Privacy Policy

MixTree is a workspace for DJs to organize a song library, map transitions on an interactive graph, and build playlists. This Privacy Policy describes how MixTree LLC (“MixTree”, “we”, “us”, or “our”) handles personal information when you visit mixtree.studio, create an account, or use our applications and services (together, the “Service”).

For people in the European Economic Area (“EEA”) and the United Kingdom (“UK”), MixTree LLC is the “controller” of your personal data. For California and other US residents, MixTree LLC is the “business” that determines the purposes and means of processing your personal information.

This policy does not apply to third-party services that have their own privacy policies, including services you choose to connect to or that we rely on to operate the Service (described under How we share information).

The short version, with detail in the sections that follow:

• We collect the information you give us (such as your name, email, and the songs, transitions, and playlists you create), information collected automatically when you use the Service (such as device and usage data), and information from the providers we use for sign-in and payment.
• We use your information to provide and secure the Service, to handle billing, to communicate with you, to understand how the Service is used, and to comply with the law.
• We do not sell your personal information, and we do not show third-party advertising in the Service. We do share limited usage data (such as page views and signup or subscription events) with our advertising partner, TikTok, to measure and improve advertising for MixTree itself.
• We use a small number of trusted providers (for authentication, payments, hosting, and analytics) that process information on our behalf. Some are located in the United States.
• You have rights over your information. Depending on where you live, these can include access, correction, deletion, portability, and the right to opt out of certain processing. See Your privacy rights.

Information you provide to us

• Account information. When you sign up, our authentication provider (Clerk) collects your name, email address, and a password, or, if you choose to sign in with Google, basic profile information from your Google account (such as your name, email, and profile image). We receive your account identifier and these basic profile details.
• Content you create. The songs, transitions, graphs, playlists, notes, tags, and other content you add to the Service, including any track metadata you import from DJ software such as Rekordbox or Serato.
• Payment information. If you subscribe to a paid plan, our billing provider (Clerk Billing, which uses Stripe to process payments) collects your payment details. Your full card number and security code are handled by the payment processor and are not stored on MixTree servers. We receive limited billing data such as your plan, subscription status, billing country, and the last four digits or card brand where provided.
• Communications and feedback. If you contact us, submit feedback through the in-app widget, or respond to a survey, we collect the information you choose to share, such as your message and contact details.

Information we collect automatically

• Usage and event data. When you use the Service, our analytics provider (PostHog) records events such as page views, page exits, clicks and interactions (autocapture), and product events (for example, that a song was added, a playlist was created, or a paid limit was reached). For signed-in users, these events are associated with your account identifier.
• Device and connection data. Information such as your IP address, approximate location derived from your IP address, browser type, device type, operating system, language, and referring pages.
• Advertising measurement data. Our advertising partner (TikTok) records page views and conversion events (such as creating an account or starting a subscription) when you use the Service, together with cookie and device identifiers, IP address, and browser information. For signed-in users this includes identifiers such as your email address, name, and account identifier, in hashed (pseudonymised) form. See How we share information.
• Diagnostic and error data. When something goes wrong, we collect error and crash information to help us fix problems. Our session recording configuration is set to mask all input fields, so the values you type are not captured.
• Cookies and similar technologies. See Cookies and similar technologies.

Information we receive from third parties

• Sign-in providers. If you sign in with Google, we receive the basic profile information described above, in accordance with your Google account settings.
• Billing lifecycle. Our billing provider notifies us of subscription events (such as a subscription becoming active, a trial converting, a payment attempt, or a cancellation) so we can provide the right level of service and measure conversions.

Sensitive information

We do not intentionally collect sensitive personal information, special category data (such as data about your health, race, religion, sexual orientation, or political views), precise geolocation, government identifiers, or biometric data. Please do not enter sensitive information into free-text fields such as song or playlist notes.

