Privacy Policy

MixTree is a workspace for DJs to organize a song library, map transitions on an interactive graph, and build playlists. This Privacy Policy describes how MixTree LLC (“MixTree”, “we”, “us”, or “our”) handles personal information when you visit mixtree.studio, create an account, or use our applications and services (together, the “Service”).

For people in the European Economic Area (“EEA”) and the United Kingdom (“UK”), MixTree LLC is the “controller” of your personal data. For California and other US residents, MixTree LLC is the “business” that determines the purposes and means of processing your personal information.

This policy does not apply to third-party services that have their own privacy policies, including services you choose to connect to or that we rely on to operate the Service (described under How we share information).

The short version, with detail in the sections that follow:

• We collect the information you give us (such as your name, email, and the songs, transitions, and playlists you create), information collected automatically when you use the Service (such as device and usage data), and information from the providers we use for sign-in and payment.
• We use your information to provide and secure the Service, to handle billing, to communicate with you, to understand how the Service is used, and to comply with the law.
• We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not show third-party advertising in the Service.
• We use a small number of trusted providers (for authentication, payments, hosting, and analytics) that process information on our behalf. Some are located in the United States.
• You have rights over your information. Depending on where you live, these can include access, correction, deletion, portability, and the right to opt out of certain processing. See Your privacy rights.

Information you provide to us

• Account information. When you sign up, our authentication provider (Clerk) collects your name, email address, and a password, or, if you choose to sign in with Google, basic profile information from your Google account (such as your name, email, and profile image). We receive your account identifier and these basic profile details.
• Content you create. The songs, transitions, graphs, playlists, notes, tags, and other content you add to the Service, including any track metadata you import from DJ software such as Rekordbox or Serato.
• Payment information. If you subscribe to a paid plan, our billing provider (Clerk Billing, which uses Stripe to process payments) collects your payment details. Your full card number and security code are handled by the payment processor and are not stored on MixTree servers. We receive limited billing data such as your plan, subscription status, billing country, and the last four digits or card brand where provided.
• Communications and feedback. If you contact us, submit feedback through the in-app widget, or respond to a survey, we collect the information you choose to share, such as your message and contact details.

Information we collect automatically

• Usage and event data. When you use the Service, our analytics provider (PostHog) records events such as page views, page exits, clicks and interactions (autocapture), and product events (for example, that a song was added, a playlist was created, or a paid limit was reached). For signed-in users, these events are associated with your account identifier.
• Device and connection data. Information such as your IP address, approximate location derived from your IP address, browser type, device type, operating system, language, and referring pages.
• Diagnostic and error data. When something goes wrong, we collect error and crash information to help us fix problems. Our session recording configuration is set to mask all input fields, so the values you type are not captured.
• Cookies and similar technologies. See Cookies and similar technologies.

Information we receive from third parties

• Sign-in providers. If you sign in with Google, we receive the basic profile information described above, in accordance with your Google account settings.
• Billing lifecycle. Our billing provider notifies us of subscription events (such as a subscription becoming active, a trial converting, a payment attempt, or a cancellation) so we can provide the right level of service and measure conversions.

Sensitive information

We do not intentionally collect sensitive personal information, special category data (such as data about your health, race, religion, sexual orientation, or political views), precise geolocation, government identifiers, or biometric data. Please do not enter sensitive information into free-text fields such as song or playlist notes.

We use personal information for the following purposes:

• To provide the Service: create and manage your account, store and display your library, graphs, and playlists, and make features such as import and export work.
• To process payments: manage subscriptions, trials, promotions, renewals, and cancellations through our billing provider.
• To secure the Service: authenticate you, prevent fraud and abuse, protect accounts, and maintain the integrity of the Service.
• To communicate with you: send service and transactional messages (such as account, security, and billing notices) and respond to your requests and feedback.
• To understand and improve the Service: measure usage, diagnose problems, and decide what to build, using analytics that are primarily aggregate.
• To comply with the law: meet legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

If you are in the EEA or UK, we rely on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract: to provide the Service you sign up for and to process your subscription. Without this information we cannot provide the Service.
• Legitimate interests: to secure the Service, prevent abuse, understand how the Service is used at an aggregate level, and improve our product. We balance these interests against your rights.
• Consent: for non-essential cookies and similar technologies (such as analytics), and for any optional communications. You can withdraw consent at any time, without affecting processing that already took place.
• Legal obligation: to keep certain records (for example, tax and accounting records) and to respond to lawful requests.

We and our providers use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, and measure how the Service is used. Some are strictly necessary for the Service to function; others are optional.

You can control cookies through your browser settings, including blocking or deleting them, though strictly necessary cookies are required for the Service to work.

Where the law requires consent for non-essential cookies (for example, in the European Economic Area and the United Kingdom), we ask for your consent before loading analytics, and analytics stays off until you accept. You can change your choice at any time using , and we treat a Global Privacy Control signal as a request to decline (see below). Where consent is not legally required (for example, in the United States), analytics is enabled by default and these technologies are used without a separate prompt; we still do not sell or share your information or use it for targeted advertising.

We do not sell your personal information. We share it only in the following circumstances:

Service providers (processors)

We use a small number of trusted providers that process information on our behalf and under contract, only to provide services to us:

Other disclosures

• Legal and safety: when we believe in good faith that disclosure is necessary to comply with the law, enforce our terms, protect the rights, property, or safety of MixTree, our users, or others, or detect and prevent fraud or security issues.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will continue to protect your information and notify you of any change as required.
• With your direction or consent: when you ask us to share information or otherwise consent to sharing.
• Aggregated or de-identified data: we may share information that cannot reasonably be used to identify you.

