Privacy Policy

1. Introduction

RemoveVocals ("we," "us," "our," or "Company") is operated by NOTHING SAS, a company registered in France (SIREN 892 798 208). We are committed to protecting your privacy and ensuring transparency about how we handle your data. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable law, including the General Data Protection Regulation (GDPR).

2. Data Controller

NOTHING SAS is the data controller responsible for your personal data. You can contact us at:

NOTHING SAS
58 rue de Monceau
75008 Paris, France
SIREN: 892 798 208
Email: contact@removevocals.ai

3. Audio Files

Browser editing: tools such as Audio Cutter, Audio Joiner, Pitch Changer and Equalizer can process audio on your device. Saving a cloud project is a separate operation and sends the saved files to cloud storage.

Vocal Remover and Stem Splitter: server separation sends audio over HTTPS to our processing services and returns the result to your browser. Processing can use different server modes, including GPU jobs through Modal in the United States. An on-device fallback may be offered when a server job cannot run.

Lyrics Finder: your browser prepares a downsampled copy of the audio and sends it to our speech-to-text provider, Groq in the United States. This tool is not entirely local.

Saved projects: when you save a project or use an account feature with auto-save, source audio and processed outputs may be stored in your project library. Downloading a file to your device does not itself delete a cloud project.

Accounts: your first standard download from Vocal Remover or Stem Splitter is available without an account. Create a free account for further downloads, including another stem or a repeat download. Lyrics Finder requires an account before transcription and includes one free transcription per account. Other tools and paid features have their own account requirements and limits.

Audio supplied for processing is used to provide the requested result. See section 8 for the distinction between processing copies, cloud projects and technical records, and section 15 to ask about or request deletion of your data.

4. Data We Collect

4.1 Audio Files

We receive audio when you use server processing, including vocal/stem separation and lyrics transcription. We also receive files saved to cloud projects, including through an active auto-save feature. Browser-only processing does not need to upload audio unless you use a separate server or cloud-save feature.

4.2 Optional Account Data

If you create an optional account through Supabase authentication, we collect:

• Email address used to sign you in and recover your account, to send you service messages about your account, your purchases and your subscription, and to send occasional product emails that you can turn off at any time (see 4.5)
• User account ID generated by Supabase for account identification
• Optional profile information if you choose to provide it (name, preferences, etc.)

Account requirements vary by tool. The first standard download is available without an account; further downloads require a free account. Lyrics Finder requires sign-in before transcription. An account is also used to manage paid features and saved projects. You can sign in with the methods offered in the sign-in form.

4.3 Analytics Data

We use Google Analytics 4 (GA4) to understand how users interact with RemoveVocals. GA4 collects:

• Pages visited and time spent on each page
• Browser type and version
• Operating system
• Device type (mobile, tablet, desktop)
• General geographic location (country/region level)
• Anonymized IP addresses (IP anonymization enabled)
• Referral source (where you came from)
• User interactions and events (feature usage, tool access)

First-party usage events can record tool actions, file size and format, processing time and technical outcomes. They are stored through Supabase and may include a browser identifier and, when signed in, an account identifier. These are usage and diagnostic records, distinct from the audio stored in cloud projects. See section 8 for retention and section 15 for access or deletion requests.

4.4 Technical Data

We may collect minimal technical data to maintain service functionality:

• Error reports and crash logs, which may include request or account identifiers and technical context
• Service performance metrics
• Browser compatibility information

4.5 Emails We Send

We use email for account and service messages, and for optional product messages. Some messages also relate to a purchase made without an account.

• Account, payment and service messages: sign-in and recovery links, receipts, subscription and payment notices, and messages about a problem affecting your service. Opting out of product messages does not necessarily stop messages needed for account security, payments or delivery of the service.
• Optional product and follow-up messages: getting-started guidance, explanations of features or plans, and relevant follow-ups about using the product. Where an optional purchase follow-up is sent, it also includes an unsubscribe link. Use the unsubscribe link in these messages to update your preferences. You can also contact us at contact@removevocals.ai. Opting out does not remove access to free or paid tools.

Resend delivers our emails and receives the recipient address and message content needed for delivery. We keep message identifiers, delivery and bounce records, and communication preferences to avoid duplicate or unwanted messages and honor opt-outs. We do not send messages on behalf of other companies or sell email addresses.

4.6 Founding Supporter postal address

If you join the Founding Supporter program (see section 14 of the Terms of Service), we ask for a postal address: recipient name, street, city, state or region, postal code and country. It serves one purpose, shipping your Founder sticker pack. You enter it yourself on your profile page; it is stored in Supabase with your account and is visible only to you and to the people who prepare the shipment. For that shipment, the recipient name and address are passed to the printing and shipping partner listed in section 7, and nothing else about you is. We keep the address until the pack has been delivered and any delivery question is closed, and no longer than 12 months after shipment, unless you ask us to delete it sooner. The shipment date and the tracking reference are kept with the payment record. Legal basis: performance of the contract (GDPR Article 6(1)(b)). Founding Supporters also receive the Founders newsletter that is part of the program; you can stop it from your profile or by writing to support@removevocals.ai without losing any other benefit.

