Privacy Policy

Account Information: When you create an account, we collect your name, email address, and password (stored as a salted hash). If you sign up via OAuth (Google, GitHub), we receive your basic profile information from that provider.

Audio Data: When you upload audio files, we process them on our servers to provide mixing, mastering, and AI analysis services. Your audio files are yours -- we do not claim ownership of your content.

Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, mixing preferences, session duration, and timestamps.

Device & Technical Data: We collect browser type, operating system, IP address, device identifiers, and referral URLs to ensure compatibility and diagnose issues.

Payment Information: When you subscribe to a paid plan, payment is processed by Stripe. We do not store your full credit card number. We receive only the last four digits, expiration date, and billing address from Stripe for record-keeping.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your audio files for mixing, mastering, and AI analysis
• Process transactions and manage your subscription
• Send transactional emails (account confirmation, password reset, billing receipts)
• Improve our AI models and audio processing algorithms using anonymized, aggregated data
• Respond to customer support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We may send you marketing emails about new features and promotions. You can opt out of marketing emails at any time via the unsubscribe link in any email or in your account settings.

We do not sell your personal information. We may share information with:

• Service Providers: Stripe (payments), Supabase (database and authentication), Vercel (hosting), AWS (cloud storage and audio processing)
• Analytics: We use privacy-focused analytics to understand usage patterns. No personally identifiable information is shared with analytics providers.
• Legal Requirements: We may disclose information if required by law, subpoena, or court order, or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction

We use cookies and similar technologies to:

• Essential Cookies: Required for the Service to function (authentication, session management, CSRF protection)
• Preference Cookies: Remember your settings, theme choices, and mixing preferences
• Analytics Cookies: Help us understand how users interact with the Service to improve the experience

You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent you from using certain features of the Service. For more details, see our Cookie Policy.

Your data is stored on secure servers provided by our infrastructure partners. We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and role-based permissions for our team
• Automated threat detection and monitoring

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data and audio files
• Portability: Request your data in a portable format
• Opt-Out: Opt out of marketing communications at any time
• Restrict Processing: Request that we restrict processing of your data in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

EU/EEA Residents (GDPR): Our legal basis for processing your data includes consent, contract performance, legitimate interests, and legal obligations. You may lodge a complaint with your local supervisory authority.

We retain your account information for as long as your account is active. Audio files are stored according to your plan limits. If you delete your account:

• Your personal data is deleted within 30 days
• Your audio files are permanently deleted within 30 days
• Anonymized, aggregated data used for improving our AI models may be retained indefinitely
• Billing records are retained for 7 years as required by tax law

The Service is not directed to children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Service. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, contact us at: