Privacy Policy

1. Introduction

AIMixtapes ("we," "us," or "our") values your privacy. This Privacy Policy (the "Policy") explains how we collect, use, disclose, and safeguard personal information when you use AIMixtapes (http://localhost:3000) and the related applications, APIs, and services (collectively, the "Service"). If you do not agree with the practices described below, do not access or use the Service.

We may revise this Policy from time to time. When we do, we update the "Last updated" date above and, where changes are material, provide additional notice such as an in-app banner or email alert.

2. Information We Collect

We collect information in the following ways:

• Account and contact details you provide when registering, such as name, email address, password, billing country, and authentication tokens from identity providers (Google, Apple) or streaming services (Spotify, Apple Music).
• Profile and preference data including display name, avatar, genres you follow, saved playlists, likes, follows, and social interactions.
• User generated content such as playlist prompts, titles, descriptions, annotations, comments, cover artwork, gift stories, scheduled deliveries, recipient names or email addresses, and any voice recordings uploaded through the gifting experience. Voice clips are stored in Firebase Storage and linked to your account or gift until removed.
• Transaction data related to credit packs, memberships, or gift purchases processed by Stripe (card type, last four digits, billing ZIP/postal code, Stripe customer ID) plus credit balances and redemption history maintained in our systems.
• Usage and device information automatically logged when you use the Service, including IP address, browser type, device identifiers, pages visited, in-app events, playlist export activity, error diagnostics, and similar telemetry.
• Derived data generated as part of the product, such as listening insights, quality metrics, or AI suggestions built from your prompts and interaction history.
• Information from third-party services when you connect accounts. For example, Spotify and Apple Music may share playlist identifiers and access tokens so we can create or update playlists on your behalf; Google or Apple may share profile basics for authentication; SERP API may return public artwork metadata.

3. How We Use Your Information

• Operate, maintain, and improve the Service, including playlist generation, export, gifting, and discovery features.
• Authenticate you, secure your account, and remember your preferences across sessions.
• Process purchases, subscriptions, and redemptions, and maintain accurate credit ledgers.
• Send transactional communications such as receipts, playlist export confirmations, gift delivery emails, or compliance notices.
• Provide customer support, investigate reports, and address technical issues or abuse.
• Develop new features, run product experiments, and analyse aggregated usage trends (only when analytics consent is granted).
• Protect the Service, our users, and our partners by detecting fraud, abuse, or violations of our Terms of Service.

4. How We Share Information

We share personal information only as necessary to deliver the Service or comply with law:

• Service providers and infrastructure partners including Google Cloud/Firebase (hosting, authentication, database, storage, App Check), Stripe (payments and invoicing), PostHog (analytics when consented), Resend (email delivery), OpenAI or similar AI platforms (processing prompts to generate recommendations), SERP API (artwork search), and other vetted subprocessors that help us operate the Service.
• Streaming platforms such as Spotify and Apple Music when you link accounts, so we can create, edit, or sync playlists at your request. We never receive your streaming passwords; the providers share tokens that you can revoke at any time.
• Gift recipients when you send a mixtape gift. We deliver the playlist metadata, messages, and any audio clips you chose to include. Recipients may view their gift via share link or logged-in experience.
• Legal obligations when we believe disclosure is required by law, regulation, legal process, or government request, or to protect the safety, rights, or property of AIMixtapes, our users, or others.
• Business transfers if we engage in a merger, acquisition, financing, or sale of assets. We will provide notice before personal information becomes subject to a materially different policy.

We do not sell personal information or share it for targeted advertising without your consent.

5. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to make the Service work and to measure performance. Essential cookies and storage (for example, authentication tokens, security protections, credit balances) are required. Optional categories include analytics and marketing. You can control these preferences through the cookie banner or the "Manage preferences" link in the footer at any time.

When you opt in to analytics, we may collect additional event data using PostHog or comparable tools to understand product usage patterns. Marketing cookies are currently disabled by default; if introduced, they will require explicit consent.

6. Your Privacy Choices

• Consent controls: Adjust analytics and marketing preferences through the cookie banner or footer link. Changes take effect in the current browser; clearing cookies resets your preferences.
• Streaming connections: You can disconnect Spotify, Apple Music, or other linked providers in settings or via the provider's own account dashboard, which revokes our access tokens.
• Account management: Update profile information, delete playlists, or remove gifts/voice clips from within the product. Contact us to request full account deletion or the removal of data you cannot change yourself.
• Gift notifications: Scheduled gift emails can be cancelled before delivery by editing or deleting the gift in your dashboard.
• Email preferences: Transactional messages are required to provide the Service. Marketing emails (if any) will include an unsubscribe link.

7. Data Security

We protect personal information using administrative, technical, and physical safeguards, including HTTPS for data in transit, encryption offered by our cloud providers for data at rest, access controls, Firebase App Check for abuse prevention, and ongoing monitoring for suspicious activity. No system is 100% secure, so we encourage you to use strong passwords, enable device-level security, and promptly report suspected issues.

8. Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account data is kept while your account remains active and for a reasonable period thereafter to satisfy legal or audit requirements.
• Transaction and billing records are retained as required by tax and accounting laws.
• Gifts generally remain accessible for at least 30 days. Unclaimed or expired gifts (including voice clips) may be archived or deleted thereafter.
• Aggregated or anonymised data (for example, playlist statistics) may be retained indefinitely without direct identifiers.

You may request deletion of your personal data at any time; see Section 9 for details.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export personal information; object to or restrict certain processing; withdraw consent; or appeal a refusal of your request. Submit requests to support@aimixtapes.com. We will verify your identity and respond within the timeframe required by applicable law. You may designate an authorised agent where permitted.

10. International Data Transfers

We operate primarily in the United States and may process data in other countries where our service providers are located. When we transfer personal information internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or analogous mechanisms permitted by applicable law.

11. Children's Privacy

The Service is not directed to children under 13 (or the higher age threshold required in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have inadvertently collected such data, we will delete it. Parents or guardians who believe a child has provided information may contact us at support@aimixtapes.com.

12. Changes to This Policy

We will post any updates to this Policy on this page and, when changes are material, provide a prominent notice (for example, email or in-app alert). Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

13. Contact Us