Privacy Policy

This policy explains what Ninja MDE S.A.S. ("Vrenvo", "we") collects when you use vrenvo.com, and what we do with it. Questions: ninja@vrenvo.com.

1. What we collect

• Account data — your email address, password (stored as a hash, never in plain text), and optional display name.
• Your uploads — audio files you submit for hosting, analysis, or mastering, the origin you declare for each track (made by people, by AI, or both — shown publicly with the track once you publish it), plus the results we compute from them.
• Usage data — plays, likes, tips, tool runs, credit transactions, and technical logs (IP address, browser type) used for security, rate limiting, and abuse prevention.

2. How audio is processed

Tracks you upload for hosting, Hit-or-Not analysis, or mastering are processed server-side: our servers measure the audio (loudness, true peak, spectral balance and similar signals) and, for some tools, send derived measurements — not your audio — to an AI model to generate analysis or mastering decisions.

Genre suggestion. After an upload, we may send a 30-second excerpt of the track — never the full file, with its metadata stripped — to a music-classification model hosted by Replicate, Inc. to suggest a genre. The suggestion is private to you until you confirm it; the excerpt is used only to answer that one request. Genre suggestions from the model can be switched off platform-wide, and are never used to train anything.

3. Storage, cookies and analytics

We set no advertising cookies, and we never sell or share what we store with an advertiser. What Vrenvo keeps in your browser is listed below, in full. Our servers also keep standard request logs (IP address, page requested, timestamp) for security and rate-limiting only.

What we store in your browser. All of it is browser storage on vrenvo.com — not cookies, and never readable by another site.

• vrenvo_token_v1 — your sign-in token. Without it you would be signed out on every page load. Removed when you sign out.
• vrenvo_queue_v1 — the play queue you built, so a reload does not lose it. It never starts playing by itself.
• vrenvo_consent_v1 — the choice you made on the privacy bar, so we stop asking.
• vrenvo_ref_v1 — the referral code of the link you arrived on, kept for this visit only (it is cleared when you close the tab).
• vrenvo_twa_v1 — a flag noting that this session is running inside the installed Android app, kept for this visit only.
• vrenvo_anon_v1 — a random id for this browser, used only for product analytics. It is created only if you choose "Accept all", and never otherwise.

Analytics, only if you allow it. On your first visit we ask one question: accept all, or essential only. Nothing optional runs until you answer, and "Essential only" is a complete answer — the product works the same either way. If you accept, we use PostHog as our analytics processor and send a small number of product events: which screen a paywall was seen on, that a share link was copied, that a checkout was opened, and similar. Each event carries the random browser id above (or, once you are signed in, your account id), the event name and a short list of non-identifying properties. We never send your email address, your display name, your track titles, your audio, or the contents of anything you upload. We do not join your anonymous browsing to your account: the events from before you signed in are never merged into your account's history.

Analytics run only when both are true: we have enabled a key for them, and you have allowed them. If either is missing, nothing is sent at all.

Error reporting is essential and is not optional. When a page fails we send the error and the technical context around it to Sentry, our error-reporting processor, so the failure can be fixed. These reports carry no analytics id and no marketing use. A product that cannot see its own crashes cannot be repaired, so this is described here rather than offered as a choice.

Changing your mind. Use the button below to forget your choice — we will ask again on your next visit, and any analytics id we hold in this browser is deleted with it. Clearing this site's data in your browser settings removes everything in the list above, including your sign-in.

Change your privacy choice

4. What we do not do

• We do not sell your personal data.
• We do not use your uploads to train AI models.
• We do not share your data with third parties except the processors needed to run the Service, each bound to their own privacy obligations: payment processing (Paddle), cloud hosting and backups (Railway; an S3-compatible backup store), AI analysis of derived measurements (Anthropic), music classification of a 30-second excerpt (Replicate), transactional email (Resend), error reporting (Sentry), and — only with your consent, as section 3 describes — product analytics (PostHog).

5. Retention

Account and transaction records are kept while your account exists and as required for accounting and legal obligations. Audio artifacts from tool runs (mastered files, stems, cleanup outputs) are retained for limited periods defined in our platform configuration and then automatically deleted. Tracks you publish are kept until you delete them or your account.

We take nightly encrypted backups. When you delete something, it leaves our live systems immediately and ages out of our backups within 30 days.

6. Your rights and deletion

You can delete your account yourself, from inside Vrenvo: Profile → Delete account. It asks for your password and removes your account, your uploaded tracks and their audio, and your tool runs. Unspent credits are forfeited and are not refunded. Records we must keep by law — billing and transaction history — are retained without your identity attached to them, and tips you sent stay with the artists who received them. You may also request access to or correction of your personal data by emailing ninja@vrenvo.com from your account address. Colombian data protection law (Ley 1581 de 2012) grants you habeas data rights; residents of other jurisdictions retain any rights their local law provides.

7. Children

The Service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.

8. Changes

We may update this policy; material changes are announced on the Service or by email.

9. Contact

Ninja MDE S.A.S. · Medellín, Colombia · ninja@vrenvo.com