waaave

Last updated: July 2026

Privacy Policy

Placeholder document. Replace with a GDPR-aware Privacy Policy before launch. Must cover: data retention (30-day video expiry, Cloud Storage lifecycle rules), third-party processors (GCP/Vertex AI, Convex, Zernio, ElevenLabs, fal.ai), and user deletion rights.

1. What we collect

  • Account data: Email address, name, and authentication method (email/password or Google OAuth).
  • Product and niche data: Product URLs, names, descriptions, and photos you provide during onboarding.
  • Voice data: If you enable voice cloning: a 30-second voice sample submitted to ElevenLabs via fal.ai. We store only the resulting voice ID.
  • Connected account data: TikTok and Instagram account handles connected via Zernio OAuth. We do not store your TikTok login credentials.
  • Usage data: Content jobs, credits consumed, pipeline stage logs, and analytics records.
  • Payment data: Processed by Polar.sh. waaave does not store payment card details.

2. How we use your data

  • To provide and operate the Service — generating content, posting videos, tracking analytics.
  • To send transactional emails (video ready for review, billing receipts) via Resend.
  • To detect and prevent fraud in the affiliate programme.
  • To improve our pipeline models and trend matching (aggregated, anonymised usage patterns only — never your video content).

3. Third-party processors

  • Google Cloud / Vertex AI: AI model inference (Claude Sonnet 4.6, Gemini). Asset storage (Cloud Storage bucket, us-central1).
  • Convex: Database and real-time backend. Stores metadata and signed URL references.
  • Zernio: TikTok/Instagram OAuth, post scheduling, analytics polling.
  • ElevenLabs / fal.ai: Voice synthesis and (optionally) voice cloning.
  • AssemblyAI / fal.ai: Subtitle transcription and visual generation.
  • Polar.sh: Subscription billing and payment processing.
  • Resend: Transactional email delivery.

4. Data retention

  • Generated media: Video, audio, thumbnails, and subtitle files are stored in Google Cloud Storage with a 30-day automatic deletion lifecycle rule. After 30 days, media files are permanently deleted.
  • Metadata: Job records, analytics records, and credit ledger entries are retained until you delete your account.
  • Voice clone ID: Retained until you delete your voice clone or account.

5. Your rights (GDPR)

If you are located in the European Economic Area, you have the right to: access your data, rectify inaccurate data, request erasure, restrict processing, data portability, and object to processing. To exercise any of these rights, contact us at privacy@waaave.xyz.

6. Account deletion

You can delete your account at any time from Settings. Account deletion is irreversible and removes all metadata from Convex, cancels any active subscription, and triggers deletion of your voice clone from ElevenLabs. Media files in Cloud Storage will be deleted per the 30-day lifecycle rule.

Contact

Privacy questions: privacy@waaave.xyz