We use personal information for the following purposes:

• To provide the Service: create and manage your account, store and display your library, graphs, and playlists, and make features such as import and export work.
• To process payments: manage subscriptions, trials, promotions, renewals, and cancellations through our billing provider.
• To secure the Service: authenticate you, prevent fraud and abuse, protect accounts, and maintain the integrity of the Service.
• To communicate with you: send service and transactional messages (such as account, security, and billing notices) and respond to your requests and feedback.
• To understand and improve the Service: measure usage, diagnose problems, and decide what to build, using analytics that are primarily aggregate.
• To advertise the Service: measure whether our own ads (for example, on TikTok) lead to visits, signups, and subscriptions, and improve how those ads are delivered. We do not use your library or the content you create for advertising.
• To comply with the law: meet legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

If you are in the EEA or UK, we rely on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract: to provide the Service you sign up for and to process your subscription. Without this information we cannot provide the Service.
• Legitimate interests: to secure the Service, prevent abuse, understand how the Service is used at an aggregate level, and improve our product. We balance these interests against your rights.
• Consent: for non-essential cookies and similar technologies (such as analytics and advertising measurement), and for any optional communications. You can withdraw consent at any time, without affecting processing that already took place.
• Legal obligation: to keep certain records (for example, tax and accounting records) and to respond to lawful requests.

We and our providers use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, and measure how the Service is used. Some are strictly necessary for the Service to function; others are optional.

You can control cookies through your browser settings, including blocking or deleting them, though strictly necessary cookies are required for the Service to work.

Where the law requires consent for non-essential cookies (for example, in the European Economic Area and the United Kingdom), we ask for your consent before loading analytics and advertising technologies, and they stay off until you accept. You can change your choice at any time using . Where consent is not legally required (for example, in the United States), analytics and advertising measurement are enabled by default and these technologies are used without a separate prompt. You can block or delete cookies in your browser, or contact us at mixtreesupport@gmail.com to opt out of advertising measurement.

We do not sell your personal information. We share it only in the following circumstances:

Service providers (processors)

We use a small number of trusted providers that process information on our behalf and under contract, only to provide services to us:

Advertising partner

To advertise MixTree on TikTok and measure whether those ads work, we share limited information with TikTok: the pages you visit on our site, conversion events (such as creating an account or starting a trial or subscription), cookie and device identifiers, IP address and browser information, and, for signed-in users, identifiers such as your email address, name, and account identifier, in hashed (pseudonymised) form. TikTok uses this information as an independent company under its own privacy policy, including to match events to TikTok accounts and improve ad delivery. Under some US state privacy laws this may be considered “sharing” for targeted advertising; see Your privacy rights for how to opt out.

Other disclosures

• Legal and safety: when we believe in good faith that disclosure is necessary to comply with the law, enforce our terms, protect the rights, property, or safety of MixTree, our users, or others, or detect and prevent fraud or security issues.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will continue to protect your information and notify you of any change as required.
• With your direction or consent: when you ask us to share information or otherwise consent to sharing.
• Aggregated or de-identified data: we may share information that cannot reasonably be used to identify you.

We rely on providers that may store and process information in the United States and other countries. If you are in the EEA, UK, or another region with data transfer rules, please be aware that your information may be transferred to, and processed in, countries whose data protection laws differ from those in your country.

Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism offered by our providers. You can ask us for more information about these safeguards using the contact details below.

We keep personal information for as long as your account is active and for as long as needed to provide the Service. After that, we keep information only as long as necessary for the purposes described in this policy, such as to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements.

• Account and content: retained while your account is open. When you delete your account, your library, transitions, playlists, settings, and analytics profile are erased, subject to limited retention required by law or for legitimate business records.
• Billing records: retained as required by tax and accounting law.
• Analytics and logs: retained for a limited period and then deleted or aggregated.

You can request deletion at any time as described under Your privacy rights.

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, row-level security on our database so each account can reach only its own data, and reliance on established providers for authentication and payments. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it confidential.

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access and know: request a copy of the information we hold about you and details about how we use it.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: delete your information. You can erase your entire account yourself from your profile settings, or ask us to do it.
• Portability: request a copy of certain information in a portable, machine-readable format.
• Opt out: opt out of the “sale” or “sharing” of personal information and of targeted advertising. We do not sell your information. We share limited usage data with TikTok for advertising measurement; to opt out, use the cookie settings where shown, block cookies in your browser, or contact us at mixtreesupport@gmail.com.
• Restriction and objection: ask us to restrict or object to certain processing.
• Withdraw consent: withdraw consent where we rely on it.

You can delete your account and all of its data yourself at any time from your profile settings (under “Delete account”); this erases your library, transitions, playlists, and settings. For any other request, or to obtain a copy of your information, contact us at mixtreesupport@gmail.com and we will fulfil it manually. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request, and you may use an authorized agent where the law allows.

