Privacy Policy

The Service involves two kinds of personal data with different responsibilities:

• Account data (KolWavy Radio is the controller). Data about station owners and staff who hold KolWavy Radio accounts — for example, your name, email, login, billing relationship with us, and how you use the platform. This Policy governs how we handle that data.
• Listener data (the Station Owner is the controller). When a station owner operates a Station, they decide what data they collect from their own listeners and why. For that listener data, the Station Owner is the data controller and KolWavy Radio acts as a processor, handling the data on the owner's behalf and under their instructions. Listeners should consult the privacy notice of the specific Station they interact with.

Information you provide

• Account details: name, display name, email address, password (stored hashed), and profile information.
• Station details: station names, branding, descriptions, schedules, and uploaded media metadata.
• Billing details: plan, subscription status, and limited payment metadata processed by our billing provider (we do not store full card numbers).
• Communications: messages you send to support and your preferences.

Information collected automatically

• Usage data: features used, actions taken, pages viewed, and broadcast/console activity.
• Device and log data: IP address, browser type, device identifiers, timestamps, and error logs.
• Cookies and similar technologies (see our Cookie Policy).

Information from third parties

• Authentication providers (e.g., if you sign in with Google) provide basic profile information.
• Our billing and infrastructure providers provide transaction and operational data.

• To provide, operate, maintain, and secure the Service.
• To authenticate you, manage your account, and provide station and team features.
• To process subscriptions and billing for your KolWavy Radio plan.
• To provide AI features you enable, and to improve their quality and safety.
• To communicate with you about the Service, updates, security, and support.
• To monitor, prevent, and address fraud, abuse, security incidents, and technical issues.
• To comply with legal obligations and enforce our Terms and policies.

Where applicable law (such as the GDPR) requires a legal basis, we rely on:

• Contract — to provide the Service you sign up for.
• Legitimate interests — to operate, secure, and improve the Service, balanced against your rights.
• Consent — for certain cookies, marketing, or optional features (you can withdraw consent at any time).
• Legal obligation — to comply with laws, tax, and accounting requirements.

We do not sell your personal data. We share it only as needed:

• Service providers / sub-processors who host, store, secure, and operate the Service on our behalf (e.g., cloud hosting, AI inference, email delivery, analytics, and billing).
• At your direction, including data flowing to integrations or payment providers you connect.
• Legal and safety — to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Note: any payment credentials you connect for monetizing your listeners are used solely to operate your Station's checkout. KolWavy Radio does not process or take custody of payments between you and your listeners.

We may process and store personal data in countries other than your own. Where we transfer data internationally, we use appropriate safeguards (such as standard contractual clauses) where required by law to protect your data.

We keep personal data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it. If you close your account, we delete or anonymize your account data after a reasonable period, subject to legal retention requirements (for example, billing records).

Depending on your location, you may have the right to:

• Access the personal data we hold about you and request a copy.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten"), subject to legal limits.
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

To exercise your rights regarding KolWavy Radio account data, contact us at privacy@kolwavy.com. For listener data held by a specific Station, contact that Station Owner, who is the controller of that data.

We implement technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and row-level security on our databases. No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us so we can delete it. Station Owners are responsible for the age-appropriateness of their own audiences and content.

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

For privacy questions or requests, contact privacy@kolwavy.com.