Effective date: March 7, 2026
MixDraft (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.
1. Information We Collect
Account information: Name, email address, studio name, and password hash when you register. If you sign in with Google, we receive your name, email, and profile photo from Google.
Billing information: Payment details are collected and processed by Stripe. We store your Stripe customer ID and subscription status but never store full card numbers on our servers.
Content: Audio files, project metadata, client information, comments, and review notes you create within the Service.
Usage data: Storage consumption, IP addresses, browser type, and general usage patterns to operate and improve the Service.
2. How We Use Your Information
We use your information to: (a) provide and maintain the Service; (b) process payments and manage subscriptions; (c) send transactional emails such as magic link invitations and review notifications; (d) enforce usage limits per your subscription plan; (e) improve the Service and fix issues; and (f) comply with legal obligations.
3. Third-Party Services
We use the following third-party services that may process your data:
Cloudflare R2 — object storage for audio files.
Stripe — payment processing and subscription management.
Google — OAuth authentication and optional Google Drive integration.
Each provider operates under their own privacy policy and data processing agreements.
4. Data Storage & Security
Your data is stored on servers in the United States. Audio files are stored in Cloudflare R2 with server-side encryption. We use HTTPS for all data in transit. Access to production systems is restricted to authorized personnel. While we implement industry-standard safeguards, no method of transmission or storage is 100% secure.
5. Data Retention
We retain your account data and content for as long as your account is active. After account termination, your data is permanently deleted. Billing records may be retained longer as required by law.
6. Client Data
When clients access projects via magic links, we collect their session data and any comments or review notes they submit. Client review sessions are temporary and expire based on studio settings. We do not require clients to create accounts.
7. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking or advertising cookies.
8. Your Rights
You may: (a) access and download your data at any time through the Service; (b) correct inaccurate information in your account settings; (c) delete your account by contacting support; and (d) request a copy of all personal data we hold about you.
9. Children’s Privacy
MixDraft is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification at least 14 days before they take effect.
11. Contact
For privacy-related questions, contact us at privacy@mixdraft.com.