If you are in the EEA or UK, you have the rights described above under the GDPR and UK GDPR, and the following also applies:

• Our legal bases for processing are described under Legal bases.
• You have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). In the EEA, it is your national Data Protection Authority. We would appreciate the chance to address your concerns first.
• You can object to processing based on legitimate interests, and to direct marketing at any time.
• EU representative: we have not appointed an Article 27 EU representative at this time. UK representative: we have not appointed a UK representative at this time.

This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).

Categories of personal information we collect

In the past 12 months, we have collected the following categories of personal information. We do not sell any of these categories. The categories marked below are shared with our advertising partner (TikTok) for advertising measurement, which may qualify as “sharing” for cross-context behavioral advertising under the CCPA/CPRA.

We collect this information from you, from your device when you use the Service, and from the sign-in and billing providers described above. We use it for the business purposes described under How we use your information, and we disclose it only to the service providers described under How we share information.

Your California rights

• The right to know what personal information we collect, use, and disclose.
• The right to delete personal information we have collected from you.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information. We do not sell personal information; we share the categories marked above with TikTok for advertising measurement, and you can opt out as described under Your privacy rights.
• The right to limit the use of sensitive personal information. We do not collect sensitive personal information for purposes that trigger this right.
• The right not to receive discriminatory treatment for exercising your rights.

To exercise these rights, contact us at mixtreesupport@gmail.com. You may use an authorized agent to submit a request on your behalf. We will verify your request as required by law. California’s “Shine the Light” law: we do not disclose personal information to third parties for their own direct marketing purposes, other than the advertising measurement sharing described under How we share information.

If you are a resident of a US state with a comprehensive consumer privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, Tennessee, and others as they take effect), you have rights that may include:

• The right to confirm whether we process your personal data and to access it.
• The right to correct inaccuracies.
• The right to delete personal data you provided or we obtained.
• The right to obtain a portable copy of your data.
• The right to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data or carry out profiling that produces legal or similarly significant effects. We share limited usage data with TikTok for advertising measurement; you can opt out as described under Your privacy rights.

To exercise these rights, contact us at mixtreesupport@gmail.com. If we decline a request, you may appeal by replying to our decision; if we deny your appeal, you may contact your state attorney general. Our treatment of universal opt-out signals such as Global Privacy Control is described under Do Not Track and Global Privacy Control.

Florida residents have rights under the Florida Digital Bill of Rights (“FDBR”) that, where the law applies, include the rights to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling.

The FDBR’s controller obligations apply primarily to businesses with more than 1 billion US dollars in global gross annual revenue that meet additional criteria. MixTree does not currently meet that revenue threshold, so most FDBR controller obligations are not expected to apply to us today. Even so, we extend the core FDBR rights above to Florida residents as a matter of policy, and we apply the children’s protections described under Children’s privacy, including not directing targeted advertising to, or selling the personal data of, anyone we know to be under 18. To exercise your rights, contact us at mixtreesupport@gmail.com.

The Service is intended for adults. As stated in our Terms of Service, you must be at least 18 years old to use it. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18, and certainly not from children under 13.

We do not knowingly process the personal data of a minor for targeted advertising, nor do we sell it. If you believe someone under 18 has created an account or provided us with personal information, please contact us at mixtreesupport@gmail.com and we will take steps to close the account and delete the information. A parent or guardian may contact us to review or delete a minor’s information.

Some browsers offer a “Do Not Track” setting or send a Global Privacy Control (GPC) signal. We do not currently respond to Do Not Track or GPC signals: there is no common industry standard for Do Not Track, and the state privacy laws that give GPC binding effect do not currently apply to a business of our size.

You can still control this tracking directly: in regions where we ask for consent, the cookie banner and cookie settings govern whether analytics and advertising technologies load; everywhere else you can block or delete cookies in your browser or contact us at mixtreesupport@gmail.com to opt out. If a law that requires honoring a recognized universal opt-out signal comes to apply to us, we will honor it.

The Service may link to or embed third-party websites and services (for example, audio previews from SoundCloud). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing them with information.

MixTree is intentionally built without AI-driven recommendations or automated suggestions. We do not use your personal information to make decisions that produce legal or similarly significant effects about you without human involvement.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate or required, provide additional notice (such as by email or an in-product message). Your continued use of the Service after an update means you accept the revised policy, to the extent permitted by law.

If you have questions about this policy or want to exercise your rights, contact us:

• By email: mixtreesupport@gmail.com
• By mail: MixTree LLC, 8 The Green, Suite B, Dover, DE 19901, United States

We will respond to your request within the timeframe required by applicable law.