5. Legal Basis for Data Processing

We process personal data based on the following legal grounds:

• Consent (GDPR Article 6(1)(a)): For account creation through Supabase, we process your email based on your explicit consent.
• Legitimate Interest (GDPR Article 6(1)(f)): We process analytics data to understand user behavior, improve our service, and ensure technical functionality. Our legitimate interest in providing a reliable, free service outweighs privacy concerns since analytics is anonymized.
• Legitimate Interest (GDPR Article 6(1)(f)) for product emails: If you have an account, we may send you occasional emails about the product. Our interest is in telling our own users what their account does and what changed; yours is in not being written to more than you want. That is why these emails are infrequent, carry a one click unsubscribe link, and respect the communication preference recorded when you use it. Service emails about your account, your payments and your subscription rest on the contract basis below, not on this one.
• Contract (GDPR Article 6(1)(b)): If you create an account, processing is necessary to provide the service you've requested. Audio sent to our separation or transcription servers is processed only to deliver the result you asked for.

6. Cookies & Storage

6.1 Cookie Types

RemoveVocals uses the following cookies:

• Essential Cookies: Required for the website to function (authentication, security, user preferences). These are necessary for our legitimate interest and are exempt from consent requirements under GDPR.
• Analytics Cookies (Google Analytics 4): Used to track anonymized usage patterns. These require your consent unless you've configured your browser to opt out.

Advertising for free users

Google AdSense display advertising: some eligible free pages contain Google display ads. Google may receive information such as the page being visited, your IP address and browser information, and may use cookies or similar technologies to deliver and measure advertising. See how Google uses information from partner sites and Google's ad controls. These controls do not necessarily remove all ads.

6.2 Browser Storage

We may use browser local storage and session storage to:

• Save user preferences (audio settings, UI language, theme)
• Maintain session state
• Store authentication tokens (if logged in)
• Remember first-download eligibility on this browser

Preferences stay in your browser; the authentication token is sent to Supabase and to our own servers to authenticate your requests.

6.3 Opting Out

You can disable GA4 analytics by using browser privacy settings, browser extensions that block Google Analytics, or by configuring your browser's Do Not Track (DNT) settings. Essential cookies cannot be disabled as they are necessary for the service to function.

7. Third-Party Services

RemoveVocals uses the following third-party services:

• Google Analytics 4 (GA4): For anonymized usage analytics. Your data is processed by Google in accordance with their privacy policy. Google may be a data processor under our arrangement. Visit Google's Privacy Policy for details.
• Supabase: For authentication, account management, saved projects, usage records and communication preferences. Supabase acts as a data processor. Visit Supabase's Privacy Policy for their data handling practices.
• Modal (United States): Processing infrastructure for vocal and stem separation jobs, including GPU processing where used. Modal acts as a data processor. Visit Modal's Privacy Policy.
• Groq (United States): speech-to-text provider for the Lyrics Finder. A downsampled copy of the audio is sent for the duration of the transcription. Visit Groq's Privacy Policy.
• Resend: email delivery, including recipient and message data, delivery status and bounce information. Visit Resend's Privacy Policy.
• Google AdSense: display advertising on eligible free pages, as described in section 6. See Google's information for partner sites.
• Stripe: payment processing for the paid plans. We never see or store your card details. Visit Stripe's Privacy Policy.
• Cloudflare: content delivery network and security layer in front of the site; it processes connection data (IP address, request headers) to serve and protect the site. Visit Cloudflare's Privacy Policy.
• Printing and shipping partner: for Founding Supporter sticker packs only, the recipient name and postal address are passed to the company that prints and ships the pack, so that it can be delivered. The partner receives no other data about you. Its name is available on request at support@removevocals.ai.

These third parties process data under their own privacy documentation and the contractual terms applicable to the service. Their role as a processor or independent controller can vary depending on the processing activity.

8. Data Retention

Processing copies, saved projects, account data and technical records serve different purposes; a file being processed is not the same as a project saved in your library.

• Audio and projects: server processing uses working copies to produce your result. A project you save, including through auto-save, is stored separately so that you can return to it. Use the project controls or contact us to request deletion. Access and storage allowances depend on your plan.
• Account and purchase data: we retain information needed to operate your account, supply purchases and manage payments, support and applicable record-keeping obligations.
• Usage and diagnostic records: these support troubleshooting, security and service measurement. They are separate from the saved audio in your library.
• Email records and preferences: delivery, bounce and opt-out records help us operate messages and respect your communication choices. An opt-out can require us to retain a suppression preference to avoid contacting you again.
• Founding Supporter postal address: kept for the sticker shipment and its follow-up, then deleted as described in section 4.6; the shipment date and tracking reference stay with the payment record.

