Privacy Policy
Effective date: 29 August 2026 · Last updated: 29 August 2026
WavArtist is based in Kathmandu, Nepal. This policy explains what personal data we collect, why, and what we do with it.
Contact for any privacy question or request: wavartistz@gmail.com
1. Who this applies to
- Artists : people who subscribe to WavArtist and run an artist site.
- Listeners: people who create a free account to browse or buy from an artist’s site.
- Visitors : anyone browsing wavartist.com or an artist site without an account.
2. What we collect
From Artists
- Account details: name, email address, password (stored hashed, never in plain text)
- Artist profile: stage name, biography, genre, social media links and follower counts, images you upload
- Content you upload: audio files, artwork, photos, merchandise and tour listings
- Payout details you choose to display, such as a payment QR image
- Subscription and billing status received from Paddle (we do not receive or store your card number)
- Support correspondence
From Listeners
- Account details: full name, email address, phone number, password (hashed)
- Order records: what was ordered, from which artist, when, and the amount
- Payment confirmation material you submit for manual verification, such as a payment screenshot or reference number
- Delivery details you provide for merchandise orders
Automatically
- A session cookie used to keep you signed in
- Basic technical logs: IP address, browser and device type, pages requested, timestamps — used for security, debugging and abuse prevention
We do not run advertising trackers on WavArtist.
3. Why we use it
| Purpose | What it covers |
|---|---|
| Providing the service | Creating accounts, running your dashboard, publishing your artist site, streaming and delivering files |
| Billing | Managing your subscription, renewals and refunds via Paddle |
| Order handling | Recording orders, verifying payment confirmations, tracking delivery status |
| Security | Preventing fraud, abuse and unauthorised access |
| Support | Answering your emails and fixing problems |
| Service updates | Essential notices about your account, billing or major changes |
We only send marketing email if you opt in, and every marketing email has an unsubscribe link.
4. Who we share it with
We do not sell personal data. We share it only with service providers who help us run WavArtist:
- Paddle.com Market Ltd : payment processing and merchant of record for subscriptions. Paddle handles your payment details directly under its own privacy policy.
- Cloudflare, Inc. : website hosting, DNS, SSL, and media storage (Cloudflare R2).
- Neon, Inc. : database hosting.
- Render, Inc. : application server hosting.
We may also disclose data where required by law, or to protect our rights, users or systems.
Between Artists and Listeners: when a listener places an order on an artist’s site, the details necessary to fulfil that order including name, contact details, and where relevant a delivery address are shared with that artist. The artist is responsible for how they handle that information. We do not control the artist’s own use of it.
5. Where your data is stored
Our database, servers and media storage are hosted with the providers listed above, including in the Asia-Pacific region and other locations those providers operate. By using WavArtist you accept that your data may be stored and processed outside Nepal.
6. How we protect it
- All traffic is served over HTTPS.
- Passwords are stored hashed, never in readable form.
- Sessions use secure, HTTP-only cookies.
- Paid and unreleased audio is kept in private storage and served only through short-lived signed links after an access check.
- Access to production systems is limited to the operator of WavArtist.
No system is perfectly secure, but we take reasonable steps to protect your data and will notify affected users promptly if a breach puts their data at risk.
7. How long we keep it
- Active accounts : for as long as the account is open.
- Cancelled or closed accounts : data and uploaded files are retained for 30 days, then deleted.
- Order and billing records : retained longer where needed for accounting, tax and dispute purposes.
- Technical logs : retained for a short period for security and debugging.
8. Your rights
You can ask us to:
- give you a copy of the data we hold about you;
- correct anything inaccurate;
- delete your account and its data;
- stop sending you marketing email.
Most of this you can do yourself from your dashboard or profile. For anything else, email wavartistz@gmail.com and we will respond within 30 days.
9. Children
WavArtist is not intended for children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.
10. Cookies
We use only the cookies needed to run the service:
- a session cookie that keeps you signed in;
- short-lived security cookies used during login and password reset.
We do not use advertising or third-party tracking cookies. Blocking essential cookies will stop you from signing in.
11. Changes
We may update this policy. The “last updated” date at the top always shows the current version, and we will notify account holders by email if a change materially affects them.
12. Contact
WavArtist
Kathmandu, Nepal
wavartistz@gmail.com