and the time of your decision in your browser for 180 days. We ask again after that period or if the notice changes. If your browser blocks this storage, your choice applies only during the current page session.

PostHog identifier cookies expire after 180 days and may be renewed during consented use. Identifiers in local storage remain until cleared by you or removed by our consent controls. Google's measurement storage has varying lifetimes; Google lists cookie names, purposes, and durations in its advertising and measurement cookie reference. When you withdraw permission, we stop the relevant measurement and remove its cookies and browser storage on our site where possible. Our site cannot remove cookies set on Google's own domains.

You can accept or reject all measurement, or choose cookieless site statistics, PostHog analytics, and ad measurement separately, through the cookie bar or the Cookies button in the footer. You can also control cookies and local storage through your browser settings. Some parts of our services may not work properly if required storage is disabled.

How We Use Information

  • Provide, operate, and maintain our websites, products, and services.
  • Respond to support requests, questions, and feedback.
  • Manage accounts, process purchases, and provide licenses and downloads.
  • Activate and validate licenses, administer trials, bind licenses to installations, and enforce per-account and per-device trial limits.
  • Understand usage patterns and improve performance, reliability, design, and content.
  • With your consent, measure advertising effectiveness, attribute configured conversions to ads, and improve advertising campaigns.
  • Detect, prevent, and investigate abuse, fraud, security incidents, and technical problems.
  • Comply with legal obligations and enforce our agreements.

How We Share Information

We do not sell your personal information. We may share information in limited circumstances:

  • With service providers who help us run our services, such as hosting, databases, file storage, authentication, payments, email, analytics, and error monitoring. These providers include Stripe for payments, PostHog for analytics, and Sentry for error monitoring.
  • With Google for website advertising measurement when you allow it, as described above. Google processes this information under its applicable terms and privacy policies. Our Google Ads tag uses restricted data processing to limit use to permitted measurement and operational purposes.
  • When required by law, legal process, or a valid government request.
  • To protect the rights, property, security, or safety of Wavefold Labs, our users, or the public.
  • As part of a merger, acquisition, financing, reorganization, or sale of business assets.

Data Retention

We keep information for as long as needed to provide our services, meet legal and accounting requirements, resolve disputes, improve our products, and maintain security. Retention periods may vary depending on the type of information and why it was collected.

In particular, we may retain account, purchase, entitlement, installation, download, and license-validation records while an account or license remains active and afterward as reasonably needed for support, security, dispute resolution, and legal compliance. We retain a product-specific cryptographic claim that a device has used a trial so that reinstalling the Product or creating another account cannot restart the same trial.

Your Choices

You can refuse cookieless site statistics, optional website analytics, and ad measurement without losing access to our services. Use the Cookies button in the footer to change or withdraw consent at any time. Withdrawal stops future measurement and does not change the lawfulness of processing before withdrawal or automatically delete records already collected. Where applicable, we rely on your consent for optional website measurement. A Global Privacy Control signal from your browser disables Google Ads measurement on our site, even if you previously allowed it.

You may contact us to request access to, correction of, or deletion of personal information we hold about you. Depending on where you live, you may have additional privacy rights, including the right to object to or restrict certain processing, request a copy of your data, or lodge a complaint with a privacy authority.

Some information may be exempt from a request or retained where permitted by law, including records reasonably necessary to complete a transaction, provide a license, secure our services, prevent fraud or trial abuse, enforce our agreements, or comply with legal obligations. We may need to verify your identity before completing a request.

Children

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International Visitors

Wavefold Labs is based in the United States. If you access our services from outside the United States, your information may be processed in the United States or other countries where we or our service providers operate.

Changes to This Policy

We may modify this Privacy Policy from time to time. When we make changes, we will update the effective date above. Changes are effective when posted on this page unless a later effective date is stated. If a change materially affects how we handle personal information, we may provide additional notice on our website or through the contact information associated with your account, as appropriate.

Contact

If you have questions about this Privacy Policy or our privacy practices, contact us at hello@wavefoldlabs.com.