Privacy Policy

Who we are

WALDHORN.AI is a music-industry legal workspace operated by WALDHORN AI INC ("WALDHORN", "we", "us"). For the purposes of the EU and UK GDPR, we are the data controller of the personal data described here. You can reach us at privacy@waldhorn.net.

Information we collect

Information you provide

• Account details. Your name and email address when you register, including through Google sign-in.
• Contracts and documents. The agreements you generate, upload, review, negotiate, sign, or audit, and the information you enter into intake forms.
• Payment information. When you buy credits or subscribe, our payment processor collects your card details. We receive confirmation and billing metadata, not your full card number.
• Support and communications. Messages you send us and enterprise enquiries.

Information we collect automatically

• Usage and device data. Basic, largely aggregate information about how the service is used, to keep it reliable and secure.
• Cookies. A minimal set described in our Cookie Policy.

How we use information

• To provide the service: generate, review, negotiate, sign, and audit your contracts.
• To process payments and manage your account and credits.
• To send transactional messages such as signing links, receipts, and notifications.
• To secure the service, prevent fraud and abuse, and debug problems.
• To improve the service and develop new features.
• To meet legal, tax, and accounting obligations.

We do not sell your personal data, and we do not use the contents of your contracts to advertise to you.

How AI processing works

The core of WALDHORN is AI analysis. To draft an agreement, read a clause, or audit a statement, we send the relevant document content to AI subprocessors (currently Google's Gemini API and, for some features, OpenRouter) so they can produce the output you request. These calls are made from our servers, not from your browser.

Where a provider offers configurations intended to keep API content out of the training of their general models, we prefer them. Provider terms are set out in their own documentation and may change; the providers we rely on are listed on our Subprocessors page. WALDHORN.AI is a tool, not a law firm, and its output is not legal advice.

Legal bases

For users in the EU, the UK, and comparable jurisdictions, we rely on the following legal bases:

• Performance of a contract. To provide the service you sign up for.
• Legitimate interests. To secure, maintain, and improve the service, balanced against your rights.
• Consent. Where we ask for it, such as certain optional communications. You can withdraw consent at any time.
• Legal obligation. To comply with tax, accounting, and other laws.

Sharing and subprocessors

We share personal data only with the subprocessors that help us run the service (hosting, authentication, AI inference, payments, email, and analytics), each under contractual data-protection obligations. The current list, with each party's role and location, is on our Subprocessors page. We may also disclose information where required by law or to protect the rights and safety of our users and the service.

International transfers

Our service and subprocessors operate primarily in the United States, so your information may be processed there and in other countries. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Data retention

We keep your account and contract data for as long as your account is active so the service works as you expect. When you delete content or your account, we delete or anonymize the associated personal data, except where we must keep certain records to meet legal, tax, or security obligations.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, export, restrict, or object to our use of your personal data, and to withdraw consent. You can export or delete your account data at any time from your profile, or write to us at privacy@waldhorn.net. If you are in the EEA or UK, you also have the right to complain to your local supervisory authority.

Security

We protect your data with encryption in transit (HTTPS and HSTS), role-based access on a least-privilege basis, and an incident-response process. No system is perfectly secure, but we treat the confidentiality of your contracts as central to the product. See our Trust center for more.

Children

WALDHORN.AI is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us information, contact us and we will remove it.

Changes to this policy

We may update this policy as the service and the law evolve. When we make material changes, we will update the date above and, where appropriate, notify you.

Contact us

Questions about privacy or a request about your data can be sent to privacy@waldhorn.net, addressed to WALDHORN AI INC.