SUB/WAVE Hosted is operated from the United Kingdom. This policy explains what personal data we hold, why, and your rights under UK GDPR.
What we store, and why
- Email address — your account identity; used for sign-in codes, receipts, and service messages (a welcome email, payment problems). No marketing lists.
- Station configuration — settings, DJ personas, schedules, jingles, and the Navidrome URL and credentials you provide, used solely so your station can reach your music. Backed up nightly; backups are kept 7 days, plus one final archive kept up to 30 days after a station is deleted.
- Usage metering — counts of AI tokens and speech characters per station, used to enforce the monthly allowance and understand costs. No listening history of individual listeners is collected by the hosted service.
- Billing records— handled by Stripe; we store only Stripe's identifiers and subscription status, never card numbers.
- Waitlist — if you join it, just your email, used once to tell you a slot opened; removed after that.
Processors we rely on
- Stripe — payments and invoices.
- Resend — transactional email delivery.
- Hetzner — servers (EU data centres).
- Cloudflare — DNS and TLS in front of the service.
Retention and erasure
Delete a station and its configuration is removed after a 30-day grace window (kept in case you return). Delete your account (Account → Delete account) and your email, sessions, and sign-in history are erased immediately; anonymised usage totals and invoices are retained as legally required for accounting. You can also exercise access, rectification, and portability rights by emailing [email protected].
Cookies and tracking
The portal uses no analytics and no third-party cookies. Your sign-in session is stored in your own browser.
Complaints
You may complain to the UK Information Commissioner's Office (ico.org.uk), but we would appreciate the chance to fix things first: [email protected].