Privacy policy

Last updated: 2026-07-13

Dawbrain is operated by Alon Amsellem. We take your privacy seriously. This page explains what data we collect, why, and your rights over it.

Applicable law

Our primary framework is Israel's Protection of Privacy Law 5741-1981 and the Data Security Regulations 2017. We also comply with the EU General Data Protection Regulation (GDPR) for residents of the European Economic Area. Israel has been recognised by the European Commission as providing an adequate level of data protection, so data transfers from the EEA to Israel do not require additional safeguards.

Data we collect

• Account data: email and name from your Clerk sign-in.
• Usage data: message counts, conversation history, error logs.
• Technical data: IP address, user-agent, cookies (see Cookies).
• Session context from your DAW: track names, mixer state, device parameters. This is sent to our AI provider as part of each request to generate an answer. We store it only as part of the conversation history; we don't keep a separate copy of your session state.
• Library metadata: to help you find and load sounds, the local agent indexes your installed Ableton library — factory content, installed Packs, your User Library, and your own samples. When a request calls for it (for example, "load a warm analog bass" or "put an 808 kick on track 2"), matching entries are sent to our AI provider as part of that request. This can include the names, the packs and folders they are organised in, tags and keywords, and file sizes of the samples, presets, and devices in your library. It is stored as part of the conversation history. We do not upload the audio files themselves, and we do not send the files' locations on your disk — only this catalogue information about them.

Why we collect it

• Service performance: we can't run Dawbrain without knowing who you are, what you've asked, and what your session looks like. Library metadata lets Dawbrain find and load the right sounds from your own library on request.
• Abuse prevention: we look at error logs and usage patterns to keep the service healthy.
• Legal compliance: billing records, subscription status.

Under GDPR, our legal bases are contract performance (Art. 6(1)(b)), legitimate interest for abuse prevention (Art. 6(1)(f)), and consent for optional features (Art. 6(1)(a)) where applicable.

Sub-processors

We use a small set of third-party services.

• Anthropic (AI inference, US): your prompts and session context are sent here to generate each response.
• Clerk (authentication, US): holds your account email / name.
• Render (hosting, US region): hosts our web and API.
• Lemon Squeezy (payments, Ireland / US): processes subscriptions as our merchant of record; handles billing info directly.

AI-specific disclosures

• We do not use your conversations to train AI models. Our Anthropic API plan prohibits training on customer data by default.
• AI outputs may be wrong. Dawbrain is a large language model; it can suggest incorrect or unsafe actions. Use judgment before applying anything to important work.
• EU AI Act Art. 50 transparency: for users in the EU, you are interacting with an AI system; outputs are generated by a large language model.

Retention

• Conversation history is kept until you delete a conversation (in the app) or close your account.
• Account data is deleted within 30 days of account closure, except where law requires longer retention (e.g. billing records).

Your rights

You have rights to access, correct, and delete your personal data. EU residents additionally have rights under GDPR to access, erasure, portability, objection, and to lodge a complaint with a supervisory authority.

To exercise any of these, email privacy@dawbrain.com.

Changes

Material changes to this policy will be announced at least 30 days before they take effect. The date at the top of this page always reflects the most recent revision.