Privacy Policy

Who We Are

Waveforms Audio AS ("we", "us", or "our"), registered in Norway with organisation number 935 112 079, operates the website kepleraudio.com (hereinafter referred to as the "Service" or "Site"). This Privacy Policy explains how we collect, use, safeguard, and disclose information that results from your use of our Service. If you have any questions or concerns regarding this Privacy Policy or our data practices, you can reach us at email: contact@waveforms.audio.

What Data We Collect

We collect the following types of information:

Information you provide directly

When you create an account on our website, we collect your email address and password.

Information Collected Automatically

Your IP address, browser type and version, time and date of your visit, and how you interact with the site.

Payment Information

We use a third-party payment processor (Stripe) to handle all payment transactions. We do not store or process your payment details on our servers. For information on how Stripe handles your personal data, please refer to Stripe’s Privacy Policy.

How We Use the Data

We use the information we collect for the following purposes:

Account management

To create and maintain your user account.

Communication

To send you important emails, such as account confirmations.

Customer support

To respond to inquiries or support requests that you submit.

Marketing

We do not use your information for marketing purposes.

Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds:

Contractual necessity

We need to process your information to provide the services you request, such as creating and managing your account.

Consent

Where required, we rely on your consent, for example, for the use of non-essential cookies.

Legal obligations

In some cases, we are required to retain certain information to comply with applicable laws, such as accounting or tax regulations.

How We Share the Data

We do not sell, trade, or rent your personal information to third parties. We share limited information with trusted service providers as necessary to operate our services:

Payment processing

We share your email address with Stripe, our payment processor, to link payments to user accounts and manage transactions securely. You can learn more about how Stripe handles personal data by reviewing Stripe’s Privacy Policy.

Hosting services

Our website is hosted by Vercel, which may process technical information such as IP addresses as part of their hosting and content delivery services. You can learn more about how Vercel handles personal data by reviewing Vercel’s Privacy Policy.

Database Services

We use Neon to host and manage our application`'`s database, which stores your personal data such as account information (email address, encrypted password) and other data necessary for the functioning of our service. You can learn more about how Neon handles personal data by reviewing Neon’s Privacy Policy.

Caching Services

We utilize Upstash Redis for data caching and session management to improve the performance and reliability of our services. This may involve the temporary storage of data, including personal information that is frequently accessed. You can learn more by reviewing Upstash’s Privacy Policy.

Email Delivery Services

We use Resend to send transactional emails, such as account confirmations, password resets, and important service notifications. This involves sharing your email address and the content of these communications with Resend. You can learn more about how Resend handles personal data by reviewing Resend’s Privacy Policy.

Legal disclosures

We may also disclose your information if required to do so by law or in response to valid legal requests (such as a subpoena or court order).

How We Store the Data

We take reasonable technical and organizational measures to protect your personal information. Passwords and license information are securely encrypted. Our services are hosted with trusted providers that implement strong security practices to protect stored data. However, please note that no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance the functionality of our website. Specifically, we use cookies to:

Maintain your login session

Cookies are used to keep you signed in as you navigate through the site.

No analytics or advertising cookies

We do not use cookies for analytics, advertising, or marketing purposes.

Controlling cookies

You can control or disable cookies through your browser settings. However, disabling cookies may affect the functionality of certain parts of the website.

Data Retention

We retain your personal data for as long as your account remains active or as needed to provide you with our services. If you delete your account, we will delete your personal data immediately, except where we are required to retain certain information for legal, regulatory, or legitimate business purposes (such as tax or accounting obligations). We periodically review the data we store and delete any information that is no longer necessary for the purposes outlined in this Privacy Policy.

Your Rights

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

Right of access

You can request information about the personal data we hold about you.

Right to rectification

You can request that we correct or update your personal data if it is inaccurate or incomplete.

Right to erasure

You can request that we delete your personal data, subject to certain exceptions (such as compliance with legal obligations).

Right to restrict processing

You can request that we temporarily or permanently stop processing all or some of your personal data.

Right to object

You can object to our processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to data portability

You can request a copy of your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.

Right to withdraw consent

Where we process personal data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Exercising your rights

To exercise any of these rights, you can contact us at support@waveforms.audio

Right to lodge a complaint

You also have the right to lodge a complaint with your local data protection authority. In Norway, this is the Norwegian Data Protection Authority (Datatilsynet). You can find more information and contact details at www.datatilsynet.no.

Childrens Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If you believe that we may have collected information from a child, please contact us at contact@waveforms.audio.

Third-Party Services

We use trusted third-party services to help operate our website and process payments. These services may collect, store, and process personal information independently according to their own privacy policies. Currently, we use:

Stripe

We use Stripe for payment processing. You can view Stripe’s Privacy Policy for more information about how your personal data is handled.

Vercel

Our website is hosted by Vercel. You can view Vercel’s Privacy Policy for more information about how your personal data is handled.

Neon

We use Neon for database hosting. You can view Neon’s Privacy Policy for more information about how your personal data is handled.

Upstash Redis

We use Upstash Redis for data caching and session management. You can view Upstash’s Privacy Policy for more information about how your personal data is handled.

Resend

We use Resend for sending transactional emails. You can view Resend’s Privacy Policy for more information about how your personal data is handled.

International Data Transfers

We are based in Norway. However, some of the third-party service providers we use, may process your personal data outside the European Economic Area (EEA), including in the United States. When personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as relying on the European Commission’s Standard Contractual Clauses or other legally recognized mechanisms, to protect your information. By using our services, you acknowledge that your personal data may be transferred and processed outside of your country of residence.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will notify you by sending an email to the address associated with your account. We encourage you to review the Privacy Policy periodically to stay informed about how we protect your information.