Privacy Policy
Last updated: April 2026
The short version
- We collect only what we need: your email for authentication, usage data for billing, and anonymised analytics to improve the product. We never store your audio — it is deleted the moment your scan completes.
- We use Stripe for payments and never see or store your card details. Analytics are collected via PostHog (anonymised) and error reports via Sentry.
- Small anonymous audio snippets (~10 seconds) are sent to ACRCloud for track recognition. No user identifiers are attached to these snippets.
- Your data is hosted on secure cloud infrastructure. All data is encrypted in transit and at rest.
- You can request access to, correction of, or deletion of your data at any time by emailing hello@scanamix.com.
1. Who We Are
Scanamix is operated from Western Australia, Australia. You can reach us at hello@scanamix.com. Our website is scanamix.com.
For the purposes of applicable data protection laws, the operator of Scanamix is the data controller responsible for your personal data.
2. What Data We Collect
2.1 Account Data
When you create an account, we collect your email address and a hashed password. We do not store passwords in plain text.
2.2 Usage Data
We record data about your use of the Service, including: scans performed, minutes consumed, subscription tier, timestamps of scans, and scan results (track names, artists, timestamps, confidence scores).
2.3 Payment Data
Payments are processed by Stripe. We store your Stripe customer ID, subscription tier, and billing interval. Scanamix does not store, process, or have access to your credit card number, CVV, or other payment card details. These are handled entirely by Stripe in accordance with PCI DSS standards.
2.4 Analytics Data
We collect anonymised product analytics via PostHog, including page views, feature usage events, and general interaction patterns. This data is used to improve the Service and understand usage trends.
2.5 Error Data
We use Sentry for error monitoring. Crash reports may include your user ID, the page URL where the error occurred, browser information, and technical stack traces. This data is used solely for diagnosing and fixing bugs.
2.6 Support Data
If you submit a bug report or support request, we collect the content you provide (description, screenshots, contact details) to respond to and resolve your inquiry.
3. How We Use Your Data
We use your personal data for the following purposes:
- Provide the Service: authenticate your account, process scans, track minutes usage, and deliver tracklist results.
- Process payments: manage subscriptions, process top-up purchases, and maintain billing records.
- Improve the product: analyse anonymised usage patterns to identify bugs, optimise performance, and develop new features.
- Respond to support: address your bug reports, feature requests, and other inquiries.
- Ensure security: detect and prevent abuse, enforce rate limits, and protect the integrity of the Service.
- Legal compliance: comply with applicable laws, regulations, and tax obligations.
4. Audio Data — Special Notice
4.1 Transient Processing Only
All audio submitted to Scanamix is handled transiently. Audio data exists in our systems only for the duration required to complete the identification analysis. No persistent copies of audio data are made at any point during this process.
4.2 File Uploads
When you upload an MP3, WAV, or FLAC file, the file is transmitted to our servers, analysed, and deleted immediately upon job completion. No copies are retained.
4.3 URL Submissions
When you submit a YouTube or SoundCloud URL, the audio is temporarily streamed or downloaded for analysis and deleted immediately after processing. We do not store, redistribute, or cache any audio from third-party platforms.
4.4 Zero Retention
Scanamix maintains zero audio retention beyond active processing. We do not build audio databases, fingerprint libraries, or training datasets from user-submitted audio.
4.5 Recognition Service Snippets
During processing, short anonymous audio snippets of approximately 10 seconds are sent to our third-party recognition partner (ACRCloud) for fingerprint matching. These snippets contain no user identifiers.
4.6 Derived Output
The only data retained from a scan is the derived output: track names, artist names, timestamps, and confidence scores. This tracklist data is stored in your scan history.
5. Third-Party Services
We rely on the following third-party services to operate Scanamix:
| Service | Purpose | Data Shared |
|---|---|---|
| AWS | Cloud infrastructure, authentication, data storage | Account data, usage data. |
| Stripe | Payment processing | Email, subscription tier, billing interval. |
| ACRCloud | Audio fingerprint recognition | Anonymous ~10-second audio snippets only. |
| PostHog | Product analytics | Anonymised page views and feature events. |
| Sentry | Error monitoring | Crash reports (may include user ID, page URL). |
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (email, profile) | Retained while account is active. Deleted within 30 days of account deletion request. |
| Scan history (tracklist results) | Retained while account is active. Deleted with account on request. |
| Audio files / streams | Zero retention — deleted immediately on job completion. |
| Payment records | 7 years (required by Australian tax law). |
| Analytics events | 24 months, then purged. |
| Error reports | 90 days. |
7. Your Rights
For EU/EEA Users (GDPR)
If you are located in the European Union or European Economic Area, you have the following rights: right of access, right to rectification, right to erasure, right to data portability, right to object, and right to withdraw consent. To exercise any of these rights, email hello@scanamix.com. We will respond within 30 days.
For Australian Users (Privacy Act 1988)
If you are located in Australia, you have the right to access and request correction of your personal information, and to make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Cookies & Analytics
We use essential cookies (required for authentication) and analytics cookies (PostHog, anonymised). We do not use advertising cookies or sell your data to advertisers.
9. Data Security
All data is encrypted in transit using TLS and encrypted at rest. Payment data is handled entirely by Stripe and never stored on Scanamix servers.
10. Children's Privacy
The Service is not directed at children under the age of 13. Contact us at hello@scanamix.com if you believe we have collected data from a child under 13.
11. Changes to This Policy
We will notify registered users of material changes via email at least 14 days before the changes take effect.
12. Contact
Email: hello@scanamix.com
Website: scanamix.com