Privacy Policy

This Privacy Policy explains how MIXER APP LTD ("Mixer", "we", "us") collects, uses, and shares personal data when you use the Mixer website and services at mixer.app (the "Service"), and the rights you have over your data.

Mixer is the controller of your personal data. We are a company registered in England and Wales (company number 17337732), registered office 178 New Road Side, Horsforth, Leeds, LS18 4DP. For any privacy question, contact privacy@mixer.app.

1. What we collect

• Account data: your email address, and a display name and avatar if you add one. We use passwordless sign-in, so we do not store passwords.
• Content data: the Inputs you submit (prompts, uploads, brand and product details, reference files) and the Outputs the Service generates for you, together with the projects you create.
• Payment data: when you buy credits, our payment provider (Stripe) processes your card details. We do not store full card numbers. We keep a record of your transactions, amounts, and receipts.
• Usage and device data: basic technical information such as your IP address, browser type, and how you interact with the Service, used to run and secure it.
• Communications: messages you send us, for example support requests.

2. Why we use it, and our legal bases

Under UK GDPR and EU GDPR we rely on the following bases:

• To provide the Service (create your account, run generations, store your projects, process payments): performance of our contract with you.
• To keep the Service secure and working, prevent abuse, and improve it: our legitimate interests in operating a safe and reliable service.
• To comply with the law, including tax, accounting, and content-safety obligations: legal obligation.
• To send you service messages (for example sign-in links and receipts): performance of our contract. Any optional marketing email is sent only with your consent, and you can opt out at any time.

We do not use your private Inputs or Outputs to train our own models. Your projects and the content you generate are private to your account. We do not publish them or make them available to other users.

3. Who we share it with (subprocessors)

We use trusted service providers to run the Service. They process personal data on our instructions, under contract. The main ones are:

| Provider | Purpose | Where | | --- | --- | --- | | Supabase | Database, authentication, file storage | EU / US | | Vercel | Website hosting and delivery | US / global | | Stripe | Payment processing | US / global | | Anthropic | The AI assistant that helps you write and plan | US | | AI model providers (including ByteDance / ModelArk, PiAPI, OpenAI, Google, ElevenLabs) | Generating video, image, and audio Outputs from your Inputs | US / global | | Firecrawl | Reading a product page you ask us to scan | US | | Resend | Sending transactional email | US |

When you ask the Service to generate content, the relevant Inputs are sent to the AI model provider that produces the Output. We may update this list as our providers change, and the current list is always shown here.

4. International transfers

Some of our providers are outside the UK and EEA. Where we transfer personal data internationally, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, or a country the UK or EU recognises as providing adequate protection.

5. How long we keep it

We keep your account and content data for as long as your account is open. When you delete your account, we close it immediately and delete your personal data within a reasonable period, except where we must keep certain records to comply with the law. In particular, we retain transaction and invoice records for as long as tax and accounting law requires (generally six years in the UK).

6. Your rights

Under UK and EU data protection law you have the right to access, correct, delete, restrict, or object to our use of your personal data, and the right to data portability. You can exercise the main rights directly in the Service:

• Export my data downloads a copy of the personal data we hold about you.
• Delete my account closes your account and removes your personal data, subject to the legal-retention exception above.

You can also contact us at privacy@mixer.app to exercise any right. We will respond within the time the law requires (usually one month). You have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

7. Cookies

We use only essential cookies that are needed to sign you in and keep the Service working. These do not require your consent. We do not currently use advertising or non-essential tracking cookies. If we add analytics or other non-essential cookies in future, we will ask for your consent first where the law requires it, and update this policy.

8. Children

The Service is not for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, contact privacy@mixer.app and we will delete it.

9. Changes

We may update this policy from time to time. The version shown here, with its effective date, is current. If we make a material change we will take reasonable steps to tell you.

10. Contact

Privacy questions or requests: privacy@mixer.app.