Privacy policy

Last updated: 2026-10-13

Dawbrain is operated by Alon Amsellem. We take your privacy seriously. This page explains what data we collect, why, and your rights over it.

Applicable law

We comply with applicable data protection law, and with the EU General Data Protection Regulation (GDPR) for residents of the European Economic Area.

Data we collect

• Account data: email and name from your Clerk sign-in.
• Usage data: message counts, conversation history, error logs, and actions you take in the app, such as opening a page or pressing a button. We collect these ourselves and do not share them with an analytics service.
• Technical data: IP address, user-agent, cookies (see Cookies).
• Session context from your DAW: track names, mixer state, device parameters. This is sent to our AI provider as part of each request to generate an answer. We store it with the conversation history, along with a short summary of your Set so Dawbrain can see what changed.
• Library metadata: to help you find and load sounds, the local agent indexes your installed Ableton library: factory content, installed Packs, your User Library, and your own samples. When a request calls for it (for example, "load a warm analog bass" or "put an 808 kick on track 2"), matching entries are sent to our AI provider as part of that request. This can include the names, the packs and folders they are organised in, tags and keywords, and file sizes of the samples, presets, and devices in your library. It is stored as part of the conversation history. We do not upload the audio files themselves, and we do not send the files' locations on your disk, only this catalogue information about them.

Why we collect it

• Service performance: we can't run Dawbrain without knowing who you are, what you've asked, and what your session looks like. Library metadata lets Dawbrain find and load the right sounds from your own library on request.
• Abuse prevention: we look at error logs and usage patterns to keep the service healthy.
• Legal compliance: billing records, subscription status.

Under GDPR, our legal bases are contract performance (Art. 6(1)(b)), legitimate interest for abuse prevention (Art. 6(1)(f)), and consent for optional features (Art. 6(1)(a)) where applicable.

Sub-processors

We use a small set of third-party services.

• Anthropic (AI inference, US): your prompts and session context are sent here to generate each response.
• Clerk (authentication, US): holds your account email / name.
• Render (hosting, US region): hosts our web and API.
• Lemon Squeezy (payments, Ireland / US): processes subscriptions as our merchant of record; handles billing info directly.
• fal.ai (audio generation, US): receives the prompt and lyrics of a song, loop or one-shot you ask Dawbrain to generate.
• Cloudflare (DNS, edge proxy and web analytics, global): sees request metadata and IP addresses for dawbrain.com and the app; the analytics are aggregated and cookieless.
• Sentry (error reporting, EU): receives error reports from our API and web app with browser and OS details and your account id, never prompts or conversation content. When an install fails, the install script sends the failing step, the error, OS details and on Windows which Ableton Live versions are installed or have been opened, with your home folder, user name and computer name removed and no account id; setting DAWBRAIN_NO_REPORT=1 turns this off. The Dawbrain app reports failed updates with version and OS details.
• Resend (transactional email, US): delivers the feedback you send us from the app and service notices; receives your email address and the text you submit.

AI-specific disclosures

• We do not use your conversations to train AI models. Our Anthropic API plan prohibits training on customer data by default.
• AI outputs may be wrong. Dawbrain is a large language model; it can suggest incorrect or unsafe actions. Use judgment before applying anything to important work.
• EU AI Act Art. 50 transparency: for users in the EU, you are interacting with an AI system; outputs are generated by a large language model.

Retention

• Conversation history is kept until you delete a conversation (in the app) or close your account.
• Account data is deleted within 30 days of account closure, except where law requires longer retention (e.g. billing records).

Your rights

You have rights to access, correct, and delete your personal data. EU residents additionally have rights under GDPR to access, erasure, portability, objection, and to lodge a complaint with a supervisory authority.

To exercise any of these, email info@dawbrain.com.

Changes

Material changes to this policy will be announced at least 30 days before they take effect. The date at the top of this page always reflects the most recent revision.