Privacy

EchoWave Privacy Policy

Last updated: 12 June 2026

What we collect when you use EchoWave, why we collect it, and the controls you have over it. Written to be read, not skimmed past.

What we collect

Your account details, the content you upload, and usage data. Nothing more.

What we never do

We never sell your personal data. Not to advertisers, not to data brokers, not to anyone.

Payments

Stripe processes every payment. Your card number never reaches our servers.

Deleting your data

Delete projects, media, or your whole account yourself from your account page.

Most privacy requests need no request at all

You can update your details, delete projects and media, and delete your entire account yourself from the account page in the app.

Who we are

EchoWave (echowave.io) is an online video and audio editor operated by Lemon Vault LLC, a company registered in the United States. The data controller is Lemon Vault LLC, 500 4th St NW Suite 102/1985, Albuquerque, NM 87102, USA.

For any privacy question or request, email hello@echowave.io. We aim to respond within 24 business hours.

Information we collect

  • Account information. Your name and email address when you register. Passwords are handled by Firebase Authentication and stored only as scrypt hashes, never in plain text.
  • Your content. The audio, video, images, and projects you upload or create. We store this solely to provide the service. Your content remains yours.
  • Payment information. Payments are processed by Stripe. Your card details go directly to Stripe. We only keep your subscription status and billing metadata.
  • Usage and device data. Log data such as IP address, browser type, pages visited, and actions in the editor, used for analytics, performance, and security.
  • Messages you send us. If you contact support, we keep the conversation so we can help you.

How we use your information

We use this information to provide and operate EchoWave, process payments, improve the product, keep accounts secure, prevent fraud and abuse, send service emails, and meet our legal obligations. Optional product updates always come with a one-click unsubscribe.

Under the GDPR, our legal bases are the performance of our contract with you, our legitimate interests in running and protecting the service, your consent where we ask for it, and compliance with the law.

Who we share data with

We never sell your personal data. We share it only with the service providers that run EchoWave:

  • Google Cloud Platform & Firebase. Application hosting, databases, and authentication.
  • Backblaze. Media storage.
  • Stripe. Payment processing.
  • Cloudflare. Content delivery and network security.
  • Analytics and monitoring. Product analytics and error monitoring (PostHog and Sentry) so we can fix problems and improve the product.

We may also disclose information if required by law. You can read how these providers protect your data on our security page.

Cookies

EchoWave uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the product is used. You can manage cookies through the consent banner and your browser settings. Essential cookies are required for the service to work.

Data retention

We keep your personal data for as long as your account is active or as needed to provide the service. When you delete content or your account, it is removed from our active systems promptly and from backups within a limited period after that.

Your rights and self-service controls

Most privacy controls in EchoWave are built into the product:

  • Delete projects and media at any time inside the editor.
  • Delete your entire account, including your personal data, from your account page.
  • Update your details (name, email, password) from the same page.

Under the GDPR you also have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Under the CCPA, California residents have the right to know what personal data we collect, request its deletion, and opt out of any sale of personal data. We do not sell personal data.

To exercise any of these rights, email hello@echowave.io. We will respond within one month. You also have the right to lodge a complaint with your local data protection authority.

International transfers

EchoWave runs on infrastructure in the United States and Europe. Where personal data is transferred internationally, our providers rely on recognised safeguards such as standard contractual clauses.

Children

EchoWave is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will promptly remove it.

Changes to this policy

If we make material changes to this policy, we will update this page and the date at the top. Continued use of EchoWave after a change means you accept the updated policy.

Contact us

Questions about privacy at EchoWave? Email hello@echowave.io or write to Lemon Vault LLC, 500 4th St NW Suite 102/1985, Albuquerque, NM 87102, USA.

Privacy FAQ

How do I delete my account and data?

Go to your account page in the app and choose to delete your account. This removes your personal data and uploads from our active systems. You can also delete individual projects and media inside the editor at any time.

Does EchoWave sell my data?

No. We never sell your personal data, and we only share it with the service providers needed to run EchoWave, such as Google Cloud for hosting and Stripe for payments.

Who can see the videos I upload?

Your uploads are private to your account. We do not publish, share, or sell your content, and staff access to user data is restricted to authorised personnel for support and operations.

How do I make a GDPR or CCPA request?

Most rights are self-service from your account page. For anything else, like a full data export, email hello@echowave.io and we will respond within one month.

What people say about EchoWave