Privacy Policy
MashupMaker Privacy Policy
Last updated: October 31, 2026
Summary
- We collect what we need to run MashupMaker: your Google sign-in details, what you submit and generate, your purchases, and basic usage and device data.
- We do not sell your personal information.
- We share data with the service providers that help us run the Service, such as AI model providers, our payment processor, hosting and analytics, and otherwise only where the law requires it, in a business transfer, or with your consent.
- You can ask us to access, correct or delete your data by emailing [email protected].
This Privacy Policy explains how MashupMaker ("we", "us", "our") collects, uses, stores and shares personal information when you use the Service at https://mashupmaker.net (the "Service"), and the choices you have. By using the Service, you agree to this Policy.
1. Who Is Responsible for Your Data
- Data controller: MashupMaker (mashupmaker.net)
- Privacy email: [email protected]
2. Information We Collect
2.1 Information You Give Us
- Account information: when you sign in with Google, we receive your name, email address, profile picture and Google account ID. We never receive or store your Google password.
- Content you submit: audio files you submit, and the generation settings you choose.
- Generated content: separated audio parts and the settings and task information used to make your mashup. The final mix is rendered in your browser and is not uploaded to our servers.
- Purchase information: the plan or credit pack you buy, the amount, currency, payment status and transaction IDs. We never receive or store your full card number; card details are handled by our payment processor (see Section 5).
- Messages: emails, support and refund requests, content reports and feedback you send us.
2.2 Information Collected Automatically
- Device and network: IP address, browser type, operating system, device type, language and time zone.
- Usage: pages visited, features used, generation history, credit balance and usage.
- Logs: request times, error logs and performance data.
3. How We Use Your Information
| Purpose | Legal basis |
|---|---|
| Running the Service: accounts, generation, storing and delivering your content | Contract |
| Billing, credits and payments | Contract |
| Support, refunds and handling reports | Contract / Legitimate interests |
| Service messages (billing, security, policy changes) | Legitimate interests |
| Safety, security and fraud prevention | Legitimate interests / Legal obligation |
| Analytics and improving the Service | Legitimate interests |
| Complying with the law | Legal obligation |
We may produce aggregated or anonymized statistics that cannot be linked to you.
4. Cookies and Analytics
| Type | Purpose | Can be turned off |
|---|---|---|
| Strictly necessary | Keeping you signed in, security and core features | No |
| Functional | Remembering your language and interface preferences | Yes |
| Analytics | Usage statistics that help us improve the Service | Yes |
We do not use advertising cookies. Analytics tools we use:
- Plausible Analytics (self-hosted by us; does not use cookies): Plausible data policy
Where a consent banner is shown, you can accept or reject analytics cookies. You can also block or delete cookies in your browser settings; blocking strictly necessary cookies will stop you from signing in.
5. How We Share Information
We do not sell your personal information, including as defined under laws such as the CCPA. We share information only in these cases:
- Service providers that help us run the Service, only for that purpose:
- Payment processing: our third-party payment processor handles payments. Card details are handled only by the processor and are not stored on our servers. It receives your email address, purchase details and the payment information you enter at checkout.
- Audio processing providers: uploaded source audio is shared with the separation provider to produce the vocal and backing parts needed for your mashup. The final mix is rendered in your browser. Nightcore, slowed-and-reverb and key/BPM tools process your audio locally without uploading it.
- Rights and abuse reports: we use the information you send in a complaint to identify the relevant task, investigate it and take appropriate action. Audio processing does not verify copyright permissions.
- Infrastructure: Vercel (hosting), Neon (database) and Cloudflare (file storage and delivery).
- Sign-in and analytics: Google (sign-in).
- Legal requirements: where required by law, court order or a lawful request from authorities, including reporting child sexual abuse material.
- Business transfers: if the Service is merged or sold, with notice to you and continued protection of your information.
- With your consent: for any other purpose, with your prior consent.
6. Security
- All traffic to and from the Service is encrypted with TLS (HTTPS).
- Credentials are encrypted or hashed; card data never reaches our servers.
- Access to personal data is limited to what is needed to run the Service.
- Sign-in is handled through Google's OAuth 2.0.
No system is completely secure. If a security incident affects your rights, we will notify you where the law requires it. Please keep your Google account secure.
7. How Long We Keep Data
| Data | How long | Then |
|---|---|---|
| Account information | While your account is active | Deleted within 30 days after you ask us to delete your account |
| Uploaded audio and separated parts | 24 hours from registration or creation of each asset | Access expires, then scheduled automatic deletion runs; failed deletions are retried |
| Task details and generation settings | While your account is active | Deleted within 30 days after account deletion, subject to legal retention |
| Usage, log and moderation records | While your account is active | Deleted or anonymized within 30 days after account deletion |
| Transaction records | 7 years, for tax and accounting | Deleted |
To delete your account, email [email protected] from your registered email address. We remove your access immediately.
Audio Privacy and Copyright Reports
Uploaded audio and separated parts are stored privately. Access requires ownership checks and uses signed links valid for at most five minutes and never beyond the asset expiry. We do not provide a public mashup gallery. Automatic deletion starts after the 24-hour expiry; a queue or failed deletion can delay physical removal, but expired files are no longer available through the service. This policy does not delete copies you download to your device. Browser-only free tools do not send your audio to server storage.
You must own the rights or hold authorization for the audio you upload, and confirm this before uploading. Mashups are for personal use. You are responsible for permissions for any publication, which may be removed by a platform for copyright reasons.
Send copyright complaints to [email protected] with the work concerned, the relevant URL or task description/identifier, your contact details, a good-faith statement that the use is unauthorized, and confirmation that you may act for the rights holder. We use that information to investigate and respond, and will review and take appropriate action within 48 hours. We may request details needed to identify the task or verify the claim.
8. Your Rights
To use any of these rights, email [email protected] from your registered email address. We respond within 30 days.
| Right | What it means |
|---|---|
| Be informed | Know what data we collect and how we use it |
| Access | Get a copy of your personal information |
| Correction | Fix inaccurate or incomplete data |
| Deletion | Ask us to delete your account and data, subject to legal retention |
| Restriction | Ask us to pause certain processing |
| Portability | Receive your data in a machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw consent where processing relies on it |
California residents (CCPA): you can ask to know and delete your personal information, and we will not treat you differently for doing so. We do not sell personal information.
EEA, UK and Swiss residents (GDPR): the legal bases we rely on are listed in Section 3.
Wherever you live, you can also complain to your local data protection authority.
9. Marketing
We send marketing emails only with your consent, and every marketing message includes an unsubscribe link. Service messages such as receipts and security alerts are not marketing and will still be sent.
10. International Transfers
Our servers and service providers are mainly in the United States, and some providers, such as Cloudflare, operate worldwide. Your information may therefore be processed outside your country. Where the law requires it, we rely on appropriate safeguards for these transfers.
11. Children
The Service is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you think a minor has given us information, email [email protected] and we will delete it promptly.
12. Third-Party Links and Services
The Service links to and works with third-party services, such as Google sign-in and our payment processor's checkout. This Policy covers only the data we collect. Please read those services' own privacy policies.
13. Changes to This Policy
For material changes, we will give notice by email or by a notice on the Service before they take effect, and update the date at the top of this page. Continued use after a change takes effect means you accept the updated Policy.
14. Contact
- Privacy and support email: [email protected]
- Response time: within 30 days for data rights requests
MashupMaker · https://mashupmaker.net