Privacy Policy
Last updated: March 23, 2026
Data Collection
All audio processing in SonaVyx happens locally in your browser. Our Rust DSP engine compiles to WebAssembly and runs entirely on your device. FFT analysis, transfer function calculations, SPL metering, RT60 measurement, and every other signal processing operation executes on-device. No raw audio data is ever transmitted to our servers or any third party.
Audio Processing
When you use measurement tools, your microphone audio is captured via the Web Audio API and processed in a Web Worker running our Rust WASM DSP engine. The audio data stays in your browser's memory and is discarded when you close the tab. No recordings are created or stored unless you explicitly export data.
Cloud Storage
If you create an account, we store your email, hashed password, measurement metadata (frequency response data, not raw audio), venue information, and report data. This data is stored in our PostgreSQL database hosted on our own VPS in Singapore. We do not use third-party cloud providers for data storage.
AI Diagnostics
When you request an AI diagnostic, we send frequency response data (numerical arrays, not raw audio) to the Anthropic API for analysis. This data is not retained by Anthropic after processing. You must explicitly trigger this feature — it never runs automatically.
Third-Party Services
We use Plausible Analytics for privacy-friendly usage statistics (no cookies, no personal data). Payment processing is handled by Paddle (for Pro subscriptions). We do not use Google Analytics, Facebook Pixel, or any advertising tracker.
GDPR Rights
Under GDPR, you have the right to: access your personal data (GET /api/auth/export), rectify inaccurate data (PUT /api/auth/me), erase your data (DELETE /api/auth/me), restrict processing, data portability (JSON export), and object to processing. All requests can be made through your account settings or by emailing [email protected].
Contact
For privacy-related questions, contact us at [email protected]. We aim to respond within 48 hours.