Privacy Policy
Version 2026-10-17 · Last updated 17 October 2026
SoundLab (soundlab.my) is run by DOTZ TECH (a sole proprietorship owned by Ling Sing Mei), Malaysia, who is responsible for your personal data under Malaysia's Personal Data Protection Act 2010. This page explains what we collect, why, where it's kept and what you can do about it.
What we collect
| What | Why |
|---|---|
| From Google when you sign in: your email address, name, profile picture link and Google account ID | To sign you in and keep your account yours |
| Files you upload (audio, and a cover picture from the file or a video frame), and the files SoundLab makes from them (separated vocals and music, exported mixes) | To provide the service to you |
| Song titles, lyrics (pasted or transcribed), saved mixes, playlists, your nickname and settings | To provide the service to you |
| Your plan and a record of the jobs you started (uploads, separations, lyrics syncs, exports) | To count credits and plan limits, and to show progress |
| Error reports: what went wrong, the page, your browser / device type and your SoundLab user ID (no email, no song titles, no lyrics) | To find and fix bugs |
When you upload a video, only its sound and one still frame leave your device; the video itself is never uploaded. We don't use advertising or tracking cookies, we don't sell your data, and we don't use your files or lyrics to train AI models.
Who processes it for us
We use these providers to run SoundLab. They process data only on our instructions.
| Provider | What for | Where |
|---|---|---|
| Supabase | Sign-in and the database (account, song details, lyrics, playlists, mixes, jobs) | Singapore |
| Cloudflare (R2, Pages) | Storing your audio files and covers; serving the website | Asia-Pacific; worldwide network |
| Railway | Our server, which checks sign-in and hands out file links (stores no files) | Singapore |
| Modal | Processing your audio (conversion, vocal separation, lyrics sync, exports); files are only kept while a job runs | United States and other regions |
| Sentry | Error reports | United States |
| Sign-in | Worldwide |
Some of these are outside Malaysia. We choose providers that protect data with encryption and access controls, and transfer only what each one needs.
How long we keep it
- Your account, songs, files, lyrics, playlists and mixes: until you delete them or delete your account.
- Unfinished uploads: deleted automatically after 1 day.
- Error reports: up to 90 days.
- After you delete your account, we keep one small record for up to one month: a scrambled (hashed) form of your Google account ID and how many credits you used that month, so that deleting and signing up again doesn't reset the month's free credits. It contains no email, name or files, and is deleted when that month ends.
Your choices and rights
- Delete: delete songs any time, or your whole account in Settings → Delete account. This permanently removes your files and data (except the one-month record above).
- Access and correct: you can see and change your data in the app. For a copy of your personal data, or to correct something you can't change yourself, email us.
- Withdraw consent: you can stop using SoundLab and delete your account at any time.
Security
Your files are private: each one can only be opened through short-lived links made for your account. Data is encrypted in transit, and each account can only reach its own data in our database.
Children
SoundLab is not meant for children under 13. If you believe a child under 13 has an account, contact us and we'll delete it.
Changes
If we change this policy, we'll update the version above and tell you in the app about important changes.
Contact
Privacy questions and requests: [email protected]