How Echocraft Handles Your Reference Material
Echocraft Sound Labs LLC
Version 1.0. Effective October 1, 2026.
Agencies and studios search our catalog by uploading a reference: a rough cut, a spot, a brief, a piece of unreleased music. That material is often confidential to you or your client. This statement sets out, in one place, exactly what happens to it and how we protect it. It describes our current practices. Our contractual commitments are in Section 7.8 of our Terms of Service, and the Terms control if anything here differs.
What we commit to
- Purpose. We use your reference material only to run the search you asked for. Never for anything else.
- No exposure. It is never published, never added to the catalog, never shown to another user, never shared with a composer, never placed at a public address, never indexed.
- No training. Neither we nor any provider that touches it may use it to train, evaluate, or improve any artificial intelligence model.
- Limited hands. Only your account and the members of our team who need access to operate the Service or investigate abuse can reach it. We do not open reference material as a matter of course.
- Careful providers. We select the providers that process it with care and require each of them, by written terms, to protect it and to use it only to provide their service to us.
How we protect it today
Encrypted in transit on every hop and at rest in private storage. Scheduled for deletion twenty-four hours after your search session is created; deleted immediately if you delete the search; six hours if uploaded and never used. We may improve these measures over time and will not reduce the overall level of protection.
Where it goes and what each partner has committed to
| Step | Who | What happens | Their commitment |
|---|---|---|---|
| Upload | Supabase Storage (United States) | Your browser sends the file straight to a private bucket over TLS using a one-time signed upload address. | AES-256 encryption at rest, TLS in transit, ISO 27001 certified, written data processing agreement with us. Storage objects are not carried in database backups. |
| Media conversion (audio and video only) | Fly.io worker (Los Angeles) | Retrieves the file, converts it for analysis, sends it on, deletes its temporary copy when the job ends, whether it succeeds or fails. | Ephemeral machine storage; nothing persisted. |
| Brief handling (text and PDF only) | Vercel | Handled in memory by our web application; not written to disk. | Transient processing only. |
| Analysis | Google Gemini API, paid service | Receives the material inside the analysis request; returns a written description. We do not upload to any file store at Google and have not enabled Google's optional developer logging. | Paid-service terms prohibit use of inputs or outputs to train or improve Google's models. Google keeps a request log for up to fifty-five days solely to detect abuse of its own service; not used for training, not shared, deleted at the end of the period. |
| Not involved | Cyanite | Never receives reference uploads. Analyzes catalog audio only. | Confirmed in writing to us: catalog audio is never used to train any model. |
What remains after the file is deleted
The written description of your reference, your search text, and the results stay in your search history so you can return to a search, until you delete the session or your account. The original filename stays with the session record. Our background-job service holds the written description in its job record for its retention period; our error-monitoring service may hold scrubbed technical context for up to ninety days. None of these hold your file.
Your controls, and your part
Delete any search session at any time from your history; the file goes with it. Upload only what the search needs; a portion of a cut is often enough. The Service is a search tool, not a storage or delivery service, so keep your own copies. Ask us at sync@echocraftsoundlabs.com for confirmation of deletion, for a copy of what we hold, or with any question about a specific upload, and we will answer within thirty days, usually far sooner.
Echocraft Sound Labs LLC, 30 N Gould St, Ste R, Sheridan, WY 82801. sync@echocraftsoundlabs.com