You own your work. Always.

Your content is yours

Your songs, stems, lyrics, voice memos, contracts, splits and notes belong to you. TRAX is the tool you keep them in — nothing more.

Uploading to TRAX never transfers rights, grants a license, or lets us use your work in any way you didn't ask for. When you collaborate, your team sees what you share with them, on the terms you set.

TRAX treats your rights seriously. Every import tracks its source, and every file keeps the rights tag you give it — so you always know what's cleared for release. Importing never changes who owns a file. TRAX claims no rights to anything you import.

How we protect your data

• Encrypted in transit: every connection uses HTTPS.
• Encrypted at rest: your files and records live in encrypted storage.
• Private by default: files are never public — downloads use short-lived signed links.
• Checked on every request: each page and file checks that you (or your team) are allowed to see it.
• Passwords are scrambled with scrypt — nobody at TRAX can read them.
• Payouts: TRAX never stores bank, card or account numbers — payout preferences are labels only, and payments are made outside TRAX until Stripe payouts arrive.
• Pitch tools stay on your device: Autotune Lite and Hum-to-MIDI analyse your audio in your browser. Nothing is sent anywhere to do it, and a hum is only uploaded if you choose to keep it as a take.
• Spin Sampler works on your device too: the turntable plays and scratches the sound in your browser, a file you pick from your device is never uploaded, and a performance is only uploaded when you save it to Captures. TRAX keeps your Spin settings and the last sound you put on a deck (its name and where it's stored), so Spin opens with music. The Loop works out a song's steps live from your songs; it keeps only the corner you put it in, the songs you've marked instrumental (and who marked them), which song your lyrics are for, when a song was finished and celebrated, and a short history of each song's moves between steps. Taking or setting aside an AI Hub suggestion is recorded in your activity (your AI log). The public demo never keeps, uploads or downloads your take (it stays in the tab), and counts visitors anonymously.
• Vocal Studio works on your device too: the pitch editor, harmonies and doubles are made from your own take in your browser — no AI service, nothing generated — and a mix is only uploaded if you save it to Captures.
• Collaboration feedback is anonymous: answers are stored under a one-way key, never with your name or account, and only shown as a group once at least 3 people have answered.
• E-signatures: signature images are stored encrypted, we keep only one-way fingerprints of the signer's IP address and device (never the address itself), and every signed document is fingerprinted and sealed in its tamper-evident change log.
• Daily automated backups, so an outage doesn't cost you your work.

What we do (and don't do)

Your rights

Export

Download everything — audio, documents, messages, your change log and a full copy of your data. Settings → Download all my data

Review

See every kind of record we keep about you, counted, and download any part of it. Settings → What we store

Delete

Delete your account with a 30-day window to change your mind, or immediately. Settings → Delete my account

Transfer

Exports use formats any tool can open — your original audio files, JSON and CSV — so you can take your work anywhere.

AI and your music

We don't train AI models on your content — not your audio, not your lyrics, not your documents.

TRAX's built-in smart features (like AI Priorities on Home) are rules that run on your own data inside TRAX. When a feature uses an outside AI provider, such as Anthropic's Claude, we only use providers whose business terms don't train on the data we send, and we list them below.

Today that's the AI Business Coach, contribution analysis and fair-split coaching on Rights, and the Lyric Helper co-writer. The Business Coach reads a summary of your business figures; the rights features read roles, shares and activity counts under anonymous labels; Lyric Helper reads your song's draft when you ask it something — and never writes lyrics for you. None of them read your audio, files or messages. They advise; you decide.

If this ever changes, you'll hear from us first, with 90 days to opt out.

Team & collaboration access

• Only people you invite to a project can see it — with the permissions you choose per role (hear the audio, see the money, edit splits, approve).
• Guests see only what their invite link allows, read-only.
• Remove someone and their access ends immediately.
• TRAX staff access is rare, read-only and logged — for example when you ask us for help.

How we handle legal requests

If a court, government or anyone else asks for your data, we only respond to valid legal process, we push back on requests that are too broad, and we tell you before handing anything over unless the law forbids it.

Usage insights

When you're signed in, TRAX notes which pages and tools you use and for how long — so we can improve what matters and help you get the most from your plan.

• Recorded: the page or tool, the kind of action (a view, a click on a button, a form sent, an upload), and when.
• Never recorded: what's inside your music, files, messages, notes or anything you type.
• Your IP address is scrambled (one-way hashed) before it's stored; location is region-level at most, never your city.
• Sign-ins and sign-outs are recorded with the device type and browser, so you — and we — can spot anything unusual.
• It's part of your data: see it in Settings → Your Data, export it, or delete it with your account.

Third-party services

Supabase

Database and encrypted file storage (United States).

Vercel

Hosting — serves the app and runs its server code. On TRAX's public pages (never inside your account) it also counts anonymous visits — the page, country, device type and where the visit came from — with no cookies and nothing about you or your work.

OpenStreetMap

Map tiles on the calendar map. Your browser loads the tiles; no account data is sent.

YouTube (privacy-enhanced mode) and Vimeo

Play the how-to videos in Help — only when you press play.

Your browser's speech recognition

Transcribes voice memos when your browser offers it (in Chrome, Google processes that audio).

ASCAP, BMI, SESAC, PRS for Music / MCPS, GEMA, SACEM, SOCAN, JASRAC, SoundExchange and The MLC

Registration packets on Royalties are files you download and submit yourself on their sites. TRAX never sends them anything; the links open their sites in your browser.

Anthropic (Claude)

AI Business Coach — only when you ask it a question or a written review is made: a summary of your business figures (revenue, clients, deals, invoices, goals) is sent so it can answer. Rights contribution analysis — only when someone runs it: each person's role and counts of sessions, captures and approvals on that song, under anonymous labels (no names). Fair-split coaching — only when you ask it: the roles, shares and activity counts on that song you can see yourself, under anonymous labels, plus your own split patterns. Lyric Helper — only when you ask the co-writer something: your question, the song's title, language, genre, mood and what it's about, your last few questions and its answers, and the last 6,000 characters of your saved draft, so it can respond to what you've written (it never writes lyrics for you). None of these send your audio, files or messages, and only Lyric Helper ever sends lyrics — your own draft, when you ask. Anthropic's commercial terms don't allow training on it.

Data retention

Active accounts

Kept for as long as your account is open.

Deleted accounts

Preserved privately for 30 days (so you can change your mind), then permanently deleted. Backups roll off within 90 days.

Sign-in records

Kept for 90 days.

Project change log

Permanent — append-only and tamper-evident, so every split, approval and upload keeps a legal-grade record.

Data exports

Download links work for 30 days, then the export files are removed.

Contact us about your data

Questions about your data, a request, or something that doesn't look right? Message us from the contact form — a real person reads every one.

Contact us about your data →