Skip to content
waveloom
Page theme
ShadowCast

Privacy

Your privacy, plainly.

We collect as little as we can, use it only to run Waveloom, and never sell it.

Last updated 31 October 2026

Who we are

Waveloom is an independent audio software business based in Brisbane, Queensland, Australia. You can contact us at hello@waveloom.com. We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). If you are in the European Economic Area or the UK, we also aim to meet the basics of the GDPR described below.

What we collect

  • Launch list: your email address, when you joined and gave consent, and whether you confirmed or unsubscribed.
  • Your account: your email address and sign-in records, held with our database and authentication provider, Supabase. We do not use passwords; you sign in with an emailed link sent through Supabase authentication.
  • Purchases: Lemon Squeezy is the Merchant of Record for our sales. They collect and process payment and billing details under their own privacy policy. We receive order details (such as your email, the product and licence) so we can issue and manage your licence. We never see your full card number.
  • Emails: launch and sign-in emails are sent through our email provider, Resend, which processes your email address to deliver them.
  • Server logs: our hosting provider, Cloudflare, and our database provider keep short-lived technical logs (such as IP address, browser type and time of request) to deliver the site and protect it from abuse.
  • Analytics: none. We do not run analytics or advertising trackers. If that changes, this page will say so first.

How we use it

  • To send the launch emails you asked for, including your free MIDI pack.
  • To sign you in, deliver downloads and manage your licences.
  • To answer you when you write to us.
  • To keep the site secure and prevent abuse.

We do not sell or share personal information (including as those terms are used in California privacy law), and we do not use it for advertising.

  • Launch list: your consent, which you can withdraw any time.
  • Account, downloads and licences: to perform our contract with you.
  • Tax and consumer-law records: to meet our legal obligations.
  • Security and abuse prevention: our legitimate interests.

EU and UK contact: hello@waveloom.com.

Lemon Squeezy

As Merchant of Record, Lemon Squeezy is a separate, independent controller of the payment and billing information it collects, under its own privacy policy.

Licence activation

Activating ShadowCast, and its occasional licence check (about every 3 days when a window opens), sends the licence key, a basic device label (computer model, OS version and a short device code; never the computer's name) and the connection's IP address to Lemon Squeezy, our payment and licensing provider. It's used only to verify the licence and enforce the 3-computer limit.

Children

Waveloom is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.

Launch-list emails

You join by entering your email, ticking the consent box and confirming your address from the email we send. We then email your free MIDI pack as a private link that expires after 7 days. Every email has an unsubscribe link, and unsubscribing takes effect straight away.

Where it is stored

Our providers (Supabase for our database and sign-in, Resend for email, Lemon Squeezy for sales and Cloudflare for hosting) may store or process data outside Australia, in the United States and the European Union. Under APP 8 we remain responsible for how these providers handle your personal information on our behalf.

How long we keep it

Launch-list details are kept until you unsubscribe or ask us to delete them. Account and licence records are kept while your account is active and as long as needed for tax and consumer-law obligations.

Your rights

You can ask to access, correct or delete your personal information, or object to how we use it. Under the GDPR you can also ask for a copy in a portable format and withdraw consent at any time. Email hello@waveloom.com and we will reply within 30 days.

Complaints

Please contact us first. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or, in the EU or UK, your local data protection authority.

Cookies

See our cookie notice.

This page is written in plain language to explain how things work. It is not legal advice.