Privacy Policy

1. Introduction

VIXSOUND is operated by Vesta Creative Innovations LLC ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the VIXSOUND desktop application, website (vixsound.com), and related services (collectively, the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and password (stored securely and hashed by our authentication provider, Supabase). If you subscribe to a paid plan, payment information is processed directly by Stripe — we never see or store your full credit card number.

Usage Data

We track credit usage (number of AI chat messages, stem separations, audio analyses, and MIDI transcriptions) to enforce plan limits and provide your usage dashboard. We record the type and cost of each action but not its content.

AI Chat Messages

When you send a message to the AI assistant, your text prompt is transmitted to our API server and forwarded to Anthropic (our AI provider) for processing. We do not store the content of your conversations on our servers. Anthropic processes these requests under their API terms, which prohibit using API inputs and outputs to train their models.

Audio, MIDI & Project Files

Audio processing — including stem separation, audio analysis, and audio-to-MIDI transcription — runs entirely on your local machine. Your audio files, MIDI files, DAW project files, and stems are never uploaded to our servers. We have no access to your music content.

Product Analytics

We use PostHog to understand how users interact with the website and app so we can improve the product. PostHog records events (page views, button clicks, signup, checkout, subscription changes, app downloads), basic device and browser information, an identifier stored in your browser, and — on the website — session replays with all input fields masked. Once you sign in or create an account, we associate your account email with that identifier so we can measure conversion and provide support. We do not send your audio, MIDI, project files, or chat message content to PostHog.

On the website we also load HubSpot for basic visitor analytics and customer-relationship management. On the desktop app, analytics are limited to PostHog. Website analytics and their cookies (both PostHog and HubSpot) only load after you accept in our cookie consent banner; if you decline, no analytics events, session replays, or non-essential cookies are set.

3. What We Do Not Do

To be clear about what we will never do with your data:

• We never upload, access, or store your audio files, stems, or project files
• We never use your data to train AI models — not ours, and our AI provider (Anthropic) does not train on API data either
• We never store the content of your conversations — chat history is kept locally on your device
• We never sell or rent your personal information, and we do not share it with advertising networks
• We never use cross-site advertising cookies or ad-targeting trackers. The only analytics and CRM tools we use are PostHog (product analytics, served first-party from our own domain) and HubSpot (basic site analytics and CRM), and on the website both load only after you give consent

4. How We Use Your Information

• Provide and maintain the VIXSOUND service
• Authenticate your account and manage sessions
• Process subscriptions and payments via Stripe
• Track credit usage and enforce plan limits
• Send transactional emails (welcome, password reset, billing notifications)
• Improve the product, diagnose issues, and fix bugs
• Respond to support requests

Legal bases (EEA / UK)

If you are in the EEA or UK, we process your personal data under the following legal bases (GDPR Art. 6): performance of a contract (providing the Service, authentication, billing, transactional emails); consent (website analytics and cookies via PostHog and HubSpot, which you can withdraw at any time); and our legitimate interests (securing the Service, preventing abuse, and basic diagnostics), balanced against your rights. Where we rely on consent, withdrawing it does not affect processing carried out before withdrawal.

5. Third-Party Services

We use the following third-party services to operate VIXSOUND:

• Stripe — Payment processing and subscription management. Stripe receives your payment details directly; we never handle your card number. Stripe Privacy Policy
• Supabase — Authentication and database hosting. Stores your account profile and credit usage records. Supabase Privacy Policy
• Anthropic — AI language model for chat functionality. Receives your text prompts for processing. Anthropic does not use API data to train models. Anthropic Privacy Policy
• Vercel — Website and API hosting. Vercel Privacy Policy
• Resend — Transactional email delivery. Receives your email address to send service-related emails. Resend Privacy Policy
• PostHog — Product analytics and (website only, consent-gated) session replay. Receives usage events and (after sign-in) your account email to measure conversion and improve the product. Served through a first-party reverse proxy on vixsound.com. PostHog Privacy Policy
• HubSpot — Website analytics and customer-relationship management (consent-gated, website only). Receives basic visitor analytics and, if you contact us or sign up, your contact details. HubSpot Privacy Policy

6. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), hashed passwords, Row-Level Security on our database, and JWT-based authentication. All API communication between the desktop app and our servers is encrypted in transit. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account information for as long as your account is active. Conversation history is stored locally on your device and is not transmitted to or stored on our servers. You can delete your conversation history at any time from within the app. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., billing records).

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing of your data
• Withdraw consent for marketing communications

To exercise any of these rights, contact us at hello@vixsound.com. We will respond within 30 days.

9. Cookies & Local Storage

Essential cookies are used for authentication and session management and are always active because the Service cannot work without them.

Analytics cookies and local storage— set by PostHog (first-party, served through a reverse proxy on vixsound.com) and HubSpot — are only set after you accept in our cookie consent banner. Until then, PostHog is opted out (no events, session replay, cookies, or local storage) and the HubSpot tracker is not loaded at all. We store your choice in a first-party vixsound_consent cookie so we don't ask again on every visit.

We do not use cross-site advertising cookies or ad-targeting trackers. You can change your choice at any time by clearing the vixsound_consent cookie (which re-shows the banner), enabling a global privacy control in your browser, or emailing us at hello@vixsound.com.

10. International Data Transfers

VIXSOUND is operated from the United States. If you are located in the European Economic Area, the United Kingdom, or Switzerland, your information may be transferred to and processed in the United States or other countries where our service providers operate. Where required, these transfers rely on the European Commission's Standard Contractual Clauses (and the UK Addendum), the providers' certification under the EU-US / UK / Swiss Data Privacy Framework where applicable, or another lawful transfer mechanism, so that your data receives an adequate level of protection. You can request more information about the safeguards we use by emailing hello@vixsound.com.

11. Children's Privacy

VIXSOUND is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and where appropriate, notifying you by email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at hello@vixsound.com.

Vesta Creative Innovations LLC
hello@vixsound.com