Privacy Policy
Last updated: January 9, 2026
1. Introduction
Wavelab Studio ("we", "us", "our"), registered under number 999 499 890 (R.C.S Rouen), operates Labelbase, a music catalog management and CRM platform for independent record labels, accessible at app.labelbase.co (the "Service").
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Service, in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection laws.
Data Controller:
Wavelab Studio
RCS Rouen 999 499 890
4 rue roger bonnet 76140 Le Petit-Quevilly, France
Email: antonin@labelbase.co
2. Data We Collect
2.1 Information You Provide
| Data Type | Examples | Purpose |
|---|---|---|
| Account Information | Name, email address, password | Account creation and authentication |
| Billing Information | Payment card details, billing address | Processing payments (via Stripe) |
| Profile Information | Company name, role, profile picture | Personalizing your experience |
| User Content | Artists, releases, contacts, contracts data | Providing the Service |
| Communications | Support requests, feedback | Customer support and improvement |
2.2 Information Collected Automatically
| Data Type | Examples | Purpose |
|---|---|---|
| Usage Data | Features used, actions taken, timestamps | Service improvement and analytics |
| Device Information | Browser type, operating system, device type | Technical support and optimization |
| Log Data | IP address, access times, pages viewed | Security and troubleshooting |
2.3 Cookies and Tracking
We use essential cookies required for the Service to function. We may also use analytics cookies to understand how you use the Service. You can manage cookie preferences through your browser settings.
3. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
Contract Performance: Processing necessary to provide the Service you requested (account management, service delivery).
Legitimate Interests: Processing for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security, where these interests are not overridden by your rights.
Legal Obligation: Processing required to comply with applicable laws (tax records, legal requests).
Consent: Processing based on your explicit consent, which you may withdraw at any time (marketing communications).
4. How We Use Your Data
We use your personal data to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send administrative messages, updates, and security alerts
- Respond to your requests and provide customer support
- Analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
5. Data Sharing
We do not sell your personal data. We may share your data with:
5.1 Service Providers
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA (EU-US Data Privacy Framework) |
| Vercel | Hosting and infrastructure | USA / EU |
| Datafast | Usage analytics | EU |
All service providers are bound by data processing agreements ensuring GDPR compliance.
5.2 Legal Requirements
We may disclose your data if required by law, court order, or government request, or to protect our rights, property, or safety.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
6. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.
7. Data Retention
We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this Policy. Specifically:
Account Data: Retained while your account is active and for 3 years after deletion for legal compliance.
Billing Data: Retained for 10 years as required by French tax law.
Usage Data: Retained for 24 months for analytics purposes.
Support Communications: Retained for 3 years after resolution.
8. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten").
Right to Restriction: Request limitation of processing in certain circumstances.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise these rights, contact us at antonin@labelbase.co. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the French data protection authority (CNIL).
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure authentication mechanisms
- Regular security assessments
- Access controls limiting data access to authorized personnel
- Regular backups and disaster recovery procedures
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.
10. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
11. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated Policy.
13. Contact Us
For any questions about this Privacy Policy or our data practices, please contact us:
Wavelab Studio
RCS Rouen 999 499 890
4 rue roger bonnet 76140 Le Petit-Quevilly, France
Email: antonin@labelbase.co
French Data Protection Authority
CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07