Privacy Policy

Your audio is analyzed, not kept. Uploads exist on our processing server only for the seconds an analysis takes and are deleted immediately after, succeed or fail. We keep the musical metadata the analysis produces (key, tempo, chords, melodic profile) — not your recording.

Audio uploads: processed in memory and temporary storage for a single analysis, then deleted. Never stored as tracks, never shared, never used to train models.

Account data: your email address (and, if you sign in with Google, your name and avatar from that profile), your credit balance and download history.

Payments: handled entirely by Stripe. Your card details never touch our servers; we store only Stripe’s customer reference and receipts.

Usage: basic product analytics (pages, funnel steps, feature usage) and error reports, to improve the service.

The web app is hosted on Vercel, audio analysis runs on Railway, accounts and data live in Supabase (Postgres), payments are processed by Stripe, product analytics run on PostHog, error reports go to Sentry, email is sent through Resend, and Cloudflare Turnstile checks our sign-up and contact forms for spam. Each processes data on our behalf under their own security and privacy commitments.

Some of these providers are based in, or process data in, the United States (PostHog’s analytics, for example). Those transfers are covered by each provider’s data processing terms, which rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

We use cookies for authentication sessions and local storage for preferences like your theme choice. No analytics cookies and no third-party advertising cookies.

Analytics without cookies: PostHog, our analytics provider, stores nothing on your device. It counts visits and funnel steps with a privacy-preserving code calculated on its own servers from your IP address and browser type, using a key that changes every day, so you can’t be followed from one day to the next. When you’re signed in, the analytics events of that visit are linked to your account.

Free-tool hand-off: if you analyze a track with one of the free tools and then choose to create an account, that file waits in your own browser’s storage, so it can open in your studio once you’ve signed in. It stays on your device until then, is removed the moment it opens, and expires after 24 hours if you don’t sign in. You can remove it anytime by clearing this site’s data in your browser.

You can delete your account yourself, from the Account panel in your studio — no request and no waiting. That removes your profile, balance, sessions and library; payment records are retained as required for accounting, and the .mid files you have already downloaded stay yours. You can also ask us for a copy of your data at any time. EU/EEA users have the rights provided by the GDPR, including access, rectification, erasure and portability.

Privacy questions and requests: hello@resonade.ai.