Privacy Policy

MixNotes (“we”, “us”, or “our”) operates the collaborative audio review platform at mixnotes.app. This Privacy Policy explains what information we collect when you use MixNotes, how we use it, and what rights you have over it.

Account data. When you register, we collect your email address and the display name you choose. Passwords are hashed by Supabase Auth and never stored in plaintext by us.

Content you create. Audio files you upload, project names, version labels, and timestamped comments you write inside projects.

Guest sessions. When someone accesses a share link without creating an account, we create a temporary anonymous session identifier. No name, email, or other personal information is required. Guest data is not linked to any identity.

Technical logs. Standard server logs including IP address, browser type, pages visited, and timestamps. Used only for security and to diagnose technical issues — not to profile or track you.

• —To provide the MixNotes service — storing your projects, serving audio to reviewers you invite, and maintaining version history.
• —To authenticate you and keep your session active.
• —To send transactional emails such as password reset and email verification. We do not send marketing emails without your explicit consent.
• —To diagnose bugs and maintain service reliability.

We do not sell your data. We do not use your data for advertising.

We share data with the following provider solely to operate MixNotes:

We do not share your data with advertisers, data brokers, or any other third parties.

Audio files are stored in a private storage bucket. They are accessible only to registered project members you have explicitly invited and guests who hold a valid, active share link. We do not listen to, analyse, train models on, or disclose your audio content for any purpose beyond serving it to the people you choose.

When you delete a project or an individual version, the associated audio file is permanently removed from storage.

We set one cookie: an HTTP-only authentication session cookie managed by Supabase SSR. It is not accessible to JavaScript, expires when you sign out or your session ends, and contains no personal information beyond a session identifier.

We do not use tracking cookies, analytics cookies, or advertising cookies of any kind.

• —Account data (email, display name) is retained until you delete your account.
• —Audio files are deleted permanently when you remove the associated project or version.
• —Guest session records are automatically deleted after 30 days of inactivity.
• —Server logs are retained for up to 90 days for security and diagnostic purposes, then deleted.

Depending on your location, you may have the right to:

• —Access the personal data we hold about you.
• —Correct inaccurate or incomplete data.
• —Request deletion of your account and all associated personal data.
• —Export your data in a portable, machine-readable format.
• —Object to or restrict certain types of processing.
• —Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. If you are in the EU/EEA and believe we have not adequately addressed your request, you have the right to lodge a complaint with your local data protection authority.

MixNotes is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us personal data, contact us at [email protected] and we will delete it promptly.

We may update this policy as the service evolves. When we make material changes, we will notify registered users by email at least 14 days before the change takes effect and update the “Last updated” date at the top. Continued use of MixNotes after that date constitutes acceptance of the revised policy.

Questions or requests about this policy: [email protected]