← Back to DrumSplit
Privacy Policy
Last Updated: February 26, 2026
Localized summary
For legal precision, the operative policy below remains in English for now.
TL;DR: We collect your email and payment info to run the service. Your audio files are processed and immediately deleted - we don't store them. We use Stripe for payments, Supabase for data, and Modal for AI processing. You can delete your data anytime.
1. Introduction
DrumSplit ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service at drumsplit.io.
2. Information We Collect
Account Information:
- Email address (required for account creation)
- Password (encrypted and hashed)
- Account creation date and login timestamps
Payment Information:
- Payment card details (processed and stored by Stripe, not by us)
- Billing address
- Transaction history and amounts
Usage Information:
- Split balance and transaction history
- IP address (for rate limiting and fraud prevention)
- File upload metadata (filename, size, format, processing time)
- Browser type and device information
Audio Files:
- Files you upload for processing
- Important: Audio files are processed and immediately deleted. We do NOT store your audio content.
3. How We Use Your Information
We use collected information to:
- Provide and maintain the Service
- Process your audio files and generate separated stems
- Process payments and manage your split balance
- Send account-related emails (verification, password reset)
- Send transactional emails when your stems are ready (paid accounts)
- Prevent fraud and abuse
- Improve our AI models and Service quality
- Comply with legal obligations
4. Third-Party Services
We use the following third-party services that may collect and process your data:
Stripe (Payment Processing):
- Processes all payment transactions
- Stores payment card information securely
- Privacy Policy: stripe.com/privacy
Supabase (Database & Authentication):
- Stores user accounts and split balances
- Manages authentication and sessions
- Privacy Policy: supabase.com/privacy
Modal (AI Processing):
- Processes audio files using AI models
- Files are deleted immediately after processing
- Privacy Policy: modal.com/privacy
Resend (Email Delivery):
Vercel (Website Hosting):
Cloudflare (Edge Security):
- Provides CDN, TLS termination, and abuse protection at the network edge
- May collect network and browser metadata for security and performance
- Privacy Policy: cloudflare.com/privacypolicy
Google Analytics (Usage Analytics):
- Collects anonymized usage data (page views, session duration, traffic sources)
- No personally identifiable information is shared with Google
- Privacy Policy: policies.google.com/privacy
5. Audio File Processing and Storage
Your Privacy is Critical:
- Audio files are processed in real-time
- Files are stored temporarily in memory during processing (typically 30-120 seconds)
- Files are permanently deleted immediately after processing completes
- We do NOT store, backup, or retain your audio content
- Output stems are available for download for 24 hours, then deleted
6. Data Retention
- Account data: Retained while your account is active
- Transaction records: Retained for 7 years (legal requirement)
- Audio files: Deleted immediately after processing
- Output stems: Deleted after 24 hours
- IP addresses: Retained for 30 days for fraud prevention
7. Data Security
We implement industry-standard security measures:
- All data transmitted via HTTPS encryption
- Passwords hashed using bcrypt
- Database access protected by row-level security policies
- Regular security audits and updates
- No storage of audio file content
8. Your Rights (GDPR & CCPA)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your account and data
- Portability: Export your data in a machine-readable format
- Opt-out: Manage notification preferences in your account settings
To exercise these rights, email: support@drumsplit.io
9. Cookies and Tracking
We use minimal cookies:
- Authentication cookie: Keeps you logged in (essential)
- Session cookie: Manages your session (essential)
- Google Analytics cookies for anonymized usage statistics
- Security cookies from edge providers when required for abuse prevention
- We do NOT use advertising cookies
- We do NOT sell your data to third parties
10. Children's Privacy
DrumSplit is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If we discover we have collected such information, we will delete it immediately.
11. International Data Transfers
Your data may be processed in:
- United States (Supabase, Modal, Stripe)
- European Union (backup servers)
We ensure adequate safeguards are in place for international transfers in compliance with GDPR.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Know what personal information is collected
- Know if personal information is sold or disclosed
- Opt-out of the sale of personal information (we don't sell data)
- Request deletion of personal information
- Non-discrimination for exercising CCPA rights
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via:
- Email notification
- Notice on our website
Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Data Breach Notification
In the event of a data breach affecting your personal information, we will:
- Notify you within 72 hours
- Describe the nature of the breach
- Explain steps we're taking to address it
- Provide recommendations to protect yourself
15. Contact Us
For privacy-related questions, concerns, or requests:
Email: support@drumsplit.io
Website: https://drumsplit.io
Last updated: February 26, 2026