DrumPaper Privacy Notice
Prepared: 17 September 2026 · Draft v0.4 · Effective date: not finalised.
1. Information processed and purposes
| Category | Information | Purpose and basis under review |
|---|---|---|
| Google sign-in and account | Provider user identifier, email, name/profile picture and other sign-in data, service user ID, session/authentication tokens | Linking your account and maintaining sign-in as necessary to form and perform the agreement. Actual fields depend on OAuth settings and account status |
| Audio analysis and scores | Submitted files, filenames, song/artist information, original audio, intermediate separation/analysis data, playback audio, notes, lyrics, results and edit history | Providing requested analysis, editing, storage and practice playback. Voices or filenames may identify people |
| Usage and credits | Job ID, processing times/status, credit grants/reservations/consumption/returns and subscription status | Running jobs and managing usage limits and payment-related permissions |
| Audio-rights confirmation | Account ID, confirmation version and source-text hash, displayed language and server timestamp | Evidence of confirmation and applicable wording, dispute handling and avoiding repeated notices. Only necessary records are kept; no extra IP addresses or device fingerprints are collected solely to prove consent |
| Enquiries | Email, message and attachments you submit | Enquiries, rights requests and disputes |
| Access and operations | IP, access times, request/error and other operational logs processed by hosting, authentication and analysis providers | Delivery, incident response and security. Actual fields and periods require provider-setting checks |
DrumPaper does not receive your Google password. It currently has no feature that directly collects or stores card numbers or security codes. Lemon Squeezy handles payment, subscription and refund integration. We receive order/subscription identifiers, products, paid/refunded amounts and currencies, processing times and statuses to manage entitlements and credits. Live payments are offered for activated products after store approval and are distinguished from tests. Marketing or advertising-tracking consent is not assumed to be included.
2. How audio is processed and stored
Selected audio is converted to 192kbps MP3 in your browser. The converted copy is stored by account and score in browser IndexedDB. Only the converted copy needed for analysis is sent to private Supabase storage, with drum separation and analysis performed on Modal. New free-trial, separately purchased-credit and Lite analyses do not retain practice-playback copies on the server. After completion, failure or cancellation, unreferenced temporary audio enters a deletion queue. Failures are retried; immediate complete erasure is not guaranteed. Files predating the policy and backups follow separate retention/deletion procedures. Score results are stored in the account database.
Pro and Premium allow cloud audio storage/playback during valid subscriptions within 1GB and 3GB respectively. Opening a score with device audio may store it in private cloud storage. Browser audio is used on that device/browser and is not served to another account’s playback requests. Site-data deletion, storage shortages and browser policies may remove it. If browser storage is unavailable, we notify you that use is limited to the current tab. Missing audio can be reconnected using the same file without reanalysis or credit deduction.
The processing pipeline currently has no feature that retrains models using audio. Access is restricted to the user’s account; there is no public score catalogue or third-party sale. This describes access controls, not a guarantee that unauthorised access is impossible.
3. Retention and deletion
Information is deleted without undue delay once its purpose is met, after a lawful deletion request or at the end of use, except where legal obligations or another lawful basis require separate retention within a defined scope and period. The following periods and operations must be finalised before launch.
- Incomplete registrations: user identifiers, email, name/profile picture and linked authentication/session data temporarily created through Google authentication are kept to complete registration. Accounts newly created after this policy applies become eligible for deletion if registration is not completed within 24 hours of initial creation. A daily server task checks completion and deletes incomplete accounts and linked authentication data, normally 24–48 hours after initial creation, retrying after outages. Reloading or signing in again does not extend the deadline. Existing members and accounts with past acceptance, service-use or payment records are excluded and handled under their applicable retention basis. The Google account itself is not deleted. Providers’ security logs and backups follow separate policies.
- Scores and stored audio: unsubscribed scores and free previews are retained for 30 days from generation completion. Subscription scores receive a grace period from the end of paid access of 30 days for Lite, three months for Pro and six months for Premium. Resubscribing before expiry applies the new retention period to valid scores. Temporary server analysis files for device-storage products are cleaned up when unreferenced after completion, failure or cancellation. Pro/Premium audio follows its subscription-end grace period; changing to Lite alone does not extend it.
