Back to Varya

Privacy Policy

Last Updated: April 29, 2026

1. Introduction

Varya ("we", "our", "us") provides a web-based audio visualizer platform. This Privacy Policy explains how we collect, use, store, and protect your information.

2. Information We Collect

a) Account Information

  • Email address.
  • Authentication data via Supabase.

b) User Content

  • Audio files you upload.
  • Generated visual outputs, including videos and exports.
  • Associated metadata, including file names, timestamps, and settings.

c) Usage and Technical Data

We may collect limited technical data such as:

  • IP address.
  • Device/browser type.
  • Usage activity, including exports and sessions.

Retention: Usage and technical data may be retained for up to 90 days for analytics, performance, and security purposes.

d) Payment Information

Payments are processed via Stripe.

  • We do not store or access full card details.
  • We may store billing email, subscription plan, payment status, and Stripe customer ID.

e) Cookies

We use cookies for:

  • Authentication and session management.
  • Analytics, such as Google Analytics.

Where required, we display a cookie consent mechanism.

3. Legal Basis for Processing

Where applicable, such as under GDPR, we process your data based on:

  • Contract: To provide the Service.
  • Legitimate Interest: To improve performance and security.
  • Consent: For marketing communications and cookies.

4. Data Storage and Retention

a) Free Users

  • Uploaded files and generated outputs are stored temporarily.
  • These are automatically deleted after 7 days.

b) Paid Users

  • Uploaded files and generated outputs may be stored persistently.
  • Content remains available until you delete it or your account is deleted.

c) Account Data

  • Retained until account deletion.
  • Deleted within 30 days after account deletion.

d) Billing Data

  • Retained as required for legal and accounting obligations.

e) Important Storage Disclaimer

While we provide storage for user content, we do not guarantee permanent availability. You are responsible for maintaining backups of your content.

5. Cross-Border Data Transfers

Your data may be processed and stored in countries outside your jurisdiction, including the United States, where our service providers operate.

6. Third-Party Services

We use trusted providers:

  • Supabase for authentication and database.
  • Google Cloud for infrastructure and storage.
  • Resend for email delivery.
  • Stripe for payments.

These providers may process data on our behalf.

7. Data Access

We do not access or review your content except:

  • To operate and maintain the Service.
  • To comply with legal obligations.
  • To investigate abuse or violations.

8. Your Rights

Depending on your location, such as under General Data Protection Regulation or California Consumer Privacy Act, you may:

  • Access your data.
  • Request deletion.
  • Correct inaccurate data.
  • Request a copy of your data, also known as data portability.

We respond to requests within 30 days.

Contact: hello@varya.app

9. Marketing Communications

We may send:

  • Service-related emails, including billing and account emails.
  • Marketing emails, which are optional.

You may unsubscribe from marketing emails at any time.

10. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect data from children.

11. Security

We implement reasonable safeguards to protect your data. However, no system is completely secure.

12. Changes to This Policy

We may update this Privacy Policy periodically. Continued use constitutes acceptance.

13. Contact

Email: hello@varya.app