How Midium collects, uses and shares personal information when you use the Service. In short: we use your audio only to give you your parts, files are deleted after a few days, and we never sell your data.
01Who we are
This Privacy Policy explains how [Company legal name], [Registered address] (“Midium,” “we,” or “us”) collects, uses, and discloses personal information when you use our website, web app, downloadable applications and related services (the “Services”). Midium is the data controller responsible for your personal information. You can contact us at [contact email].
02Personal information we collect
We may collect a variety of personal information from or about you or your devices from various sources, as described below.
A. Personal information you provide to us
Account information. You can use the Services without an account. If you sign in, we ask for your email address and send you a one-time code and a link to confirm it.
Communications. If you contact us directly, we may receive personal information about you, such as your name, email address, the contents of a message or attachments that you may send to us, and other information you choose to provide.
User Content. When you use our Services, you upload audio files (“User Content”), and the Services generate separated audio parts, MIDI files, sheet music and other results from them (“Output”). If your User Content includes personal information, such as a voice, we process that information to provide the Services. If you confirm that you hold the rights to the audio you upload, we keep a record of that confirmation, with the time and the version of the Terms you agreed to.
B. Personal information we collect when you use our Services
Location information. When you use our Services, we may receive your general location information (for example, your IP address may indicate your general geographic region).
Device information. We receive information about the device and software you use to access our Services, including IP address, web browser type, operating system version, device model, screen size, and language.
Usage information. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, such as the pages you view, the buttons you click, features you use, dates and times of your visits, and actions such as uploading a track, playing a part or downloading a file. We may also record sessions on our website to see where the Services are hard to use; text you type into fields is hidden in these recordings.
Information from cookies and similar technologies. We and our analytics provider collect information using cookies and browser storage, as described in Cookies below.
03How we use the personal information we collect
We use the personal information we collect:
- To provide, maintain, improve, and enhance our Services, including separating and transcribing the audio you upload;
- To understand and analyze how you use our Services and develop new products, services, features, and functionality;
- [decide: keep or remove “To train, develop, and improve our artificial intelligence, machine learning, and models”];
- To communicate with you, send you sign-in codes, provide you with updates and other information relating to our Services, respond to comments and questions, and otherwise provide support;
- To generate anonymized or aggregated data for any lawful purposes;
- To find and prevent fraud and abuse, and respond to trust and safety issues that may arise;
- For compliance purposes, including enforcing our Terms of Use or other legal rights, handling copyright complaints, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
- For other purposes for which we provide specific notice at the time the information is collected.
04Legal bases for processing (EEA, UK and Switzerland)
If you are located in the European Economic Area, the United Kingdom or Switzerland, we process your personal data only where we have a valid legal basis under the GDPR, the UK GDPR or the Swiss FADP, as applicable:
- Contract: to provide the Services you ask for, such as converting your audio and signing you in;
- Legitimate interests: to keep the Services secure, prevent abuse, understand how they are used and improve them, where our interests do not override your rights and freedoms;
- Consent: where we ask for it, for example for optional analytics or marketing emails, which you can withdraw at any time; and
- Legal obligation: to comply with the law, including handling copyright complaints.
05Retention
Uploaded audio and Output are deleted automatically [3 days] after upload. Your account information is kept while your account exists, and deleted when you ask us to close it. Records of your rights confirmations and of copyright complaints are kept as long as needed to deal with claims. Server logs are kept for up to [90 days]. We may retain aggregated or anonymized usage data for longer periods.
When content is deleted, we endeavor to reasonably remove copies from our production systems, subject to legal holds, security, fraud prevention, dispute resolution, and technical constraints such as back-ups kept for a limited time.
06How we disclose the personal information we collect
Vendors and service providers. We disclose information to vendors and service providers that help us operate the Services, under contracts that protect it: cloud hosting and audio processing (Google Cloud); content delivery and security (Cloudflare); email delivery (Resend); and product analytics and session recordings (PostHog).
Partners and affiliates. We may disclose information to our current or future affiliates for any of the purposes described in this Privacy Policy.
As required by law and similar disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to comply with law enforcement requests and legal process, such as a court order or subpoena, respond to your requests, or protect your, our, or others’ rights, property, or safety.
Merger, sale, or other asset transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.
Consent. We may also disclose your information with your permission.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
07International transfers
Our service providers may process your information in countries other than the one where you live, including the United States, which may have data protection laws that are different from those of your country. When we transfer personal data from the EEA, the UK or Switzerland to countries that have not been recognized as providing an adequate level of data protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and, for UK transfers, the UK International Data Transfer Addendum). You may request a copy of these safeguards by contacting us at [contact email].
08Your rights
Depending on where you live, you have the following rights with respect to your personal data:
- Right of access: to request confirmation of whether we process your personal data and, if so, to access that data and receive information about how it is processed;
- Right to rectification: to request correction of inaccurate personal data and completion of incomplete personal data;
- Right to erasure: to request deletion of your personal data in certain circumstances, subject to exceptions, including where we are required to retain data for legal purposes;
- Right to restriction of processing: to request that we restrict processing of your personal data in certain circumstances;
- Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller;
- Right to object: to object to processing of your personal data based on legitimate interests; and
- Right to withdraw consent: where we rely on your consent, to withdraw it at any time, without affecting the lawfulness of processing before its withdrawal.
To exercise any of these rights, please contact us at [contact email]. We will respond within one (1) month, or within an extended period of up to two (2) additional months where necessary due to the complexity or volume of requests. We may ask you to verify your identity before processing your request.
You have the right to lodge a complaint with a supervisory authority in your country of residence. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/board/members_en; UK residents may contact the Information Commissioner’s Office (ICO) at https://ico.org.uk.
If you are located in Canada (PIPEDA), Brazil (LGPD) or another jurisdiction with data protection or privacy laws, you have similar rights under those laws, and we will honor them to the extent required by applicable law.
09Cookies
Cookies are small text files that a website stores in your browser. We use:
- A sign-in cookie (necessary): it keeps you signed in and lets this browser open the tracks it uploaded. It lasts up to one year.
- Analytics cookies and browser storage (PostHog): they tell us how the Services are used, as described above.
- Browser storage for your settings, such as the light or dark theme.
Please review your web browser’s “Help” file to learn how you may modify your cookie settings. If you delete or choose not to accept cookies from our Services, you may not be able to use the features of our Services to their fullest potential, for example you may lose access to tracks you uploaded.
10Your choices
Marketing communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us, such as sign-in codes.
Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.
Your account. You can ask us to close your account and delete your account information at any time by contacting us at [contact email].
11Children’s privacy
We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no part of our Services is directed to children under 13. If you are a parent or guardian and believe that a child under 13 has provided us with personal information, please contact us at [contact email], and we will take steps to delete such information from our systems.
12Security
We make reasonable efforts to protect your information by using security measures designed to safeguard the information we maintain. However, because no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.
13Third parties
Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. This Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.
14Changes to this Privacy Policy
We will post any updates to this Privacy Policy on this page, and the revised version will be effective when it is posted. If we make a material update, we may notify you of such update through our Services, by email, or other means.
15Contact information
If you have any questions, comments, or concerns about our processing activities, please email us at [contact email] or write to us at [Company legal name], [Registered address].