Privacy

What we actually store.

Last updated October 20, 2026 · Finisher, operated from Israel · data stored in the EU (Frankfurt)

The drawer is yours. We process what you upload, hand back observations, and keep only what you need to reopen a session. Your audio is never used to train models, never sold, and never shared for anyone else's purposes.

This page is a plain-language summary, and it is the current published statement of how Finisher handles your data. If a fuller legal policy is published later, it will prevail where the two differ.

Quick table.

What we storeYour email (and name, if you give it), and the sessions you create: section labels, readiness, the references you picked, your notes, plus the analysis we derive from your audio (tempo, key, loudness, structure, similarity).What we keep of your audioYour upload, held so we can process it and let you reopen the session. Deleting a session removes its audio and separated stems right away. Whatever is left is deleted within 30 days after the closed beta ends. We never use it to train models.Everything else we holdYour account, your sessions and the analysis results we derived from your audio, your feedback and basic usage records are deleted within 90 days after the closed beta ends.Where we store itEU servers (Frankfurt), encrypted at rest. Temporary copies - while a file is processed, and on its way to your browser - can be held outside the EU by infrastructure providers acting on our instructions - see “Who touches your data”.How to deleteDelete a session in the app to remove its audio right away. To delete your whole account and everything attached to it, email hello@finisher.lol with the subject “Delete me” - we'll confirm within 7 working days.

Your audio, handled honestly.

When you upload a loop, it's stored on EU servers (Frankfurt) and processed by infrastructure providers acting on our instructions, some of them outside the EU. We keep it so we can run the analysis and so you can reopen the session later. Deleting a session in the app removes its audio and separated stems immediately. It is never used to train models, it is never retained for ad targeting, and it is never sold.

There is no one-button “wipe everything” in the app. Deleting a session removes the audio, but the analysis results we derived from it stay in your account until you ask us to delete everything or the retention period below ends.

How long we keep it.

During the closed beta we keep your audio until you delete it. After the beta ends, we delete any audio and separated stems that are still there within 30 days, and everything else we hold about you - your account, sessions, analysis results, notes, feedback and usage records - within 90 days. If you ask us to delete your data sooner, we do it sooner.

Session metadata.

We keep the shape of your sessions so you can reopen them: section labels, readiness, your written notes, references you picked, the arc you committed to, and the features we derived from your audio. If you'd rather we forget all of it, ask us to delete your account (see “How to delete” above).

Who touches your data.

We use a small set of providers that process data on our instructions only, never for their own purposes:

Cloud database, sign-in and file storage (EU).
GPU audio processing (stem separation, loudness, spectral analysis).
An AI provider that powers the in-app conversation - it receives your session context and questions, not your raw audio.
Email delivery.
Vercel, which hosts the app and provides our page-view analytics and performance measurements (see “Cookies + analytics”).
Upstash, which keeps the short-lived counters that limit how often a request can be made: your IP address for the waitlist form, your account identifier for signed-in actions.

When paid subscriptions open, a payment processor will join this list - we will never see your card either way.

Email and contact.

We use your email to sign you in, to reply when you write to us, and, if you joined the waitlist, to tell you when public access opens. The closed beta is by personal invitation only; we do not use waitlist addresses to invite anyone to it.
We do not sell or share your email. We do not run ad pixels on the landing page.
You can unsubscribe from non-essential email from any message we send.

Cookies + analytics.

No ad pixels, no cross-site tracking, no selling your data. We use privacy-respecting, cookieless product analytics to understand which screens work. If we add session replay inside the app, we'll disclose it before you sign in. We keep nothing in your browser until you sign in or choose a setting. Signing in keeps your session until you sign out. A setting you choose - your language, your workspace layout, or your choice not to see the grid's guided tour again - stays after you sign out. When you open a track, your browser may also keep a temporary copy of its audio.

Children.

Finisher is for people aged 18 and over, and we don't knowingly collect data from minors. If you think a minor signed up, email us and we'll remove it.

California.

We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. California residents can ask us to know, delete, or correct their data using the email below - and we won't treat you differently for asking.

Your rights.

Access - ask us what we hold about you.
Correct - fix anything wrong.
Delete - ask us to forget you. We'll honor it.
Export - get your sessions in a portable format.
Object - opt out of anything optional.

All of the above by emailing hello@finisher.lol.

Changes.

We will update this page as the product matures and will tell you in-app and via email if anything material changes. If you don't agree with a change, you can request your data be deleted.

Questions.

Email hello@finisher.lol. A human answers, usually within a few working days.