Legal

Privacy Policy

Last updated: August 9, 2026

Introduction

The purpose of this privacy policy is to inform users of the easymix platform (hereinafter "the Service") in a comprehensive, transparent, and detailed manner of how their personal data is collected, processed, stored, used, and protected, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended French Data Protection Act (loi Informatique et Libertés).

1. Identity of the data controller

The data controller is easymix, who can be contacted at: support@easymix.io For any question relating to your personal data, please contact us at this address. We undertake to respond within a maximum of one month from receipt of your request.

2. Data collected

2.1 Identification data

Email address
Login credentials
First and last name (if provided)

2.2 Technical data

IP address
Browser type and version
Operating system
Activity and access logs
Browsing and session data

2.3 Usage data

Actions performed on the platform
Mix session history
Requests and instructions sent to the AI
Usage settings and preferences
Interactions with features

2.4 Content data

Audio files added by the user
Audio files generated by the Service
These files are retained for 30 days after the last active session and are then automatically deleted

2.5 Payment data

Transaction-related information (amount, date, status)
Processing exclusively via Stripe. easymix does not directly store any banking data

2.6 Analytics and performance data

Data collected via Google Analytics 4 (ID: G-DDZ61NY6H7)
Product data, errors, and masked sessions collected via PostHog Europe after consent
Sign-up, checkout initiation, and purchase events transmitted to TikTok with your consent
These tools use cookies and collect anonymized browsing data

3. Purposes and legal bases

Purpose	Legal basis
Provision and operation of the Service	Performance of the contract
Processing of audio files	Performance of the contract
User account management	Performance of the contract
Payment and subscription management	Performance of the contract / Legal obligation
Customer support	Performance of the contract / Legitimate interest
Statistical analysis and improvement of the Service	Legitimate interest
Behavioral analysis and advertising measurement (GA4, Clarity, TikTok)	Consent
Fraud prevention	Legitimate interest
Compliance with legal obligations	Legal obligation
Sending Service-related communications	Legitimate interest

4. Data retention

Account data: lifetime of the account + 3 years after closure (legal obligations)
Payment data: 10 years (accounting and tax obligations)
Added and generated audio files: 30 days after the last active session, followed by automatic deletion
Logs and technical data: 12 months
Tracker data: 13 months maximum (PostHog, GA4, and TikTok)

5. Cookies

5.1 Cookies used

easymix uses the following cookies and trackers: Analytics and advertising cookies: - Google Analytics 4: audience measurement, browsing behavior, traffic sources. Data transferred to Google LLC (United States). - PostHog Europe: product analytics, errors, and sessions with input fields masked. Tracking is disabled prior to consent. - TikTok Pixel and Events API: measurement of sign-ups, checkout initiations, and purchases attributed to TikTok advertisements. Tracking is disabled prior to consent. Functional cookies: - Session cookies necessary for the Service to function (authentication, preferences)

5.2 Cookie management

Users may configure their browser to refuse all or some cookies. Refusing analytics cookies does not affect access to the Service. Refusing functional cookies may impair certain features.

6. Storage and security

Data is hosted on secure servers via Supabase. The following security measures are in place:

Encryption of data in transit (HTTPS/TLS)
Encryption of data at rest
Restricted access to data (principle of least privilege)
Access monitoring and logging
Secure authentication

As no system is completely infallible, easymix cannot guarantee absolute security but undertakes to implement the best available practices.

7. Data sharing

easymix never sells your personal data to third parties. Data may be shared only with:

Technical service providers: Supabase (hosting/database), Stripe (payment), Replicate (AI audio processing), Google (analytics), Microsoft (analytics), TikTok (advertising measurement), Brevo (emails)
Competent authorities: where required by a legal or judicial obligation
Protection of rights: where necessary to protect the rights of easymix

Each service provider is subject to contractual confidentiality obligations.

8. International transfers

Certain service providers (Google, Microsoft, Replicate, TikTok) may process data outside the European Economic Area. These transfers are governed by the applicable safeguards, in particular the Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Article 46 GDPR.

9. User rights

In accordance with the GDPR, you have the following rights:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate data
Right to erasure: request the deletion of your data
Right to restriction: restrict the processing of your data
Right to object: object to processing based on legitimate interest
Right to data portability: receive your data in a structured format
Right to withdraw consent: at any time for processing based on consent

To exercise your rights: send your request to support@easymix.io, specifying your identity. We will respond within a maximum of one month.

10. Right to lodge a complaint with the CNIL

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

Website: https://www.cnil.fr
Address: 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07
Telephone: 01 53 73 22 22

11. Changes to this policy

easymix reserves the right to amend this policy at any time. In the event of a substantial change, users will be informed by email or in-app notification at least 15 days before the changes take effect.

12. Contact

For any question relating to this policy or to your personal data: support@easymix.io