Data protection

Privacy Policy

2. Scope and legal framework

This Privacy Policy applies to WR71Records, WR71 Instant Master, the public mastering preview, customer access, support functions and the commercial payment and access workflow operated by SLC Production / WR71Records.

Personal data is processed only where necessary to provide the requested service, establish or perform a contract, fulfil legal obligations, protect the security and integrity of our systems, respond to enquiries or where you have given consent.

The principal legal bases are Article 6(1)(a), (b), (c) and (f) GDPR, depending on the purpose of the processing. Browser or device storage is additionally handled in accordance with Section 25 TDDDG where applicable.

3. Hosting, infrastructure and server logs

WR71Records and the WR71 Instant Master infrastructure use hosting and server services provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. This includes the public website and the Linux server used for the mastering, authentication and related service components.

When the website or mastering service is accessed, technical log data may be processed, including IP address, date and time, requested URL or resource, HTTP status, referrer information, browser/user-agent information and comparable security and connection data. This is necessary to deliver the service, diagnose faults, prevent abuse and protect the infrastructure. The legal basis is Article 6(1)(f) GDPR.

Log data is retained only for the period required for operation, troubleshooting and security, or for a longer period where this is necessary to investigate a specific security incident or to comply with a legal obligation.

STRATO privacy information: STRATO Privacy Policy.

4. Technically necessary browser storage and consent settings

WR71 uses technically necessary browser storage and session mechanisms where required to provide requested functionality. This includes storage used to remember privacy choices and authentication/session information required for protected customer or owner access.

The website currently stores the privacy selection locally in the browser under the key wr71_consent_v1. Optional analytics, marketing and external-media categories remain disabled unless they are introduced and lawfully activated. WR71 does not currently activate optional analytics or marketing tracking by default.

Technically necessary storage is used only where required to provide an expressly requested digital service. Where consent is legally required, processing takes place only after that consent and may be withdrawn for the future.

5. Contact, support and access-code recovery

If you contact WR71Records by email, telephone or through a support function, we process the information you provide in order to handle your request. The legal basis is Article 6(1)(b) GDPR where the communication concerns a contract or pre-contractual measures and Article 6(1)(f) GDPR for other legitimate support and business communications.

The “Forgot access code?” function processes the email address entered by the customer only for secure access recovery. Responses are deliberately neutral and do not reveal whether a particular email address is registered.

6. WR71 Instant Master audio processing

Audio uploaded to WR71 Instant Master is processed solely to perform the mastering or preview requested by the user. Processing may include technical analysis, temporary decoding, mastering, preview generation and creation of the requested output formats.

The legal basis for processing audio submitted for a requested mastering service is Article 6(1)(b) GDPR where personal data is contained in the audio or associated technical information. Before an upload is accepted, WR71 may additionally require confirmation that the user owns the necessary rights or has permission to upload and process the material.

Customer audio is not used to train the WR71 Learning Engine or other AI models. Learning material for the WR71 Learning Engine is handled separately and is limited to specifically authorised material supplied for that purpose.

7. Audio lifecycle and deletion

WR71 Instant Master is a mastering service and not a cloud storage service. Audio files are therefore temporary processing data.

• Source uploads are retained only for the time required to analyse and master the requested track and are removed from active processing storage after the mastering operation has been completed.
• Generated previews and master files are retained only for the period technically required to provide the requested playback or download.
• After successful delivery/download, generated customer audio is scheduled for removal. Additional automatic lifecycle cleanup removes stale temporary runtime data.
• Customer audio is not retained as training material.

Failed or abandoned processing jobs are also subject to automatic technical cleanup. Temporary processing data is not included in normal long-term customer or accounting records.

8. Public WR71 Demo

The public WR71 Demo is designed as a limited listening preview. It does not require a customer account, email address or payment merely to use the preview. Demo audio is processed temporarily and is subject to the same privacy-by-design principle described above. The Demo does not provide a permanent customer audio archive and Demo audio is not used for AI training.

9. Commercial customer access

After a verified commercial purchase, WR71 may process and store the customer's email address, a securely derived verification value for the WR71 access code, credential version information, purchased pass type, purchase reference, entitlement start and end time, usage/reservation information and security-related access records.

The WR71 access code itself is not intended to be stored in plaintext. Payment-card or bank-account credentials are not stored in the WR71 commercial customer database.

This processing is necessary to provide purchased access, enforce the purchased usage allowance, prevent duplicate fulfilment, provide access-code recovery, secure the service and associate later purchases made with the same customer email address. The principal legal bases are Article 6(1)(b) and, for security and account continuity, Article 6(1)(f) GDPR.

10. Pass expiry and retention of customer records

WR71 Single Pass and WR71 Studio Pass entitlements are designed as time-limited commercial access periods. The currently intended commercial policy is a 30-day validity period for each newly purchased pass. Unused mastering allowances expire when the relevant 30-day entitlement ends.

Expiry of a pass does not automatically mean deletion of all customer or transaction data. Limited customer access data may remain stored after a pass expires so that a returning customer can securely use the established WR71 access identity for a later purchase or access-code recovery, and so that WR71 can prevent fraud, duplicate fulfilment and conflicting transaction records.

