Legal
Privacy Policy
Last updated: May 21, 2026
1. What we collect
- Account info: name, email, hashed password.
- Library data: audio files you upload and metadata we extract (BPM, key, mood, energy, etc.).
- Usage: sets you build, prompts you send to the assistant, basic device/browser info.
2. How we use it
To run the service: analyse tracks, generate sets, surface recommendations, send transactional emails (verification, password resets), and improve product quality.
3. AI processing
Track metadata and your prompts are sent to AI providers (e.g. Google Gemini, OpenAI) via Lovable AI Gateway to produce analysis and suggestions. Audio file contents are processed for feature extraction and are not used to train third-party models.
4. Storage & retention
Account and library data are stored on Lovable Cloud (Supabase) in encrypted-at-rest databases. We keep your data while your account is active. When you delete your account, we delete it within 30 days, except where law requires retention.
5. Sharing
We don't sell your data. We share it only with processors needed to run Mixmap: cloud hosting, email delivery, and AI inference providers. Each is bound by data-protection terms.
6. Cookies
We use strictly necessary cookies and local storage for authentication and session state. No advertising trackers.
7. Your rights
You can access, correct, export, or delete your data at any time from your account, or by emailing us. EU/UK users have rights under GDPR; California users have rights under the CCPA.
8. Security
We use industry-standard practices: TLS in transit, encryption at rest, row-level security on all user data, and least-privilege access for the team.
9. Changes
If we make material changes we'll notify you in-app or by email before they take effect.
10. Contact
Privacy questions: privacy@mixmap.ai.