Privacy policy

Last updated: 2026-04-21

Dawbrain is operated by Alon Amsellem, an individual based in Israel. We take your privacy seriously. This page explains what data we collect, why, and your rights over it.

Applicable law

Our primary framework is Israel's Protection of Privacy Law 5741-1981 and the Data Security Regulations 2017. We also comply with the EU General Data Protection Regulation (GDPR) for residents of the European Economic Area. Israel has been recognised by the European Commission as providing an adequate level of data protection, so data transfers from the EEA to Israel do not require additional safeguards.

Who we are

The data controller / owner is:

• Alon Amsellem (individual)
• Business address: WeWork, Tel Aviv, Israel
• Privacy contact: privacy@dawbrain.com

Data we collect

• Account data: email and name from your Clerk sign-in.
• Usage data: message counts, conversation history, error logs.
• Technical data: IP address, user-agent, cookies (see Cookies).
• Session context from your DAW: track names, mixer state, device parameters. This is sent to our AI provider as part of each request to generate an answer. We store it only as part of the conversation history; we don't keep a separate copy of your session state.

Why we collect it

• Service performance: we can't run Dawbrain without knowing who you are, what you've asked, and what your session looks like.
• Abuse prevention: we look at error logs and usage patterns to keep the service healthy.
• Legal compliance: billing records, subscription status.

Under GDPR, our legal bases are contract performance (Art. 6(1)(b)), legitimate interest for abuse prevention (Art. 6(1)(f)), and consent for optional features (Art. 6(1)(a)) where applicable.

Sub-processors

We use a small set of third-party services.

• Anthropic (AI inference, US): your prompts and session context are sent here to generate each response.
• Clerk (authentication, US): holds your account email / name.
• Render (hosting, US region): hosts our web and API.
• Lemon Squeezy (payments, Ireland / US): processes subscriptions as our merchant of record; handles billing info directly.

AI-specific disclosures

• We do not use your conversations to train AI models. Our Anthropic API plan prohibits training on customer data by default.
• AI outputs may be wrong. Dawbrain is a large language model; it can suggest incorrect or unsafe actions. Use judgment before applying anything to important work.
• EU AI Act Art. 50 transparency: for users in the EU, you are interacting with an AI system; outputs are generated by a large language model.

Retention

• Conversation history is kept until you delete a conversation (in the app) or close your account.
• Account data is deleted within 30 days of account closure, except where law requires longer retention (e.g. billing records).

Your rights

Under Israeli PPL you have rights to access, correct, and delete your personal data. EU residents additionally have rights under GDPR to access, erasure, portability, objection, and to lodge a complaint with a supervisory authority.

To exercise any of these, email privacy@dawbrain.com.

Changes

Material changes to this policy will be announced at least 30 days before they take effect. The date at the top of this page always reflects the most recent revision.