Privacy Policy

This Privacy Policy explains how Revrb (“Backpack Studio”, “we,” “us,” or “our”) collects, uses, and shares information when you use our website and studio (the “Service”). By using the Service, you agree to the practices described here.

1. Summary

Local-first editing: Audio and video you upload for editing are processed in your browser. We do not permanently store your source media files on our servers as part of normal studio use.
Account data: If you sign in, we store information needed to authenticate you and sync saved presets.
Operational logs: We collect limited technical and usage events to run, secure, and improve the Service.
YouTube (optional): If you connect YouTube or import from a URL, additional data is processed as described below.

2. Information we collect

Account and identity

When you sign in (for example, with Google via Supabase Auth), we may receive:

A unique user ID;
Email address and basic profile information provided by your identity provider;
Authentication tokens needed to maintain your session.

Saved presets

If you are signed in and save custom FX presets, we store preset names, effect settings (speed, reverb, echo, bass, volume), color preferences, and timestamps linked to your account. If you are signed out, presets may be stored locally in your browser only.

Media you upload or import

Files you upload for editing are handled in your browser session for preview and export. They are not retained on our servers after your session ends, except where a specific feature you invoke requires temporary server processing (such as YouTube import or server-assisted export).

When you import from YouTube, our servers may fetch the media from the URL you provide and return it to your browser for editing. We do not use imported media for training, marketing, or unrelated purposes.

YouTube connection

If you connect a YouTube account to upload videos, we may process:

OAuth tokens and refresh tokens needed to authenticate with Google/YouTube;
Your YouTube channel identifier and display name;
Video metadata you enter (title, description, privacy setting);
The rendered video file during upload.

YouTube uploads are performed only when you explicitly request them. Google's privacy policy also applies to data handled by Google services.

Usage and diagnostic data

We log operational events (for example, media load, export, YouTube actions) that may include:

Event name, outcome, duration, and request ID;
File type, size, or format metadata (not file contents);
Your user ID when signed in;
Basic technical context (browser-side or server-side depending on the event).

These logs help us debug failures, measure performance, and improve reliability. They are not used to sell your personal information.

Local storage and cookies

We use browser storage for:

Theme preference (light/dark mode);
Custom presets when you are not signed in;
Authentication session cookies/tokens managed by Supabase.

3. How we use information

We use the information we collect to:

Provide, operate, and maintain the Service;
Authenticate you and sync your saved presets;
Process exports and optional YouTube import/upload at your direction;
Monitor security, prevent abuse, and troubleshoot errors;
Improve features and understand how the Service is used in aggregate;
Comply with legal obligations and enforce our Terms.

4. How we share information

We do not sell your personal information. We may share information with:

Service providers that help us run the Service (for example, Supabase for auth/database hosting, cloud infrastructure, and Google for OAuth/YouTube APIs), subject to contractual confidentiality and security obligations;
Legal and safety recipients when required by law, court order, or to protect rights, safety, and integrity of users and the Service;
Business transfers in connection with a merger, acquisition, or sale of assets, with notice where required by law.

When you upload to YouTube, your video and metadata are shared with Google/YouTube according to your chosen privacy settings and Google's policies.

5. Data retention

Account and presets: Retained while your account is active. You may request deletion by contacting us.
Uploaded media: Not permanently stored on our servers during normal browser editing.
YouTube tokens: Retained while your YouTube connection is active; removed when you disconnect or delete your account.
Operational logs: Retained for a limited period needed for operations, security, and debugging, then deleted or aggregated.

6. Security

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS) and access controls on backend systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your choices and rights

Depending on where you live, you may have the right to:

Access, correct, or delete personal information we hold about you;
Object to or restrict certain processing;
Withdraw consent where processing is consent-based;
Port preset or account data where technically feasible;
Lodge a complaint with a supervisory authority.

To exercise these rights, email justin670brown@gmail.com. We may need to verify your identity before responding.

You can disconnect YouTube from the studio settings, clear local browser storage, or sign out at any time.

8. Children's privacy

The Service is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

9. International users

If you access the Service from outside the Jamaica, your information may be processed in countries where we or our providers operate. Those countries may have different data protection laws than your own. Where required, we use appropriate safeguards for cross-border transfers.

10. Third-party links and platforms

The Service may link to or integrate with third-party sites and APIs (including YouTube and Google sign-in). Their privacy practices are governed by their own policies. We encourage you to review them.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy and update the “Last updated” date. Material changes may be communicated through the Service or by email where appropriate.

12. Contact

Privacy questions or requests: justin670brown@gmail.com.