Such data is retained only for as long as the respective purpose continues to apply and is then deleted or anonymised unless statutory retention duties, the establishment, exercise or defence of legal claims, or another lawful basis requires longer storage. A customer may request deletion of data that is no longer required, subject to those legal restrictions.

11. Payments via Stripe and payment methods such as PayPal

Commercial payments are processed using Stripe. WR71 sends only the information required to create and verify the payment and fulfil the purchased WR71 pass. Depending on the transaction, this may include the selected product/pass, amount, currency, customer email address and technical transaction identifiers.

Stripe processes payment and transaction information in accordance with its own contractual and privacy obligations. Payment credentials such as complete card or bank-account data are processed by the payment provider and are not stored by WR71 in the commercial access database.

Stripe privacy information: Stripe Privacy Policy.

Where Stripe Checkout offers an additional payment method such as PayPal and the customer selects it, the relevant payment provider may independently process the information required for that payment. PayPal's own privacy terms apply to PayPal processing.

PayPal privacy information: PayPal Privacy Statement.

The legal basis for payment processing required to fulfil a purchase is Article 6(1)(b) GDPR. Processing required for accounting or tax obligations is based on Article 6(1)(c) GDPR. Fraud-prevention and transaction-security measures may also be based on Article 6(1)(f) GDPR.

12. Access and service emails

WR71 sends necessary transactional messages, including access information and access-code recovery messages, through the configured email infrastructure. The current email service is provided through STRATO infrastructure.

Transactional service messages are not marketing newsletters and are sent where necessary to perform the requested contract or secure customer access. The legal basis is Article 6(1)(b) GDPR and, for security-related messages, Article 6(1)(f) GDPR.

13. Newsletter

The WR71 newsletter is separate from purchasing or using WR71 Instant Master. Buying a WR71 pass does not automatically subscribe a customer to the newsletter.

Newsletter processing takes place only on the basis of the separately provided consent under Article 6(1)(a) GDPR and may be withdrawn at any time for the future using the provided unsubscribe mechanism or by contacting WR71Records.

14. Recipients and processors

Personal data is disclosed only where necessary for the purposes described in this Privacy Policy. Recipients may include hosting and email infrastructure providers, payment providers and service providers used to operate and secure WR71.

Where a service provider processes personal data on our behalf as a processor, appropriate contractual arrangements under Article 28 GDPR are used where legally required.

15. International data transfers

WR71 itself operates its core website and mastering infrastructure using German hosting infrastructure. Payment providers such as Stripe or PayPal operate internationally and may process data through affiliated companies or service providers outside the European Economic Area.

Where Chapter V GDPR applies, such transfers must be based on an applicable adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism. Details are provided in the respective payment provider's privacy information.

16. Statutory retention obligations

Transaction, invoice and accounting information may have to be retained beyond the active customer relationship where required by German commercial or tax law. Applicable retention periods depend on the category of document. In particular, accounting vouchers and invoices may generally be subject to an eight-year statutory retention period under current German law.

Data retained solely because of a statutory obligation is not used for unrelated purposes.

17. External links and media platforms

WR71Records may link to external services such as YouTube, Spotify or other websites. A connection to those providers is generally established only when the user actively opens the external service. The external provider's own privacy rules then apply.

18. No customer-audio profiling or AI training

WR71 does not use customer uploads for customer profiling or Learning Engine training. WR71 does not make a solely automated decision based on customer audio that produces legal effects or similarly significant effects for the customer within the meaning of Article 22 GDPR.

Independent payment providers may use automated fraud, security or risk-control mechanisms under their own legal responsibility and privacy terms.

19. Your rights

Subject to the statutory requirements, data subjects may have the right to:

• access their personal data (Article 15 GDPR);
• rectify inaccurate data (Article 16 GDPR);
• request erasure (Article 17 GDPR);
• request restriction of processing (Article 18 GDPR);
• receive portable data where applicable (Article 20 GDPR);
• object to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR); and
• withdraw consent at any time for the future where processing is based on consent.

To exercise these rights, contact label@wr71records.com. Statutory retention obligations or other legal grounds may limit the immediate deletion of particular records.

20. Right to lodge a complaint

You have the right to lodge a complaint with a competent data-protection supervisory authority.

For the controller's establishment in Hesse, the relevant supervisory authority is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

21. Security

WR71 uses technical and organisational safeguards appropriate to the risk of the processing. These include encrypted HTTPS transmission, protected authentication, access controls, restricted server-side processing, fail-closed access gates, data minimisation and automatic lifecycle cleanup for temporary audio data.

No internet-based service can guarantee absolute security. Security measures are therefore reviewed and adjusted when the infrastructure or risk profile changes.

22. Changes to this Privacy Policy

This Privacy Policy will be updated when the WR71 service, connected processors, payment methods, technical data lifecycle or applicable legal requirements materially change.

Last updated: 12 August 2026
Current version for the WR71Records website and the WR71 Instant Master commercial-preparation architecture.