CCPA/CPRA Compliance

Effective Date: September 29, 2026

At wav.arena, we respect your privacy and comply with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). This page explains your rights as a California resident and how we handle your personal information.

For our complete Privacy Policy, please see our Privacy Policy page.

1. Your Rights Under CCPA/CPRA

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

•Right to Know: Request disclosure of what personal information we collect, use, disclose, and sell (if applicable). You may request specific pieces of information or categories of information.
•Right to Delete: Request deletion of your personal information (subject to certain exceptions, such as legal obligations, fraud prevention, or completing transactions).
•Right to Opt-Out of Sale: Opt out of the sale of your personal information (we do not sell personal information, but this right is available).
•Right to Opt-Out of Sharing: Opt out of sharing your personal information for cross-context behavioral advertising (we do not share personal information for this purpose).
•Right to Correction: Request correction of inaccurate personal information we maintain about you.
•Right to Non-Discrimination: Exercise your CCPA/CPRA rights without discrimination. We will not deny, charge different prices, or provide a different level of service based on your exercise of privacy rights.
•Right to Limit Sensitive Personal Information: Request limits on the use and disclosure of sensitive personal information (we use sensitive personal information only as necessary to provide services).

To exercise these rights, contact us at support@wavarena.com with your request. We will respond within 45 days of receiving your request (we may extend this period by an additional 45 days if reasonably necessary, with notice). We may need to verify your identity before processing your request.

2. Personal Information We Collect

We collect personal information for account creation, authentication, and platform participation. The categories of personal information we collect include:

•Identifiers: Email address, username, user ID
•Profile Information: Avatar, social links, bio, location, musical preferences, DAW, instrument, experience level
•Device and Technical Data: IP address, browser type, device information, user agent
•Usage Data: Battles entered, votes cast, page views, session data, interaction patterns
•Audio Files: Uploaded beats/songs with metadata (title, genre, BPM, tempoRange, beatType, vibe, bounce, aiUsage)
•User-Generated Content: Ratings, battle history, voting records
•Direct messages: Conversation contents, stored to deliver messages to the people in the conversation
•Date of birth: Collected at signup only to confirm you are 18 or older. We do not keep the date. We keep a record that the age check passed and the time it passed.

3. How We Use Your Personal Information

Your personal information is used to:

•Provide and improve our services (battles, uploads, rankings, messaging, and other platform features)
•Personalize your experience on wav.arena
•Enhance security, fraud prevention, and platform operations
•Perform analytics and service optimization
•Communicate updates and support
•Comply with legal obligations and enforce our Terms of Service

4. Sale and Sharing of Personal Information

No Sale or Sharing: We do not "sell" or "share" personal information as those terms are defined under the California Privacy Rights Act (CPRA). We do not use personal information for cross-context behavioral advertising or targeted advertising based on your activity across different websites or services.

We may share personal information with service providers (such as AWS for cloud infrastructure, AWS Cognito for authentication, and IRCAM Amplify for AI verification) solely for the purpose of operating our platform. These service providers are contractually obligated to use your information only for the services we specify and are prohibited from selling or sharing your information.

IRCAM Amplify (AI Content Verification): We share uploaded audio files with IRCAM Amplify SAS ("IRCAM Amplify"), a French company, solely for the purpose of performing AI-music-detection analysis to verify the accuracy of user-disclosed AI usage labels. This is not a "sale" or "sharing" under CPRA. Processing occurs in accordance with IRCAM Amplify's Privacy Policy and Terms of Service.

5. Data Retention

We retain personal information for as long as necessary to provide services, comply with legal obligations, and resolve disputes. Specific retention periods include:

•Account data (profile, email, settings): Duration of active account + 2 years after account deletion request
•Battle history and voting records: Duration of active account + 2 years (retained for ranking integrity and fraud prevention)
•Audio files (beats/songs): Duration of active account + 30 days after deletion request or content removal
•AI verification reports: 2 years from analysis date (for platform integrity and dispute resolution)
•Server logs and security data: 12 months (for security, fraud prevention, and system diagnostics)
•Messages: Live records are removed within 30 days after a verified account deletion request, except where the law requires us to keep them. See Direct Messages.
•Notifications: Duration of active account + 30 days after a deletion request

Some data may be retained longer if required by law, for legitimate business purposes (fraud prevention, legal disputes), or to comply with legal holds or investigations. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics and platform improvement.

6. Requesting Data Access, Deletion, or Correction

You can request to access, delete, or correct your personal information by contacting us at support@wavarena.com. We will verify your identity before processing any requests to protect your privacy and security.

Verification Process: We may require you to provide information to verify your identity, such as your email address, username, or other account information. For requests to access specific pieces of personal information, we may require additional verification to ensure we are responding to the correct individual.

Response Time: We will respond to your request within 45 days of receiving it. If we need additional time, we may extend the response period by an additional 45 days and will notify you of the extension and the reason for it.

Authorized Agents: You may designate an authorized agent to make requests on your behalf. We will require the authorized agent to provide proof of authorization and may require you to verify your identity directly.

7. Direct Messages

Direct messages are stored on wav.arena servers so they can be delivered to the people in the conversation. Those participants can read them. We can access message contents to deliver the conversation, to investigate an abuse report, and when the law requires it. Other users cannot. We do not sell message contents, and we do not use them to personalize the service or for advertising. Messages are encrypted in transit and at rest. We can still read them for the purposes above.

To delete your account, email support@wavarena.com from the email address on the account. We will confirm the request is from you and complete the deletion within 30 days. Your name on existing conversations is replaced with "Deleted user." The other participant keeps the messages they already received until their own account is deleted, or until they ask us to remove that conversation. Copies in backups are deleted when the backup expires.

If the law requires us to keep or produce messages, deletion of those messages waits until that obligation ends. We can still close the account. We will tell you before we disclose your information unless a court order prohibits notice. We do not sell or share personal information, as described in section 4 of this page. The same terms are in our Privacy Policy.

8. Age Eligibility

wav.arena is offered only to individuals who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18, and we do not offer a verifiable parental consent program.

At signup we collect a date of birth only to confirm you are 18 or older. We do not keep the date. We keep a record that the age check passed and the time it passed.

If we discover that we have collected personal information from someone under 18, we will delete the account and associated data within 72 hours. If you are a parent or guardian and believe your child has provided personal information to wav.arena, contact us immediately at support@wavarena.com.

We do not sell or share personal information, as described in section 4 of this page. The same age requirement is stated in our Terms of Service and Privacy Policy.

9. Contact Us

If you have any questions or concerns regarding this CCPA/CPRA compliance page, wish to exercise your privacy rights, or need to report a privacy concern, please contact us at:

Email: support@wavarena.com

Legal name: CJ BEATZ MEDIA LLC

Service: wav.arena

Mailing Address:

CJ BEATZ MEDIA LLC

6547 Midnight Pass Rd

PMB #3024

Siesta Key, FL 34242

We will respond to your inquiry within a reasonable timeframe. For data subject requests, we aim to respond within 45 days of receiving your request (we may extend this period by an additional 45 days if reasonably necessary, with notice).