Privacy Policy | Mixtape Plug

1. Scope

This Privacy Policy applies to Mixtape Plug web pages, logged-in dashboard features, creator tools, support channels, artist profile interactions, challenge submissions, and plan or booking workflows that link to or reference this policy. It also applies to operational records generated when you interact with those features, such as account records, session records, subscription confirmations, creator-tool state, support tickets, and cover-credit transactions.

This Privacy Policy does not control third-party sites, services, or interfaces that Mixtape Plug links to or relies on, including Google identity services, Stripe-hosted checkout pages, upstream AI model providers, or third-party social destinations. Those third parties maintain their own policies and terms.

2. Information We Collect

Depending on how you use the platform, we may collect the following categories of information:

Account and login information, including email address, display name, password hash, username, artist name, city, state, country, account creation date, and last login date.
Google sign-in information when you choose Google login, including Google account identifier, verified email status, display name, and profile image URL returned by Google.
Plan, membership, and transaction information, including selected plan, active plan state, membership cancellation status, checkout session references, payment status confirmations, and plan-related metadata.
Creator-tool content, including prompts, lyrics requests, track-generation requests, cover prompts, uploaded reference images, generated cover images, generation metadata, and creator-session state.
Challenge submission information, including song title, artist name, uploaded MP3 file, stored file path, file size, MIME metadata, challenge status, and submission timestamps.
Artist engagement data, including follow/unfollow actions and mailing-list signup information such as subscriber name, subscriber email, artist slug, status, and timestamps.
Support and contact data, including your name, email, issue category, message body, support ticket number, message status, and email-delivery status.
Booking-related information, including selected artist, event date, rate, platform fee, total amount, booking status, buyer account association, and booking payment references where applicable.
Merchandise and payout information where relevant, including product configuration, connected merch workflow status, vendor order references, payout status, hold status, and limited payout-verification or tax information needed to release funds.
Stage One and royalty-accounting records where relevant, including selected Stage One plan, signed-agreement status, royalty or booking-share settings, accounting notes, settlement records, and related rights-administration records.
Operational and security information, which may include authentication session identifiers, timestamps, request metadata, and hosting or infrastructure log data used to maintain availability, prevent abuse, and troubleshoot failures.

3. Sources of Information

We collect information from several sources:

Directly from you when you create an account, log in, edit your profile, submit forms, upload files, send support messages, generate covers, or submit tracks to a challenge.
From third-party identity or payment providers when you use Google sign-in or return from a Stripe checkout flow.
From upstream creator-tool providers when Mixtape Plug sends prompts or reference assets to external systems used for music or cover generation and receives outputs or status data back.
Automatically from session-management and hosting systems when you load pages, authenticate, navigate the logged-in dashboard, or interact with protected endpoints.

4. How We Use Information

We use information for business and operational purposes that are tied to the service you are requesting. Those purposes include:

Creating and maintaining accounts, authenticating users, preserving active sessions, and securing access to protected tools.
Letting you manage public-facing artist identity fields such as display name, username, artist name, and location.
Providing creator workflows, including lyrics drafting, music-generation orchestration, cover generation, cover-edit history, cover downloads, and credit accounting.
Confirming paid plan checkouts, provisioning plan-based feature access, and reflecting subscription-related state in the account and dashboard experience.
Operating challenge submissions, storing uploaded tracks for review, tracking leaderboard eligibility, and enforcing challenge rules.
Running artist engagement features such as follows, artist mailing-list signup capture, and profile interactions.
Responding to support requests, investigating product issues, preventing abuse, and maintaining service quality.
Facilitating artist booking requests, booking availability checks, and payment handoff where those features are offered.
Operating merchandise workflows, coordinating with third-party fulfillment or payout vendors, calculating platform shares, applying hold periods, and reviewing merch-related disputes, refunds, or fraud signals.
Administering Stage One agreements, royalty treatment, booking-share treatment, settlement review, and rights-related operational workflows where those programs are active.
Creating internal records for accounting, usage tracking, fraud prevention, dispute review, abuse mitigation, policy enforcement, and legal compliance.

