Privacy Policy
Short version: we keep as little as possible. No ads, no tracking cookies, no analytics and no profiling. You can use most of it without an account. Your files and mixes are auto-deleted within days, and the only companies that touch your data are the ones that host the Service or take the payment.
Who is responsible
The controller for the processing described here, within the meaning of Art. 4(7) GDPR (DSGVO), is Somtoo Solutions. The full name, postal address and contact details are on the Impressum. For any question about your data, write to hello@automix.app.
What we collect
- Files you upload and the mix, tracklist and cover we generate from them.
- Your IP address, used transiently to apply rate limits and prevent abuse. It is not linked to your uploads in any lasting way.
- Account details — if you sign in, your email address (and name/avatar if you use Google) are held by our auth provider so we can recognise you across visits.
- Your email address — also if you choose to enter it to be notified when a mix is ready. Used for that one message, not for marketing.
- Subscription status — if you buy a plan, we store which plan you are on, whether it is active, when it renews, and the customer and subscription identifiers Stripe gives us. We never receive your card details: they are entered on Stripe’s own checkout and stay with Stripe.
- Basic server logs (timestamps, request paths, error traces) kept short-term for reliability and security.
- Which of our links brought you — if you arrive by a link we have tagged (for example from a video description or an advert, recognisable by
utm_in the address) and then sign in, we note the tag on your account: the source, the campaign name and the placement. Nothing more, and only the first time. It is carried in the page address itself, not stored on your device, and it is never shared with the platform the link was on.
We do not use your content to train machine-learning models, and we do not sell or rent any data.
Why we are allowed to process it
Each purpose has its own legal basis under Art. 6(1) GDPR:
- Making your mix, storing it, and running your account — Art. 6(1)(b), performance of the contract you asked us to carry out.
- Handling a subscription — Art. 6(1)(b), and Art. 6(1)(c) where tax or accounting law requires a record to be kept.
- Rate limits, abuse prevention, server and error logs — Art. 6(1)(f), our legitimate interest in keeping the Service available and not paying for someone else’s abuse of it.
- Noting which link brought you — Art. 6(1)(f), our legitimate interest in knowing which of the places we talk about the Service are worth the effort. It involves no cookies, no third party and no profile; you can object at any time (see below) and we will clear it.
- The “mix ready” email — Art. 6(1)(a), your consent, given by entering the address. You can withdraw it at any time, which for a single message means simply not asking for it.
Cookies and local storage
We don’t use tracking or advertising cookies. The app stores a little data in your browser’s local storage — your in-progress mix and a list of mixes you’ve made — so the app works when you come back. That data lives on your device and is not sent to us as a profile. You can clear it any time via your browser.
How long we keep things
- Uploaded source files: deleted after about 7 days.
- Generated mixes and artifacts: deleted after about 30 days.
- A notification email address, if given: discarded after the notification is sent.
- Server logs: rotated within a short window.
Who processes data for us
The Service runs on third-party infrastructure. Data may be processed by:
- Clerk — sign-in and account management
- Railway — application hosting and background processing
- Neon — the database (mix metadata, no file contents)
- Cloudflare R2 — file storage for uploads and mixes
- Upstash — the job queue
- Vercel — hosting for this website
- Resend — sending the “mix ready” email, if you request one
- Sentry — error reports, so a failed render can be diagnosed
- Zoho Mail (Zoho Corporation B.V., Netherlands; EU data centres) — the mailbox behind hello@automix.app. Anything you write to us is stored there.
- Stripe Payments Europe, Ltd. — takes the card payment for a subscription. We are the seller; Stripe processes the payment for us, and is additionally an independent controller for its own fraud-prevention and anti-money-laundering duties, which its privacy policy governs.
Each of these acts as a processor on our behalf under Art. 28 GDPR and is bound by a data-processing agreement, save for the part of Stripe’s handling described above.
Where your data is
The database is hosted in Frankfurt and the application and rendering workers in Amsterdam, both inside the EU. Some providers above are established in the United States or process data there. Where that happens, the transfer is covered by the European Commission’s standard contractual clauses or by an adequacy decision such as the EU–US Data Privacy Framework, together with the safeguards in each provider’s data-processing terms.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have data deleted (Art. 17);
- have processing restricted (Art. 18);
- receive your data in a portable form (Art. 20);
- object to processing based on our legitimate interests (Art. 21), and to withdraw a consent you gave, without affecting what was done before you withdrew it (Art. 7(3)).
Email hello@automix.app and we will act on any of these. Deleting your account removes the mixes and files attached to it; in most cases auto-deletion will have got there first.
You also have the right to complain to a data-protection supervisory authority (Art. 77). For us that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, and you may equally complain to the authority where you live or work.
Children
The Service is not directed at children under 16 and we don’t knowingly collect their data.
Changes
If this policy changes materially, the “last updated” date below will change. Operated by Somtoo Solutions. Contact: hello@automix.app.