Privacy Policy

Your audio never leaves your browser

Analysis and rendering happen on your device with the Web Audio API and WebGL. We do not upload, store or receive your audio files or the video files you render. That is a product promise, not a setting.

Two features use AI models that also run on your device: timing lyrics to your song (optional, when you press it), and reading the depth of cover art you add (skipped when your browser asks to save data). The first time each runs, your browser downloads the model files from Hugging Face and the model runtime from jsDelivr and keeps them; nothing about your audio or image is sent to either.

What we do store, and when

• Every analysis (signed in or not): the file name, duration, detected key and BPM, genre probabilities, section labels, and summary numbers for emotion, rhythm and timbre. Never the audio. Stored so the report can be shown and to improve the analysis. Anonymous analyses are not linked to an account.
• When you sign in: your email, and the reports you generate (the analysis numbers and file name) so you can revisit and share them. Shared report links show the report to anyone who has the link.
• When you pay: Stripe processes the payment and holds your card details. We store your Stripe customer id, subscription status and purchase records (what, when, how much).
• Album cover generator: if you match a cover to your song, the song is analysed in your browser and never uploaded; only five words (mood, energy, tempo, key mode and drop) are sent. We store what you typed (artist name, title, style, vibe), a random device id, a daily-salted hash of your IP address for the free-run limit, and the generated images, which are deleted after 30 days. Your email is used to send the download link; we send news and tips only if you tick the box.
• Usage events: page views and product actions (upload started, export completed, checkout started), with a session id, via our own event table and Google Analytics. We do not send file names to third parties.
• Error reports: when the site crashes, a technical report (the error, the page, the browser) goes to Sentry so we can fix it. File names, email addresses and login tokens are removed before it is sent, and no audio, images or recordings of your screen are included.

What we do not do

We do not sell personal data. We do not use your audio or renders to train anything. We do not add your analysis to any public dataset without an explicit opt-in.

Storage, cookies, deletion

Data is stored with Supabase (US West) and Stripe (payments). We use browser storage for your session and preferences, and Google Analytics cookies for usage statistics. To delete your account and its reports, email hello@zeltorlabs.com from the account address; we delete within 14 days. Payment records are kept as long as accounting law requires.

Changes and contact

When this policy changes, the date above changes. Questions: hello@zeltorlabs.com. See also the terms of service.