Contact contact@removevocals.ai to request the records held about your account, information about their retention, or deletion, subject to applicable obligations. Provider handling is described in the policies linked in section 7.

9. Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights under GDPR:

• Right of Access (Article 15): You can request access to all personal data we hold about you.
• Right of Rectification (Article 16): You can request correction of inaccurate data.
• Right to Erasure (Article 17): You can request deletion of your data ("right to be forgotten") subject to legal obligations.
• Right to Restrict Processing (Article 18): You can request we limit how we use your data.
• Right to Data Portability (Article 20): You can request your data in a portable format.
• Right to Object (Article 21): You can object to processing of your data for legitimate interest purposes.
• Right to Withdraw Consent (Article 7(3)): For processing based on consent, you can withdraw consent at any time.

To exercise any of these rights, contact us at contact@removevocals.ai. We will respond to requests within 30 days in accordance with GDPR requirements.

Residents of the United States

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect about you and how we use it, the right to request its correction or deletion, and the right to opt out of the sale or sharing of your personal information. We do not sell your personal information. Advertising described in section 6 may count as "sharing" for cross-context behavioral advertising under California law. Google advertising and its controls are described in section 6. You will not be treated differently for exercising these rights.

To exercise any of these rights, email contact@removevocals.ai. We will respond within 30 days.

10. Data Transfers

Analytics data collected by Google Analytics 4 may be transferred and processed by Google in the United States. Google is certified under the EU-US Data Privacy Framework, which provides appropriate safeguards for data transferred outside the EU. For more information, see the Data Privacy Framework official site.

Account data stored in Supabase is hosted in the EU region and remains protected under GDPR.

Audio processing can involve providers outside your country, including Modal in the United States for separation jobs and Groq in the United States for transcription. Resend processes recipient and message data for email delivery. Google processes advertising data as described in section 6 and its linked policies. Saved projects and account records are distinct from files submitted for a processing job.

11. Children's Privacy

RemoveVocals is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will delete such data immediately and terminate the child's account if applicable.

12. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data transmission
• Secure authentication protocols (Supabase)
• Regular security audits and updates
• Limited employee access to personal data
• Firewalls and network security measures

However, no online service is 100% secure. While we work to protect your information, we cannot guarantee absolute security against unauthorized access or breaches.

13. Mobile Apps (iOS and Android)

This policy also covers the RemoveVocals apps for iPhone, iPad and Android, published by NOTHING SAS. This section explains what is specific to the apps.

Account required: you need a free account to use the apps. When you create it, with an email address and a password, with Google or with Sign in with Apple, we collect your email address and an account ID. With Google or Apple we only receive what they share with us, such as your name, and Sign in with Apple lets you hide your email address.

Audio: the editing tools and the separation engine built into the app process your files on your phone or tablet, including offline, without sending them to us. When you choose a server separation, the Lyrics Finder or a cloud backup, the audio is sent over HTTPS to our servers and processing providers as described in sections 3 and 8. Files sent for a server separation are deleted after the job, and the results wait up to 60 minutes for your download.

Microphone: the apps use the microphone only while you record. The recording stays on your device unless you send it to a server feature.

Purchases: subscriptions and HD credits bought in the apps are billed by Apple (App Store) or Google (Google Play). We never see your card details: we receive the purchase reference from Apple or Google and check it on our server to unlock your plan.

Usage data: the apps send anonymous usage and crash data to our own server, linked to a random install ID created by the app, to fix bugs and improve the apps. You can turn it off in Settings, then Privacy. The apps contain no ads, no advertising ID and no third-party analytics or tracking.

Data on your device: projects you keep in the app are stored on your phone or tablet, separately for each account that signs in on it. Uninstalling the app removes them.

Deleting your account: in the app, go to Account, then Delete account. The deletion is immediate, removes your account and cloud data as described on our account deletion page, and also erases the projects kept on that device, so export the ones you want to keep first. You can also delete your account on the website or by email (see section 15). A subscription bought through Apple or Google must be cancelled in your App Store or Google Play settings.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last updated" date at the top of this policy. Your continued use of RemoveVocals following changes constitutes your acceptance of the updated policy.

15. Contact & Data Protection Authority

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Data Controller:
NOTHING SAS
58 rue de Monceau
75008 Paris, France
Email: contact@removevocals.ai

If you believe your privacy rights have been violated and we have not resolved your concern satisfactorily, you have the right to lodge a complaint with your national data protection authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL). Visit www.cnil.fr for more information.