Effective Date: September 2026
1. Introduction
At 9WAK (including 9WAK Music, 9WAK Image, and associated subdomains), we take the security and privacy of your personal data seriously. This Privacy Policy describes how we collect, process, store, and safeguard your data when utilizing our cloud-based generative media tools and authenticated services.
2. Information We Collect
We only process data necessary to provide reliable generation capabilities and maintain secure accounts:
- Account & Profile Identifiers: Your unique Supabase authentication user ID, email address, and associated AI credit balances stored securely in our database.
- Prompts & Generation Parameters: Descriptive text inputs, requested track or clip durations, aspect ratios, sound classifications, and optional reference files submitted for synthesis.
- Session & Security Data: Cross-domain session tokens (e.g.,
auth_token), browser agent data, rate-limiting telemetry, and anonymized diagnostic logs (generated via Winston logging utilities).
3. How Your Information Is Used
Your data is processed strictly for functional, technical, and billing purposes:
- To verify identity and authenticate access across 9WAK microservices and subdomains.
- To dispatch audio synthesis and media inference requests to our cloud compute endpoints.
- To meter AI credit deductions upon successful delivery of media files.
- To enforce rate limiting, prevent endpoint abuse, and uphold Google Cloud Responsible AI standards.
Note on User Voice & Prompts: 9WAK does not sell, broker, or rent your personal information, prompt text, or generated media assets to data marketplaces or third-party advertisers.
4. Infrastructure & Third-Party Processors
Our platform orchestrates requests through trusted enterprise cloud infrastructure providers:
- Google Cloud Platform (GCP) & Vertex AI: Prompts and generation parameters are transmitted to Google Cloud Vertex AI foundation models (including Lyria, Imagen, and Veo) located in secure US data centers (`us-central1`) for machine inference.
- Google Cloud Storage (GCS): Rendered audio (.wav) and media files are staged on protected Google Cloud Storage buckets and served to you through encrypted, time-limited signed URLs.
- Supabase: Provides identity management, row-level secure database storage, and atomic credit transactions via Postgres Remote Procedure Calls (RPC).
5. Cookies & Authentication Tokens
We deploy minimal, strictly necessary cookies to coordinate single sign-on across the 9WAK network:
auth_token: A secure,HttpOnlydomain cookie issued by Supabase Auth that enables seamless switching between 9WAK tools without repeatedly entering credentials.- Session Cookies: Temporary, encrypted session cookies used to retain form draft inputs and present user-friendly error dialogs during failed generation cycles.
6. Data Retention & Secure Links
Generated media files hosted on our storage buckets are accessible via time-limited signed URLs (typically expiring after 15 minutes). We encourage you to download your generated assets promptly via the download interface. We periodically purge temporary intermediate rendering artifacts to minimize retained data footprint.
7. Security Standards
We implement defense-in-depth measures to safeguard your information, including end-to-end TLS/HTTPS encryption, strict service-account least-privilege policies, isolated container environments, and gated access controls on backend storage buckets.
8. Your Rights & Choices
Depending on your jurisdiction, you have the right to access the personal data we store, request rectification of profile records, or request complete deletion of your account and associated generation logs.
To exercise these rights, submit an account closure or data query ticket through your main 9WAK account dashboard.
9. Changes to this Policy
We may revise this Privacy Policy periodically to reflect infrastructure improvements or regulatory changes. Any modifications will be reflected with an updated effective date at the top of this page.