When required by law, we rely on one or more recognized legal bases for these activities, such as performing a contract with you, complying with law, pursuing legitimate business interests in running and securing the platform, or acting on your consent where consent is the appropriate legal basis.

5. AI and Creator Tool Processing

Mixtape Plug includes creator workflows that may route prompts, text, images, or other user-supplied material to third-party model providers. At the time of this policy update, the platform uses Suno-connected music workflows and Gemini-connected cover workflows. When you use those tools, you instruct Mixtape Plug to transmit relevant prompt and asset data to those providers so the requested generation, editing, or response can occur.

This means uploaded cover references, current cover images, prompt text, and related generation context may be processed outside Mixtape Plug by the model provider that powers the requested feature. Music-generation and lyric-drafting features may also involve upstream processing by third-party systems. Mixtape Plug uses those providers as service components, but their systems and retention rules are not fully controlled by Mixtape Plug.

You should not upload confidential, secret, or rights-restricted material into creator tools unless you are willing to authorize that processing path and have the legal right to do so. You remain responsible for reviewing generated outputs before publication, distribution, sale, challenge submission, or public use.

6. Sharing and Disclosure

We do not disclose personal information casually. We disclose information only in the following categories of circumstances:

Service providers and infrastructure vendors that help us host, secure, email, authenticate, generate content, or process payments.
Payment and billing partners, including Stripe, when required to create, verify, or reconcile plan or booking transactions.
Identity providers, including Google, when you initiate or complete third-party sign-in.
Creator-tool providers, including model or generation providers, when your requested output requires upstream processing.
Fulfillment, merchandising, payout, distribution, or settlement partners where disclosure is required to produce items, process artist payouts, administer rights workflows, or reconcile artist-facing commercial activity.
Other users or public audiences when you intentionally make content public, such as artist profile information, challenge-related public content, or publicly visible artist materials.
Government authorities, regulators, counterparties, or professional advisers when disclosure is reasonably necessary to comply with law, respond to legal process, investigate fraud, enforce platform rules, or protect rights, safety, and property.
A buyer, investor, successor, or affiliate in connection with a merger, financing, sale, restructuring, or asset transfer involving Mixtape Plug, subject to ordinary confidentiality and transition safeguards.

Mixtape Plug does not currently represent that it sells personal information for money, and it does not presently position itself as a behavioral-ad-network platform. If that changes, this policy and any required consumer-rights disclosures should be updated before the change becomes effective.

7. Cookies and Sessions

Mixtape Plug uses session cookies and similar session-state mechanisms to keep you logged in, protect authenticated areas, route post-login flows, and maintain account state while you use the site. The current session configuration is designed to be session-only, path-scoped to the site, and configured with HttpOnly and SameSite=Lax controls, with secure transport where HTTPS is active.

Some creator or admin tools on the site also maintain their own authenticated session cookies for the same basic reasons. Hosting infrastructure and third-party providers may separately use cookies or request tokens when you visit their services or embedded interfaces.

8. Retention

We retain information for as long as reasonably necessary to operate the service, enforce platform rules, preserve records, and satisfy legal obligations. In practice:

Account records are generally retained until the account is closed, plus a reasonable period afterward for audit, abuse prevention, legal compliance, and dispute handling.
When you close an account, Mixtape Plug currently marks the account as closed, cancels local membership state, clears certain identifiers such as Google account linkage, and rewrites the stored email to an internal closed-account alias rather than immediately purging every related database row.
Support tickets may be retained for customer-service continuity, security review, training, legal defense, and product troubleshooting.
Cover-generation assets, references, prompts, generated images, metadata, and creator-session history may be retained in user workspace storage until removed through operational cleanup, account closure handling, or future deletion tooling.
Challenge submissions and related audio files may be retained for eligibility review, auditability, rankings review, anti-fraud analysis, or historical contest records.
Credit-cycle and transaction records may be retained for accounting, feature administration, fraud review, and plan enforcement.
Merchandise, payout, royalty, booking-share, Stage One agreement, and settlement records may be retained for accounting, audit, legal, tax, contractual, fraud-prevention, and dispute-resolution purposes even after a feature or account is no longer active.

