Spotify Disclosure

WaveMaker is not affiliated with, endorsed by, or sponsored by Spotify AB. "Spotify" is a trademark of Spotify AB.

What we access

When you connect Spotify, WaveMaker requests permission to: read your saved tracks, read playlists you own, read what you follow, and write saves/follows/playlist additions only when you explicitly tap an action in a WaveMaker campaign. We never play music in the background, never modify your queue, and never post to playlists you don't own.

How we store it

We store an encrypted refresh token tied to your WaveMaker account so we can verify campaign actions. Tokens are deleted within 24 hours of you disconnecting Spotify (in your Spotify app permissions or in WaveMaker Settings).

Data deletion

Submit a request via our data deletion page and all Spotify-derived data tied to your account will be erased within 7 days.