Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, subscribe to our service, or contact us for support.

Personal Information

• Name and email address
• Billing information (processed by Stripe; we do not store your full card number)
• Communication preferences
• Support inquiries and correspondence

Usage Information

• Plugin usage statistics
• AI query frequency and types
• Session duration and frequency
• Technical performance data
• IP addresses recorded when you sign in or create an account, retained for account security and abuse prevention
• Anonymous crash reports (plugin version, OS, host DAW, timestamp) sent automatically if the plugin crashes

Content You Submit

• Text prompts and conversation history sent to the AI assistant
• Audio files (e.g., MP3, WAV) you upload for mix feedback or analysis
• Images you attach for image analysis

Your conversations are processed to generate responses, and may also be retained and read by our team to improve answer quality. This is on by default and you can switch it off at any time — see Section 5.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions
• Develop new features and services
• Analyze product usage to improve user experience
• Review conversations to evaluate and improve response quality — on by default, and you can switch this off at any time (see Section 5)
• Protect the security of your account, detect and prevent fraud or abuse, and investigate suspicious sign-in activity

3. AI Data Processing Disclosure

How your content is processed by AI. When you use MixingGPT, the text prompts, audio files, and images you submit are sent to OpenAI for AI processing. Specifically:

• Text prompts and conversation history are sent to OpenAI to generate AI responses.
• Audio files you upload for mix feedback are sent to OpenAI for audio analysis and feedback generation.
• Images you attach for image analysis are sent to OpenAI for visual analysis.

OpenAI processes this data on its servers in accordance with its own data retention and privacy policies. We encourage you to review OpenAI's privacy policy and enterprise privacy practices to understand how your content is handled by OpenAI.

By using MixingGPT, you acknowledge that your submitted content (text, audio, and images) will be transmitted to and processed by OpenAI as described above.

4. Audio Data Handling

Audio is not immediately discarded. When you upload an audio file for mix feedback, the following occurs:

• Your audio file is uploaded to a private, access-controlled storage bucket hosted by Supabase. It is not publicly accessible.
• The file is then transmitted to OpenAI for AI analysis and feedback generation.
• The audio file may remain in our storage until it is deleted or you request its removal.

We do not use your audio files to train AI models. To request deletion of your uploaded audio files at any time, contact us at privacy@mixinggpt.com.

5. Human Review of Conversations

This is on by default, and you can switch it off at any time. The control is called Help improve MixingGPT, in the Account & Privacy section of your dashboard.

Reading real conversations is the most reliable way for us to find where MixingGPT gives weak, wrong, or unhelpful mixing advice. We rely on our legitimate interest in improving the service as the legal basis for this, rather than asking for consent. You have an absolute right to object, and the dashboard switch is how you exercise it — no explanation or request needed, it takes effect immediately.

Accounts that existed before this policy change remain switched off until we have notified the account holder directly and given advance notice of the change.

While it is switched on

• Your conversations may be read by a human. Members of our team may read your prompts and the assistant's responses to assess answer quality and diagnose problems.
• Reviewers do not see who you are. The internal review tool shows conversations without your name, email address, or account identifier. Reviewers see only a short random label, which lets them tell one person's conversations apart from another's without knowing whose they are.
• What we store: the text of your prompts and the assistant's replies, plus technical context (model used, request type, whether an attachment was present).
• What we do not store: the contents of audio files and images are not saved into the review record. We keep only a marker noting that an attachment was part of the conversation.
• Retention: review records are automatically deleted 90 days after they are created.
• We do not use your conversations to train AI models, and we do not sell or share them with third parties for their own purposes.
• Access is restricted and logged. Only administrators on an explicit allowlist, using multi-factor authentication, can open the review tool. Every time a conversation is listed or opened, an entry is written to our internal audit log recording which administrator did it and when.

One point of honesty about the word “anonymous.” The review process is anonymous to the reviewer, as described above. The stored record itself is still linked to your account behind the scenes, because that link is what lets us delete your records when you switch the setting off or close your account. We are not claiming the data is irreversibly anonymised. We are telling you that the people reading it do not see your identity. Note also that a conversation's own content can identify you if you include identifying details in it, which is why the guidance below matters.