9. Your Rights and Choices

You may have the following choices, depending on your location and the nature of your relationship with Mixtape Plug:

Access and update your account information through the account settings page for editable fields such as email, display name, artist name, username, and location.
Change your password if you use password-based login.
Cancel local membership status from your account page, subject to any separate recurring billing obligations that may still exist through Stripe or another payment processor.
Close your account from the account page.
Request deletion, correction, export, or manual review by contacting Mixtape Plug through Support or info@mixtapeplug.com.
Request removal from artist mailing-list records by contacting support if a self-service unsubscribe path is not yet available in the relevant campaign or feature.

We may need to verify your identity before completing privacy requests, and we may deny or limit requests where a lawful exception applies, where the request is manifestly unfounded or excessive, or where we need to retain information to comply with law, resolve disputes, detect security issues, or enforce agreements.

If you are part of a Stage One plan, merch payout workflow, or booking payout workflow, some commercial and accounting records may need to be retained even if you request deletion or account closure because Mixtape Plug may still need those records for contract administration, audits, tax compliance, fraud review, or legal defense.

10. California Notices

If California privacy law applies to you, you may have rights to know, access, correct, delete, and limit certain processing of personal information, subject to statutory exceptions. You may also have the right not to be discriminated against for exercising applicable rights.

Over the last 12 months, Mixtape Plug has collected categories of information that may include identifiers, account credentials, internet or network activity, commercial information, profile information, uploaded content, support communications, booking-related information, subscription records, and inferences reasonably drawn from your use of creator tools or other platform features. Mixtape Plug does not currently describe its platform as one that sells personal information for money.

California privacy requests can be submitted through Support or by emailing info@mixtapeplug.com. If you use an authorized agent, Mixtape Plug may require proof of that authorization and may still request verification directly from you when permitted by law.

11. Security

Mixtape Plug uses administrative, technical, and organizational safeguards that are designed to reduce unauthorized access, misuse, alteration, or loss of data. Current controls include password hashing for password-based accounts, session-cookie protections, database-backed access controls, scoped file storage paths for creator assets, and provider-level authentication for services such as Google, Stripe, and upstream AI tooling.

No online service can honestly promise absolute security. You are responsible for safeguarding your credentials, using strong passwords, and logging out of devices you do not control. If you believe your account or submitted content has been compromised, contact Mixtape Plug immediately.

12. Children

Mixtape Plug is not directed to children under 13, and Mixtape Plug does not knowingly collect personal information from children under 13 through its public-facing workflows. If you believe a child has provided personal information to Mixtape Plug without appropriate authorization, contact Mixtape Plug so the issue can be reviewed.

13. International Use

Mixtape Plug is operated in the United States and may use service providers that process data in the United States or in other jurisdictions. If you access the platform from outside the United States, you understand that your information may be transferred to and processed in countries that may not provide the same level of legal protection as your home jurisdiction.

14. Changes to This Policy

Mixtape Plug may update this Privacy Policy from time to time as the platform evolves, new features launch, laws change, or operational practices are refined. Updated versions will be posted on this page with a revised “Last updated” date. Material changes should be reflected before or when the underlying practice changes.

15. Contact

Privacy, data, or policy questions can be directed to Mixtape Plug through /support or by email at info@mixtapeplug.com. If your request relates to account closure, mailing-list removal, challenge submissions, or creator content deletion, include enough information for Mixtape Plug to identify the relevant account or content safely.