Privacy Policy
What NoVocal collects, why, who processes it and how long it is kept
Summary
NoVocal separates songs into stems. To do that we have to process the audio you upload. We keep as little as possible: your audio and the separated stems are deleted automatically after 24 hours, and we never sell personal data or use your audio to train models.
What we process
- Audio you upload and the stems we create. Your browser uploads the file directly to our processing provider. The original upload and all stems are deleted automatically 24 hours after processing.
- Job records. For each separation we store the file name, file size, audio length, status and the time it was created. We keep these records to run the free daily allowance, prevent abuse and fix problems.
- A random browser identifier. If you are not signed in, we set a cookie containing a random ID so that you can open your own results and so that the free allowance can be counted. It does not contain personal information.
- A one-way hash of your IP address. We store a salted hash (not the address itself) to apply the free daily limit per network.
- Account data, if you create an account. Your email address, a hashed password and session information.
- Payment data, if you buy credits. Payments are handled by our merchant of record, Waffo, who collects your payment details directly. We receive the order details we need to add credits to your account (such as the order ID, amount and email address), never your full card number.
Why we process it
- To provide the service you request (separating, playing and downloading your audio).
- To apply usage limits and protect the service from abuse.
- To operate accounts and credit purchases you choose to make.
- To keep the service secure and working.
Service providers
- Cloudflare hosts the website, database and network.
- fal.ai runs the separation model and temporarily stores uploads and stems (deleted after 24 hours).
- Waffo processes payments as merchant of record (only if you buy credits).
These providers process data on our behalf and only for the purposes above.
Retention
- Audio uploads and stems: 24 hours.
- Job records and hashed network identifiers: up to 12 months.
- Account data: until you delete your account.
- Purchase records: as long as required by tax and accounting law.
Your rights
You can ask for a copy of your personal data, ask us to correct it, or ask us to delete it. Signed-in users can delete their account from the settings page. For any request, email hello@novocal.net.
Children
NoVocal is not directed to children under 13, and we do not knowingly collect their personal data.
Changes
If we change this policy we will update the date at the top of this page.