Privacy Policy

Presswaves (presswaves.app) is operated by Wallace Batista de Oliveira, a private individual, responsible for processing the data described in this policy, under Brazil's General Data Protection Law (LGPD, Law 13.709/2018).

Account data: the name and email provided at sign-up, and your password (stored only as a cryptographic hash — never in plain text).

Your press kit data: what you type or upload yourself to build your page — artist name, bio, genres, location, photos, social media links, booking/management contact, and the music player embed code. This data becomes public as soon as you publish the press kit.

Access data for your published press kit: for each visit, we record the visitor's city, region, and country (from geolocation headers provided by our hosting infrastructure), the referring page (where the click came from), and the time — never the raw IP address, and we never identify the visiting person. This report is always shown to you in aggregate form (counts), never as a list of visitors.

Transient technical data: when you sign up for our waitlist, your IP address is processed for a moment only, to limit abusive repeated sign-up attempts (anti-spam protection) — it isn't stored alongside your sign-up or used for any other purpose.

Cookies: we use only one cookie, the login session cookie, strictly necessary for you to stay authenticated between pages. We don't use advertising or third-party tracking cookies.

• Create and maintain your account, and enable login;
• Publish and display your press kit at the link you choose;
• Send emails necessary for the service to work: access invites, password recovery, and in the future a monthly report of visits to your press kit;
• Show you how many visits your press kit received, in aggregate form;
• Prevent abuse and spam on the waitlist and at sign-up;
• Investigate and fix technical issues (error monitoring).

We don't sell your data. We use the following service providers (sub-processors) to operate Presswaves, each receiving only the data necessary for its function:

• Vercel — hosting for the application and the network that delivers the site;
• Neon — the database (Postgres) where account and press kit data live;
• UploadThing — storage for the photos you upload;
• Resend — sending of transactional emails (invite, password reset);
• Upstash — rate limiting to prevent abuse on waitlist sign-up;
• Sentry — technical error monitoring for the application;
• Discord — we receive, in an internal channel restricted to our own team, a notification with name and email when someone signs up for the waitlist or is invited — internal operational use, not sharing with a commercial third party.

Most of these providers operate infrastructure outside Brazil (mainly the US) — which may involve international transfer of your data, always limited to what's necessary to provide the service they've been contracted for.

We keep your account and press kit data for as long as your account exists. We also maintain an internal audit log (who did what, when) for security and administrative history — that log isn't deleted, but stops referencing your account once it's deleted (see section 6).

You can request at any time, by writing to echo@mail.presswaves.app: access to your data, correction of incorrect data, or deletion of your account and associated data. Today this request is processed manually by email — there's no self-deletion button in the dashboard yet.

When you delete your account: your account, presskit, and media are deleted; we also collect and delete the photo files stored on UploadThing. The internal audit log (section 5) stops referencing your account, but may retain your email within the history of a specific event when that's the only way to preserve which account that record belonged to.

Your password is never stored in plain text. Access to the database and administrative panels is restricted to the Presswaves team. No system is infallible — if we identify a security incident affecting your data, we'll notify you at your registered email.

Presswaves isn't directed at people under 18 and doesn't intentionally collect data from children or teenagers.

We may update this policy as the product evolves. Material changes will be posted on this same page, with the updated date revised at the top.

Questions about this policy or about your data: write to echo@mail.presswaves.app.