Privacy Policy

This Privacy Policy explains how Velveteen Technologies Inc. ("we", "us", or "our") collects, uses, and safeguards information through MixPass (accessible at mixpass.co). MixPass provides private listening rooms and collaboration spaces for musical works in progress, audio mix versions, producer context, credits, and timestamped feedback.

1. Information We Collect

Account Information

When you create an account or sign in to MixPass, we collect information needed to establish and authenticate your identity:

• Email address and password: If you register directly with an email address.
• Google Account Information: If you sign in using Google OAuth, Google provides us with your verified email address, your name, and your profile picture. We use this information solely to create and authenticate your account.

Audio Files and Project Content

To provide the listening room service, we store content you choose to upload:

• Audio files representing songs and mix versions (e.g., WAV, MP3, FLAC, AIFF).
• Project metadata, track titles, version notes, and producer commentary.
• Songwriting and production credits (contributor names and roles).
• Timestamped feedback, notes, and listening room markers.

Usage and Technical Data

When you access MixPass, our servers log standard technical information including browser type, operating system, referring URLs, and device identifiers. We use this data to maintain service performance, ensure security, and resolve technical issues.

2. How We Use Your Information

We use your information exclusively to deliver, maintain, and protect the MixPass service, including:

• Creating and managing your user account and authentication sessions.
• Hosting and organizing your private listening rooms and audio mix passes.
• Enabling playback and private streaming of your uploaded audio for you and your designated collaborators.
• Sending essential account notifications, such as password reset links or security alerts.

We do not sell, rent, trade, or monetize your personal information or your uploaded audio files. We do not use your audio files or personal content to train machine learning or artificial intelligence models.

3. Google User Data & Limited Use Disclosure

MixPass accesses Google user data via Google OAuth strictly to authenticate your account and display your profile name and email address within the application interface.

We do not share your Google user data with third-party advertisers or external marketing networks.

4. Data Storage and Security

We employ defense-in-depth security measures to protect your work and personal details:

• Database Security: Account credentials, room data, credits, and version history are stored in PostgreSQL hosted on Supabase, protected by Row Level Security (RLS) policies ensuring users can only access their authorized rooms.
• Audio Storage: Uploaded audio files are stored in private, access-controlled object storage. Playback links are time-limited signed URLs that expire automatically.
• Encryption: All communication between your browser and our servers is encrypted in transit using TLS 1.3. Stored assets and database backups are encrypted at rest with AES-256.

5. Collaborator and Guest Privacy

MixPass allows room owners to share rooms with collaborators. Invited guests can listen and leave feedback without creating a permanent account. Guest session names and comments are tied specifically to the room to which they were invited and are visible only to participants authorized in that room.

6. Data Retention and Account Deletion

We retain your account data and audio versions for as long as your account remains active. You maintain full ownership of your creative works. You may delete individual mix versions or rooms at any time from your account workspace.

To request complete deletion of your account and all associated audio files, credits, and personal information, contact us at privacy@mixpass.co or bradleyjsimons@velveteen.fm. We will process your deletion request within 30 days.

7. Your Privacy Rights

Depending on your jurisdiction, you have the right to:

• Request access to the personal data we hold about you.
• Request correction or updating of inaccurate personal data.
• Request erasure of your personal data and uploaded files.
• Withdraw consent for optional data processing at any time.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact:

Velveteen Technologies Inc.
Email: privacy@mixpass.co or bradleyjsimons@velveteen.fm
British Columbia, Canada