Privacy Policy

Who we are

HitHat is operated by Aya Labs B.V., based in the Netherlands. For anything in this policy, contact hello@ayalabs.xyz.

What we collect

Account data: your email address and display name. If you sign in with Google, we receive your name, email address, and profile picture from Google and nothing else.

Content: the audio files, artwork, project details, and comments you upload or write.

Listener activity: when someone opens a share link we record plays, downloads, and comments, together with the name the listener chooses to give. Listeners without an account are not otherwise identified.

Technical data: standard server logs such as IP address and browser type, kept for security and debugging.

How we use it

To run the service: store and stream your audio, show you feedback and activity on your projects, sign you in, and send emails you ask for, such as sign-in links.

We do not sell personal data, we do not use your audio to train models, and we do not run advertising.

Who processes it for us

Supabase (database, authentication, and file storage, hosted in the EU) and Vercel (web hosting). Google is involved only if you choose Google sign-in. Each acts as a processor under a data processing agreement.

Retention and deletion

Your content stays until you delete it. Deleting a project removes its audio, comments, and activity. Deleting your account removes everything tied to it. Server logs are kept for a limited period and then discarded.

Your rights

Under the GDPR you can ask to access, correct, export, or erase your personal data, and you can object to or restrict processing. Email hello@ayalabs.xyz and we will respond within 30 days. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

We use only the cookies needed to keep you signed in. There are no advertising or cross-site tracking cookies.

Changes

If this policy changes in a meaningful way we will update the date above and, where appropriate, tell you by email.