CCPA/CPRA Compliance

Effective Date: November 2, 2025

At wav.arena, we respect your privacy and comply with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). This page explains your rights as a California resident and how we handle your personal information.

For our complete Privacy Policy, please see our Privacy Policy page.

1. Your Rights Under CCPA/CPRA

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • •Right to Know: Request disclosure of what personal information we collect, use, disclose, and sell (if applicable). You may request specific pieces of information or categories of information.
  • •Right to Delete: Request deletion of your personal information (subject to certain exceptions, such as legal obligations, fraud prevention, or completing transactions).
  • •Right to Opt-Out of Sale: Opt out of the sale of your personal information (we do not sell personal information, but this right is available).
  • •Right to Opt-Out of Sharing: Opt out of sharing your personal information for cross-context behavioral advertising (we do not share personal information for this purpose).
  • •Right to Correction: Request correction of inaccurate personal information we maintain about you.
  • •Right to Non-Discrimination: Exercise your CCPA/CPRA rights without discrimination. We will not deny, charge different prices, or provide a different level of service based on your exercise of privacy rights.
  • •Right to Limit Sensitive Personal Information: Request limits on the use and disclosure of sensitive personal information (we use sensitive personal information only as necessary to provide services).

To exercise these rights, contact us at support@wavarena.com with your request. We will respond within 45 days of receiving your request (we may extend this period by an additional 45 days if reasonably necessary, with notice). We may need to verify your identity before processing your request.

2. Personal Information We Collect

We collect personal information for account creation, authentication, and platform participation. The categories of personal information we collect include:

  • •Identifiers: Email address, username, user ID
  • •Profile Information: Avatar, social links, bio, location, musical preferences, DAW, instrument, experience level
  • •Device and Technical Data: IP address, browser type, device information, user agent
  • •Usage Data: Battles entered, votes cast, page views, session data, interaction patterns
  • •Audio Files: Uploaded beats/songs with metadata (title, genre, BPM, tempoRange, beatType, vibe, bounce, aiUsage)
  • •User-Generated Content: Ratings, messages, battle history, voting records

3. How We Use Your Personal Information

Your personal information is used to:

  • •Provide and improve our services (battles, uploads, rankings, messaging, and other platform features)
  • •Personalize your experience on wav.arena
  • •Enhance security, fraud prevention, and platform operations
  • •Perform analytics and service optimization
  • •Communicate updates and support
  • •Comply with legal obligations and enforce our Terms of Service

4. Sale and Sharing of Personal Information

No Sale or Sharing: We do not "sell" or "share" personal information as those terms are defined under the California Privacy Rights Act (CPRA). We do not use personal information for cross-context behavioral advertising or targeted advertising based on your activity across different websites or services.

We may share personal information with service providers (such as AWS for cloud infrastructure, AWS Cognito for authentication, and IRCAM Amplify for AI verification) solely for the purpose of operating our platform. These service providers are contractually obligated to use your information only for the services we specify and are prohibited from selling or sharing your information.

IRCAM Amplify (AI Content Verification): We share uploaded audio files with IRCAM Amplify SAS ("IRCAM Amplify"), a French company, solely for the purpose of performing AI-music-detection analysis to verify the accuracy of user-disclosed AI usage labels. This is not a "sale" or "sharing" under CPRA. Processing occurs in accordance with IRCAM Amplify's Privacy Policy and Terms of Service.

5. Data Retention

We retain personal information for as long as necessary to provide services, comply with legal obligations, and resolve disputes. Specific retention periods include:

  • •Account data (profile, email, settings): Duration of active account + 2 years after account deletion request
  • •Battle history and voting records: Duration of active account + 2 years (retained for ranking integrity and fraud prevention)
  • •Audio files (beats/songs): Duration of active account + 30 days after deletion request or content removal
  • •AI verification reports: 2 years from analysis date (for platform integrity and dispute resolution)
  • •Server logs and security data: 12 months (for security, fraud prevention, and system diagnostics)
  • •Messages and notifications: Duration of active account + 30 days after deletion request

Some data may be retained longer if required by law, for legitimate business purposes (fraud prevention, legal disputes), or to comply with legal holds or investigations. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics and platform improvement.

6. Requesting Data Access, Deletion, or Correction

You can request to access, delete, or correct your personal information by contacting us at support@wavarena.com. We will verify your identity before processing any requests to protect your privacy and security.

Verification Process: We may require you to provide information to verify your identity, such as your email address, username, or other account information. For requests to access specific pieces of personal information, we may require additional verification to ensure we are responding to the correct individual.

Response Time: We will respond to your request within 45 days of receiving it. If we need additional time, we may extend the response period by an additional 45 days and will notify you of the extension and the reason for it.

Authorized Agents: You may designate an authorized agent to make requests on your behalf. We will require the authorized agent to provide proof of authorization and may require you to verify your identity directly.

7. Contact Us

If you have any questions or concerns regarding this CCPA/CPRA compliance page, wish to exercise your privacy rights, or need to report a privacy concern, please contact us at:

Email: support@wavarena.com

Service: wav.arena

Mailing Address: 2154 Inner Cass Circle, Sarasota, FL 34231

We will respond to your inquiry within a reasonable timeframe. For data subject requests, we aim to respond within 45 days of receiving your request (we may extend this period by an additional 45 days if reasonably necessary, with notice).