1. Who is responsible
CleanWave is operated by Independent Entrepreneur MARIUS CERESCU, IDNO 1026023014966, legal form Entrepreneurial activity of a natural person, established in the Republic of Moldova and operating under the CleanWave brand.
Provider and correspondence address: 20 Prisăcarului Street, MD-6526, Anenii Noi, Republic of Moldova.
Marius Cerescu is the data controller for account, website, security and billing data. Privacy requests can be sent to [email protected] or +373 60 398 246.
For personal data contained in audio uploaded by a customer, the customer normally determines why that data is processed and CleanWave acts as a processor on the customer's instructions. Customers must have a lawful basis and appropriate authority to upload and anonymize recordings.
2. Data we process
- Account data: Google account identifier, verified email address and display name.
- Audio and project data: uploaded audio, transcript, timestamps, detected private information, redaction settings and generated audio.
- Billing data: credit balance, transaction identifiers, purchased quantity and payment status. Payment and tax details are collected directly by the payment provider.
- Technical data: IP address, request identifiers, security events, device/browser information and diagnostic logs.
- Cookie choices: the preference recorded on your device.
3. Why we process data
4. How audio is handled
Audio is stored in a private object store only for the time needed to process, review and download the result. CleanWave-controlled audio, transcripts, generated files and project metadata are automatically deleted within 24 hours. You can also delete a project earlier from the application.
Audio is made available temporarily to the configured AI processing service for transcription and privacy analysis. CleanWave requests deletion of temporary provider files after analysis where supported. Provider-side security or abuse-monitoring retention may still apply under the provider's terms.
5. Service providers and recipients
- Google: cloud hosting, AI-assisted audio processing, logging and Google OAuth authentication.
- Cloudflare: website delivery and private object storage.
- Neon: PostgreSQL account, project and billing metadata.
- Payment provider: checkout, payment, tax, fraud prevention and transaction records when purchases are enabled.
These providers process only the data required for their function and may act as processors or independent controllers for specific services such as payment and authentication.
6. International transfers
CleanWave operates from Moldova and uses international providers. Data may therefore be processed outside your country or the EEA. Where required, transfers must rely on an adequacy decision, standard contractual clauses or another lawful safeguard, together with appropriate technical and organizational measures.
7. Retention
- Audio, transcripts, redaction data and generated files: deleted within 24 hours, or earlier when you delete the project.
- Google OAuth state cookie: up to 10 minutes.
- CleanWave session: up to 7 days unless you sign out earlier.
- Account and credit ledger: while the account is active and as needed to provide credits and resolve disputes.
- Invoices and transaction records: for the period required by applicable accounting and tax law.
- Security logs: only as long as reasonably necessary for security, troubleshooting and legal obligations.
8. Your rights
Depending on the applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Send requests to [email protected]. We may need to verify your identity.
You may complain to the National Center for Personal Data Protection of the Republic of Moldova or, if GDPR applies, to the supervisory authority in your EEA country.
9. Security and automated processing
CleanWave uses encryption in transit, private storage, access controls, signed sessions, rate limits, restricted secrets and automatic deletion. No system is completely risk-free. Automated models suggest redactions, but users retain review and editing controls; CleanWave does not use audio analysis to make decisions producing legal or similarly significant effects about a person.
10. Zero-Access Confidential Processing
For Zero-Access projects, encryption begins in your browser before upload. CleanWave's ordinary systems and operators do not receive a usable project key and cannot read stored audio, transcripts or detected personal information.
Readable content is opened only in a verified, hardware-protected environment for the processing requested by you, then protected again for review. Approved service providers may temporarily process content only to perform that requested task. Account, billing and operational metadata remain available to CleanWave where needed to operate the service.
Because CleanWave keeps no recovery copy of the browser-held project key, it cannot recover an encrypted project if the key is lost. Clearing browser storage or moving to another device may therefore make the project permanently inaccessible. Read the Security page for a plain-language summary of safeguards and limitations.
11. Children and changes
CleanWave is not directed to children. Do not upload recordings involving children unless you have the necessary authority and lawful basis. We may update this policy when the service, providers or law changes. Material changes will be shown in the product or on this page.