We rely on providers that may store and process information in the United States and other countries. If you are in the EEA, UK, or another region with data transfer rules, please be aware that your information may be transferred to, and processed in, countries whose data protection laws differ from those in your country.

Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism offered by our providers. You can ask us for more information about these safeguards using the contact details below.

We keep personal information for as long as your account is active and for as long as needed to provide the Service. After that, we keep information only as long as necessary for the purposes described in this policy, such as to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements.

• Account and content: retained while your account is open. When you delete your account, your library, transitions, playlists, settings, and analytics profile are erased, subject to limited retention required by law or for legitimate business records.
• Billing records: retained as required by tax and accounting law.
• Analytics and logs: retained for a limited period and then deleted or aggregated.

You can request deletion at any time as described under Your privacy rights.

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, row-level security on our database so each account can reach only its own data, and reliance on established providers for authentication and payments. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it confidential.

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access and know: request a copy of the information we hold about you and details about how we use it.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: delete your information. You can erase your entire account yourself from your profile settings, or ask us to do it.
• Portability: request a copy of certain information in a portable, machine-readable format.
• Opt out: opt out of the “sale” or “sharing” of personal information and of targeted advertising. We do not sell or share your information or use it for targeted advertising, but you may still exercise this right.
• Restriction and objection: ask us to restrict or object to certain processing.
• Withdraw consent: withdraw consent where we rely on it.

You can delete your account and all of its data yourself at any time from your profile settings (under “Delete account”); this erases your library, transitions, playlists, and settings. For any other request, or to obtain a copy of your information, contact us at mixtreesupport@gmail.com and we will fulfil it manually. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request, and you may use an authorized agent where the law allows.

If you are in the EEA or UK, you have the rights described above under the GDPR and UK GDPR, and the following also applies:

• Our legal bases for processing are described under Legal bases.
• You have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO). In the EEA, it is your national Data Protection Authority. We would appreciate the chance to address your concerns first.
• You can object to processing based on legitimate interests, and to direct marketing at any time.
• EU representative: we have not appointed an Article 27 EU representative at this time. UK representative: we have not appointed a UK representative at this time.

This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”).

Categories of personal information we collect

In the past 12 months, we have collected the following categories of personal information. We do not sell or share (for cross-context behavioral advertising) any of these categories.

We collect this information from you, from your device when you use the Service, and from the sign-in and billing providers described above. We use it for the business purposes described under How we use your information, and we disclose it only to the service providers described under How we share information.

Your California rights

• The right to know what personal information we collect, use, and disclose.
• The right to delete personal information we have collected from you.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information. We do not sell or share personal information.
• The right to limit the use of sensitive personal information. We do not collect sensitive personal information for purposes that trigger this right.
• The right not to receive discriminatory treatment for exercising your rights.

To exercise these rights, contact us at mixtreesupport@gmail.com. You may use an authorized agent to submit a request on your behalf. We will verify your request as required by law. California’s “Shine the Light” law: we do not disclose personal information to third parties for their own direct marketing purposes.

If you are a resident of a US state with a comprehensive consumer privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, Tennessee, and others as they take effect), you have rights that may include:

• The right to confirm whether we process your personal data and to access it.
• The right to correct inaccuracies.
• The right to delete personal data you provided or we obtained.
• The right to obtain a portable copy of your data.
• The right to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data, use it for targeted advertising, or carry out profiling that produces legal or similarly significant effects.

To exercise these rights, contact us at mixtreesupport@gmail.com. If we decline a request, you may appeal by replying to our decision; if we deny your appeal, you may contact your state attorney general. Where required, we honor recognized universal opt-out signals such as Global Privacy Control (see below).

Florida residents have rights under the Florida Digital Bill of Rights (“FDBR”) that, where the law applies, include the rights to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling.

The FDBR’s controller obligations apply primarily to businesses with more than 1 billion US dollars in global gross annual revenue that meet additional criteria. MixTree does not currently meet that revenue threshold, so most FDBR controller obligations are not expected to apply to us today. Even so, we extend the core FDBR rights above to Florida residents as a matter of policy, and we apply the children’s protections described under Children’s privacy, including not directing targeted advertising to, or selling the personal data of, anyone we know to be under 18. To exercise your rights, contact us at mixtreesupport@gmail.com.

The Service is intended for adults. As stated in our Terms of Service, you must be at least 18 years old to use it. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18, and certainly not from children under 13.

We do not knowingly process the personal data of a minor for targeted advertising, nor do we sell it. If you believe someone under 18 has created an account or provided us with personal information, please contact us at mixtreesupport@gmail.com and we will take steps to close the account and delete the information. A parent or guardian may contact us to review or delete a minor’s information.

Some browsers offer a “Do Not Track” setting. Because there is no common industry standard for how to respond to it, we do not currently respond to Do Not Track signals.

Where required by law, we treat a recognized universal opt-out signal, such as Global Privacy Control (GPC), as a valid request to opt out of the sale or sharing of personal information and of targeted advertising for the browser or device that sends it.

The Service may link to or embed third-party websites and services (for example, audio previews from SoundCloud). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing them with information.

MixTree is intentionally built without AI-driven recommendations or automated suggestions. We do not use your personal information to make decisions that produce legal or similarly significant effects about you without human involvement.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate or required, provide additional notice (such as by email or an in-product message). Your continued use of the Service after an update means you accept the revised policy, to the extent permitted by law.

If you have questions about this policy or want to exercise your rights, contact us:

• By email: mixtreesupport@gmail.com
• By mail: MixTree LLC, 8 The Green, Suite B, Dover, DE 19901, United States

We will respond to your request within the timeframe required by applicable law.