Once you switch it off

• We stop capturing new conversations immediately.
• We delete the review records we already collected from you. You do not need to make a separate request, and this happens automatically.
• No one on our team can read your conversations from that point on.
• Your prompts are still transmitted to OpenAI to generate a response, as described in Section 3. That is required for the product to function and is not affected by this setting.
• We still collect non-content usage statistics (such as request counts and error rates), which contain no conversation text.

Switching this off does not restrict your access to MixingGPT in any way. Every feature, plan, and credit allowance works identically either way. We will never make it a condition of using the service, gate it behind a plan tier, or remove the switch.

A note on confidential material

Mixing conversations often reference unreleased tracks, client names, and label projects. If you work under a non-disclosure agreement or handle confidential material, switch this off before using MixingGPT for that work. Because the setting is on by default, this is the one case where you need to take action rather than rely on the default. If you are unsure, switch it off — it takes one click and costs you nothing.

6. Crash Reporting

Automatic crash reports. If the MixingGPT plugin crashes unexpectedly, it writes a minimal crash report to your local disk. On the next launch, if you have accepted the Terms of Service (which you do when signing in through the plugin), this report is automatically uploaded to our servers for analysis.

Crash reports contain:

• Plugin version and operating system (macOS or Windows)
• Host DAW application name
• Crash timestamp

Crash reports do not contain your audio files, chat history, API keys, or personal content. They are used solely to diagnose and fix software defects. Reports are associated with your account (via your authenticated session) and retained for up to 90 days, after which they are automatically deleted.

7. Sub-Processors and Third-Party Services

We rely on the following third-party service providers to operate MixingGPT. Each provider processes certain data on our behalf and is bound by their own privacy and security practices:

• Stripe — processes payments and billing information. See Stripe's privacy policy.
• Supabase — provides authentication, database hosting, and file storage (including uploaded audio). See Supabase's privacy policy.
• OpenAI — processes text prompts, audio, and images to generate AI responses and analysis. See OpenAI's privacy policy.
• PostHog — provides product analytics to help us understand how the product is used. See PostHog's privacy policy.
• Resend — sends transactional and marketing emails on our behalf. See Resend's privacy policy.
• Vercel — hosts our website and serverless API functions. See Vercel's privacy policy.

We do not sell, trade, or rent your personal information to any third party. We share data with these providers only as necessary to provide the services described above, to comply with legal obligations, or to protect our rights and prevent fraud.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data transmission is encrypted using industry-standard protocols (TLS). Audio storage is private and access-controlled via Supabase's service-role credentials.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account data (name, email, plan) is retained while your account is active and deleted upon account deletion request, subject to legal obligations.
• Uploaded audio files are retained in private storage until deleted or you request removal.
• Conversation content is retained as review records for 90 days while conversation review is switched on, then automatically deleted. If you switch the setting off, existing records are deleted immediately (Section 5).
• Records of your preference (whether you switched conversation review on or off, and when) are retained while your account is active so we can evidence that your choice was honoured, and are deleted with your account.
• Billing records are retained as required by law for financial record-keeping.
• Sign-in IP history (IP address, device, and timestamp of each login and signup) is retained for account security and deleted when you delete your account.

You may request deletion of your personal information and uploaded content at any time by contacting us at privacy@mixinggpt.com.

10. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and personal information
• Request deletion of uploaded audio files and conversation history
• Export your data
• Opt out of marketing communications
• Object to conversation review at any time by switching it off, which also deletes the review records already collected from you (Section 5)

11. Cookies and Tracking

We use cookies and similar tracking technologies, including PostHog analytics, to improve your experience on our website. You can control cookie settings through your browser preferences or our cookie consent banner.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States (OpenAI, Stripe, Vercel, PostHog) and the European Union (Supabase). We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

13. Early Access Program

MixingGPT is currently in an early access phase. During this period, we may periodically pause services for maintenance, improvements, or infrastructure updates. If we pause services for an extended period, we may issue a refund for the affected time at our discretion. We will make reasonable efforts to notify users in advance of scheduled maintenance where possible.

14. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date.