Privacy Policy
Last updated: October 2026
The short version
- We collect only what we need: your email for authentication, usage data for billing, and anonymised analytics to improve the product. We keep the audio of each scan, privately, so you can play the mix back against its tracklist. Delete the scan and the audio goes with it.
- We use Stripe for payments and never see or store your card details. Analytics are collected via PostHog (anonymised) and error reports via Sentry.
- Small anonymous audio snippets (~10 seconds) are sent to ACRCloud and AudD for track recognition. No user identifiers are attached to these snippets.
- Your data is hosted on secure cloud infrastructure. All data is encrypted in transit and at rest.
- You can request access to, correction of, or deletion of your data at any time by emailing hello@scanamix.com.
1. Who We Are
Scanamix is operated from Western Australia, Australia. You can reach us at hello@scanamix.com. Our website is scanamix.com.
For the purposes of applicable data protection laws, the operator of Scanamix is the data controller responsible for your personal data.
2. What Data We Collect
2.1 Account Data
When you create an account, we collect your email address and a hashed password. We do not store passwords in plain text.
2.2 Usage Data
We record data about your use of the Service, including: scans performed, minutes consumed, subscription tier, timestamps of scans, and scan results (track names, artists, timestamps, confidence scores).
2.3 Payment Data
Payments are processed by Stripe. We store your Stripe customer ID, subscription tier, and billing interval. Scanamix does not store, process, or have access to your credit card number, CVV, or other payment card details. These are handled entirely by Stripe in accordance with PCI DSS standards.
2.4 Analytics Data
We collect anonymised product analytics via PostHog, including page views, feature usage events, and general interaction patterns. This data is used to improve the Service and understand usage trends.
2.5 Error Data
We use Sentry for error monitoring. Crash reports may include your user ID, the page URL where the error occurred, browser information, and technical stack traces. This data is used solely for diagnosing and fixing bugs.
2.6 Support Data
If you submit a bug report or support request, we collect the content you provide (description, screenshots, contact details) to respond to and resolve your inquiry.
3. How We Use Your Data
We use your personal data for the following purposes:
- Provide the Service: authenticate your account, process scans, track minutes usage, and deliver tracklist results.
- Process payments: manage subscriptions, process top-up purchases, and maintain billing records.
- Improve the product: analyse anonymised usage patterns to identify bugs, optimise performance, and develop new features.
- Respond to support: address your bug reports, feature requests, and other inquiries.
- Ensure security: detect and prevent abuse, enforce rate limits, and protect the integrity of the Service.
- Legal compliance: comply with applicable laws, regulations, and tax obligations.
4. Audio Data — Special Notice
4.1 What We Keep
When you scan a mix, we keep a copy of its audio alongside the tracklist so you can play the mix back and check each identified track in place. This applies to uploaded files (MP3, WAV, FLAC) and to audio downloaded from a YouTube or SoundCloud URL.
4.2 Who Can Access It
Stored audio is encrypted at rest and held in private storage. It is played back only to the account that submitted the scan, through short-lived links. We do not publish, share, or redistribute it.
4.3 Deleting Audio
Deleting a scan deletes its audio. Backup copies held by our storage provider are removed within 7 days. To have all your audio deleted, delete your scans or email hello@scanamix.com.
4.4 What We Don't Do
We do not build audio databases, fingerprint libraries, or training datasets from user-submitted audio.
4.5 Recognition Service Snippets
During processing, the audio is cut into short snippets of approximately 10 seconds, which are sent to our third-party recognition partners (ACRCloud, with AudD as a fallback) for fingerprint matching. These snippets contain no user identifiers, and the working copies are deleted within 7 days.
4.6 Derived Output
Each scan also produces a tracklist: track names, artist names, timestamps, and confidence scores. This is stored in your scan history.
5. Third-Party Services
We rely on the following third-party services to operate Scanamix:
| Service | Purpose | Data Shared |
|---|---|---|
| AWS | Cloud infrastructure, authentication, data storage | Account data, usage data, stored scan audio. |
| Stripe | Payment processing | Email, subscription tier, billing interval. |
| ACRCloud | Audio fingerprint recognition | Anonymous ~10-second audio snippets only. |
| AudD | Audio fingerprint recognition (fallback) | Anonymous ~10-second audio snippets only. |
| PostHog | Product analytics | Anonymised page views and feature events. |
| Sentry | Error monitoring | Crash reports (may include user ID, page URL). |
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (email, profile) | Retained while account is active. Deleted within 30 days of account deletion request. |
| Scan history (tracklist results) | Retained while account is active. Deleted with account on request. |
| Scan audio | Retained with the scan so it can be played back. Deleted when you delete the scan; backup copies removed within 7 days. |
| Audio snippets (processing) | Deleted within 7 days of the scan. |
| Payment records | 7 years (required by Australian tax law). |
| Analytics events | 24 months, then purged. |
| Error reports | 90 days. |
7. Your Rights
For EU/EEA Users (GDPR)
If you are located in the European Union or European Economic Area, you have the following rights: right of access, right to rectification, right to erasure, right to data portability, right to object, and right to withdraw consent. To exercise any of these rights, email hello@scanamix.com. We will respond within 30 days.
For Australian Users (Privacy Act 1988)
If you are located in Australia, you have the right to access and request correction of your personal information, and to make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Cookies & Analytics
We use essential cookies (required for authentication) and analytics cookies (PostHog, anonymised). We do not use advertising cookies or sell your data to advertisers.
9. Data Security
All data is encrypted in transit using TLS and encrypted at rest. Payment data is handled entirely by Stripe and never stored on Scanamix servers.
10. Children's Privacy
The Service is not directed at children under the age of 13. Contact us at hello@scanamix.com if you believe we have collected data from a child under 13.
11. Changes to This Policy
We will notify registered users of material changes via email at least 14 days before the changes take effect.
12. Contact
Email: hello@scanamix.com
Website: scanamix.com