your data, your rules.

This website is operated by M Street Music (“we”, “us”, “our”). We are the data controller responsible for your personal data. For any privacy-related questions, contact us at [email protected].

When you use Mix Roast, we collect:

• Free tier: only your audio file (temporarily processed, then deleted immediately)
• Pro Report: your email address and audio file
• Mix Fix: your name, email address, audio file, track details, and notes
• Payment data: processed securely through Stripe (we do not store your card details)

We process your data based on:

• Contract performance: to provide the service you requested
• Legitimate interest: to improve our services and prevent fraud
• Consent: for marketing communications (if you opt in)

We use your information to:

• Analyze your audio files and generate reports
• Process payments for paid services
• Send you reports and order confirmations via email
• Respond to support requests

Free tier: files are processed and deleted immediately after analysis.

Pro Report: files are processed and deleted immediately. Only analysis results are stored.

Mix Fix: files are stored securely for 30 days to allow delivery and revisions, then permanently deleted.

We do not sell your personal information or audio files. We share data only with:

• Stripe: to process payments securely
• Resend: to send transactional emails
• OpenAI: to generate analysis (audio data only, no personal info)
• Hetzner: server hosting in Germany (EU)

All our service providers are GDPR compliant and process data within the EU or under appropriate safeguards.

Under GDPR, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct any inaccurate data
• Erasure: request deletion of your data (“right to be forgotten”)
• Restriction: limit how we use your data
• Portability: receive your data in a portable format
• Object: object to processing based on legitimate interest
• Withdraw consent: at any time, for consent-based processing

To exercise these rights, email us at [email protected]. We will respond within 30 days.

We implement appropriate security measures including:

• SSL/TLS encryption for all data transmission
• Encrypted file storage on secure servers
• Secure payment processing via Stripe
• Access controls and audit logging
• Servers located in Germany (EU)

We use the following types of cookies:

• Essential cookies: required for the service to function (authentication, session management). These do not require consent.
• Analytics cookies: we use Google Analytics to understand how visitors use our site. These cookies are only set if you accept them via our cookie banner.

You can change your cookie preferences at any time by clearing your browser cookies and revisiting our site.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority. In Croatia, this is the Croatian Personal Data Protection Agency (AZOP).

For privacy-related questions or to exercise your rights, contact us at [email protected].

We may update this privacy policy from time to time. We will notify you of any significant changes via email or through the service.