Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, subscribe to our service, or contact us for support.

Personal Information

• Name and email address
• Billing information (processed by Stripe; we do not store your full card number)
• Communication preferences
• Support inquiries and correspondence

Usage Information

• Plugin usage statistics
• AI query frequency and types
• Session duration and frequency
• Technical performance data
• IP addresses recorded when you sign in or create an account, retained for account security and abuse prevention
• Anonymous crash reports (plugin version, OS, host DAW, timestamp) sent automatically if the plugin crashes

Content You Submit

• Text prompts and conversation history sent to the AI assistant
• Audio files (e.g., MP3, WAV) you upload for mix feedback or analysis
• Images you attach for image analysis

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions
• Develop new features and services
• Analyze product usage to improve user experience
• Protect the security of your account, detect and prevent fraud or abuse, and investigate suspicious sign-in activity

3. AI Data Processing Disclosure

How your content is processed by AI. When you use MixingGPT, the text prompts, audio files, and images you submit are sent to OpenAI for AI processing. Specifically:

• Text prompts and conversation history are sent to OpenAI to generate AI responses.
• Audio files you upload for mix feedback are sent to OpenAI for audio analysis and feedback generation.
• Images you attach for image analysis are sent to OpenAI for visual analysis.

OpenAI processes this data on its servers in accordance with its own data retention and privacy policies. We encourage you to review OpenAI's privacy policy and enterprise privacy practices to understand how your content is handled by OpenAI.

By using MixingGPT, you acknowledge that your submitted content (text, audio, and images) will be transmitted to and processed by OpenAI as described above.

4. Audio Data Handling

Audio is not immediately discarded. When you upload an audio file for mix feedback, the following occurs:

• Your audio file is uploaded to a private, access-controlled storage bucket hosted by Supabase. It is not publicly accessible.
• The file is then transmitted to OpenAI for AI analysis and feedback generation.
• The audio file may remain in our storage until it is deleted or you request its removal.

We do not use your audio files to train AI models. To request deletion of your uploaded audio files at any time, contact us at privacy@mixinggpt.com.

5. Crash Reporting

Automatic crash reports. If the MixingGPT plugin crashes unexpectedly, it writes a minimal crash report to your local disk. On the next launch, if you have accepted the Terms of Service (which you do when signing in through the plugin), this report is automatically uploaded to our servers for analysis.

Crash reports contain:

• Plugin version and operating system (macOS or Windows)
• Host DAW application name
• Crash timestamp

Crash reports do not contain your audio files, chat history, API keys, or personal content. They are used solely to diagnose and fix software defects. Reports are associated with your account (via your authenticated session) and retained for up to 90 days, after which they are automatically deleted.

6. Sub-Processors and Third-Party Services

We rely on the following third-party service providers to operate MixingGPT. Each provider processes certain data on our behalf and is bound by their own privacy and security practices:

• Stripe — processes payments and billing information. See Stripe's privacy policy.
• Supabase — provides authentication, database hosting, and file storage (including uploaded audio). See Supabase's privacy policy.
• OpenAI — processes text prompts, audio, and images to generate AI responses and analysis. See OpenAI's privacy policy.
• PostHog — provides product analytics to help us understand how the product is used. See PostHog's privacy policy.
• Resend — sends transactional and marketing emails on our behalf. See Resend's privacy policy.
• Vercel — hosts our website and serverless API functions. See Vercel's privacy policy.

We do not sell, trade, or rent your personal information to any third party. We share data with these providers only as necessary to provide the services described above, to comply with legal obligations, or to protect our rights and prevent fraud.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data transmission is encrypted using industry-standard protocols (TLS). Audio storage is private and access-controlled via Supabase's service-role credentials.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account data (name, email, plan) is retained while your account is active and deleted upon account deletion request, subject to legal obligations.
• Uploaded audio files are retained in private storage until deleted or you request removal.
• Conversation history is retained as needed to provide the service and may be deleted upon request.
• Billing records are retained as required by law for financial record-keeping.
• Sign-in IP history (IP address, device, and timestamp of each login and signup) is retained for account security and deleted when you delete your account.

You may request deletion of your personal information and uploaded content at any time by contacting us at privacy@mixinggpt.com.

9. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and personal information
• Request deletion of uploaded audio files and conversation history
• Export your data
• Opt out of marketing communications

10. Cookies and Tracking

We use cookies and similar tracking technologies, including PostHog analytics, to improve your experience on our website. You can control cookie settings through your browser preferences or our cookie consent banner.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States (OpenAI, Stripe, Vercel, PostHog) and the European Union (Supabase). We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

12. Early Access Program

MixingGPT is currently in an early access phase. During this period, we may periodically pause services for maintenance, improvements, or infrastructure updates. If we pause services for an extended period, we may issue a refund for the affected time at our discretion. We will make reasonable efforts to notify users in advance of scheduled maintenance where possible.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date.