- Score deletion: direct deletion removes content and edit history and hides the item from the library. At retention expiry, access is blocked and scheduled cleanup removes content/history. Audio references are removed and storage objects deleted through the queue. Files referenced by another valid score are deleted only when those references end. Failed deletion is retried, so physical deletion may be delayed. Backup retention/expiry procedures remain to be confirmed; immediate complete erasure is not promised.
- Transaction records after paid sales begin: applicability of Korean e-commerce retention obligations will be assessed, including five years for contracts/withdrawal and payment/supply records, three years for consumer complaints/disputes and six months for advertising records, with separate retention. These periods do not apply indiscriminately to all audio or account information.
- Operational/access logs and enquiries: periods must be set according to actual needs and legal basis and reflected in provider settings. A universal duty to keep all website visit logs for three months is not assumed.
Electronic files must be deleted so recovery/playback is difficult, and backups expire under a defined rotation. Dispute or statutory preservation must distinguish the data, basis, duration and access permissions.
4. Processors, authentication and payments
| Provider | Current role | To confirm before launch |
|---|---|---|
| Supabase | Authentication, database, private file storage and general API processing | Contracting entity/contact, project region, authentication/log/backup locations and periods, subprocessors |
| Modal | Audio processing, drum separation, lyrics/score analysis and job execution | Contracting entity/contact, actual execution regions, temporary-file/log retention and subprocessors |
| Vercel | Website hosting and request delivery | Contracting entity/contact, access/error log and cache regions/periods |
| Social authentication selected by the user | Actual OAuth fields and processing relationship; not automatically classified as a processor | |
| Lemon Squeezy | Payments, subscriptions, refunds and order/status notifications | Live payments are connected following store approval. Lemon Squeezy acts as Merchant of Record for payments, taxes and refunds. DrumPaper receives order/subscription identifiers and status to provide access and does not collect full card numbers. |
We distinguish processing on our behalf from disclosure to third parties based on actual contracts and data flows and arrange required contracts, oversight, notices and consent. Data is not disclosed for publication or sale without a lawful basis or valid consent.
5. International transfers
Processing routes checked on 2026-09-25 are listed below. Primary storage can differ from authentication, routing, support and log processing locations.
| Service and contact | When, how and what is transferred | Verified location and retention scope |
|---|---|---|
| [Supabase](https://supabase.com/privacy), privacy@supabase.com | Encrypted requests during registration, login, upload and saving: account, audio, scores, usage and payment status | Production and development primary storage: Sydney, Australia (ap-southeast-2). Service data deletion follows sections 3 and 11. Detailed countries and retention for authentication, logs, backups and support require contract and plan verification |
| Modal Labs, Inc., security@modal.com | Encrypted job identifier on analysis; the worker downloads audio for processing | Compute region is not pinned. Asynchronous call data and logs are stored in the US. Function inputs/outputs: up to 7 days; logs: 1 day on Starter, 30 days on Team, with our plan still to verify. Audio and intermediate files use temporary working directories cleaned after processing, not persistent Volumes |
| Vercel Inc., privacy@vercel.com | Website requests: IP, URL, time and browser information | Global CDN delivery; actual countries and log retention require account and contract verification. Audio uploads go directly to Supabase, not through Vercel |
| [Google](https://policies.google.com/privacy) | Login authentication exchange; email inquiries received in Gmail | Login/Gmail contracting entities, processing countries and retention remain to verify. GA4 is disabled; no new visitor analytics is sent |
| [Lemon Squeezy](https://www.lemonsqueezy.com/privacy) | Encrypted email, product, order, subscription and transaction information during checkout, subscription management and refunds | As Merchant of Record, its own payment, tax and dispute retention applies. DrumPaper records follow sections 3 and 11. Contracting entity, processing countries and specific provider retention remain to verify |
Modal receives a job identifier as its function argument, not the audio file itself; results are written to Supabase. This draft distinguishes checked settings from public provider information. Not all recipient countries, entities, periods or transfer grounds have been finalized.
Request cessation or deletion at livefully.official@gmail.com or through account deletion. Stopping essential authentication, analysis or storage prevents the relevant features; refusing optional analytics does not affect service access. The upload rights checkbox is not blanket transfer consent. Grounds for contract-related processing/storage and transfers needing separate consent must be finalized before publishing the final notice.
6. Cookies and local storage
Browser storage holds sessions, language/theme, the last score and editing preferences. Audio dropped while visiting pricing may be held temporarily in IndexedDB. It is removed when read on return to the free trial; files older than one hour are not reused. If you do not return, the file may remain until browser data is deleted; this is not automatic server deletion.
You can block or delete cookies/site data in browser settings, which may limit sign-in persistence and temporary-file recovery. Official audio-permission records are server-side account records, not browser settings.
7. Your rights and safeguards
Contact us to request access, correction, deletion, restriction of processing or withdrawal of applicable consent. We verify your identity or authorised representation only as needed and respond under statutory procedures. Where restrictions or retention duties apply, we explain the reason and scope.
Measures include authentication checks, account-scoped database access, private storage and expiring access URLs, encrypted transport and separated server secrets. Backup, access-log review, deletion and incident-response operations require continuing review. You must be at least 16 to register. If you are a minor under the law of your place of residence, you must obtain any required parent or legal guardian consent to the service agreement and paid purchases. We retain your confirmation that you are at least 16 with your terms acceptance. For checkout, we record the wording, version, language and time of your adult-or-guardian-consent confirmation with the payment request. This is self-attestation; we do not collect a birth date or identity document for it.
You may seek advice from relevant authorities, including Korea’s Personal Information Infringement Report Center or Personal Information Dispute Mediation Committee. Current contact details are on their official websites.
8. Changes to this notice
We announce the changes and effective date when purposes, data, retention, processors or international transfers change. Changes requiring separate consent follow the necessary procedure. Reading this notice alone is not consent to optional processing.
9. AI training and device playback cache
Uploaded audio and generated results are not used for AI training outside service provision. A future change would require separate disclosure of training purposes and data and any necessary separate consent.
Up to 100MiB of compressed playback audio may be cached in your browser to reduce repeat downloads. Cache reuse is valid for 30 days; expired files are removed on use/cleanup, and explicit logout clears the cache. Without revisiting, expired files may remain until site data is deleted. This is separate from server audio retention and can be cleared in browser settings.
Google Analytics 4
Google Analytics 4 (GA4) is currently disabled. We do not load the Google analytics tag, send visitor analytics or create new analytics cookies. Suspending collection does not itself delete previously transmitted statistics or cookies left in your browser. Storage needed for login, language and theme remains in use. If analytics is introduced later, we will update this notice and obtain the required optional consent.
10. Controller and contact
Service: DrumPaper. Registered business: 리브풀리 (Livefully). Representative: 진현덕. Business registration: 431-12-03257. Address: 서울특별시 필운대로 7길 6 104호, Republic of Korea. Privacy and complaints contact: Livefully operations. Requests for access, correction, deletion, restriction and complaints: livefully.official@gmail.com.
11. Account deletion
You can request account deletion from your account page. We immediately block service access and new analysis/uploads, then cancel subscription renewals and erase data. Final deletion starts after at least three hours to allow issued upload links and in-flight work to settle, normally within 24 hours. Provider or storage failures are retried and outstanding requests are reviewed. We delete the sign-in account, scores/edit history, server audio, analysis history, account acceptances and audio-rights confirmations. Your Google account is not deleted.
Payment, subscription and refund records, payment confirmation wording and necessary credit-use records are detached from the account and retained with restricted access for five years before cleanup. Unpaid checkout requests and completed deletion-operation records are removed after 30 days. Unresolved payments, refunds or disputes are reviewed for cleanup after resolution and verification of the applicable retention basis. Account deletion does not automatically refund payments; contact us separately for refunds.
We also attempt to remove audio stored in the current browser. Local files on other devices or browsers cannot be erased remotely; clear the site data on those devices. Provider backups and security logs follow separate policies; their detailed periods still require confirmation.
privacy-2026-09-25-v16-draft